Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: fDHUWmD9sOpUq+IKDtdzs3e3lO0bUNogEOuaQ8xnBN8=
Subject key identifier: 0F:B7:C3:4E:BC:47:85:71:CE:8E:7E:53:1D:6E:BC:4A:02:63:3E:12
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 0196C64C4C4DDAF21404A8F5B1DE5F17B1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 153E
Signing time: Mon 12 May 2025 21:00:11 +0000
Manifest this update: Mon 12 May 2025 21:00:11 +0000
Manifest next update: Tue 13 May 2025 21:00:11 +0000
Files and hashes: 1: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: NWsHrw+uTeh501w11S0qoSzlRTcyGcAsYDALbgKsJ7c=)
2: QMe1cQvSWWyTmlxs7mg5bNBSDlw.roa (hash: iejToeWDmgQDOWHcoY74bMQ91/UDUCJzy2kftI9HQTs=)
3: abyvfDmy4Q3zVDJIfxfSkrtZdLo.roa (hash: IZm94vPLNr133XeI56Dl5DQUBKwgG1pbFRgf8ws+6Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:4c:4d:da:f2:14:04:a8:f5:b1:de:5f:17:b1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: May 12 21:00:11 2025 GMT
Not After : May 13 21:00:11 2025 GMT
Subject: CN=0fb7c34ebc478571ce8e7e531d6ebc4a02633e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:dd:f3:b5:d4:2a:be:62:8d:c2:07:43:52:
76:bd:c8:16:24:d4:b3:51:e1:af:c2:1d:af:ae:92:
a3:1d:de:17:f3:e8:58:da:a2:97:c6:db:5e:5f:6f:
a1:92:9c:43:22:4e:26:6d:9f:0f:fd:e1:af:8c:50:
aa:be:1d:27:2c:dd:b6:4a:13:7b:88:c7:9f:db:7c:
09:9b:e4:4a:39:94:24:c0:02:9a:31:da:a8:87:c2:
5d:2e:38:28:46:86:5b:a3:78:5a:46:55:30:2e:d3:
96:32:5f:0d:e9:24:f0:b1:e5:53:18:28:c8:34:3c:
bc:f4:94:de:36:b4:b1:4f:31:2e:0a:50:03:8e:38:
77:eb:e3:8d:66:f6:77:ad:18:6a:9f:b7:0e:45:92:
a1:36:9c:77:83:48:1e:f1:87:8e:4c:93:96:ba:8e:
fa:00:81:94:ac:45:62:38:ae:b4:eb:b1:ec:77:bd:
d9:20:d3:1f:2f:a7:d0:fa:e0:44:28:7d:26:85:38:
ba:35:bc:89:a3:ae:40:6c:73:5a:c5:10:3f:7c:a8:
aa:c9:6b:1e:4d:53:57:db:e3:a6:d1:60:3b:97:d8:
c4:90:3a:ea:47:66:11:26:99:c4:bc:43:18:2a:72:
dc:b1:78:85:01:20:5e:05:a4:e7:2e:51:e2:bd:48:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B7:C3:4E:BC:47:85:71:CE:8E:7E:53:1D:6E:BC:4A:02:63:3E:12
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c8:1c:12:85:d7:7b:43:e5:2a:69:22:bf:c0:c4:c7:56:94:
73:ee:98:92:1e:8f:6d:71:bd:7a:08:17:23:b5:45:91:e1:59:
9c:eb:97:66:ca:3a:59:3a:e0:f7:84:dc:b5:1b:46:39:38:50:
50:db:2f:b9:50:55:c5:da:03:3d:e1:46:45:1b:33:48:55:33:
47:3e:f7:95:52:92:04:1d:30:14:8d:6f:42:70:cd:73:e7:98:
dd:45:85:7f:c6:5f:2f:0d:ee:1f:d0:55:04:ec:13:83:28:94:
12:1f:d8:71:6e:da:2a:82:27:75:b0:28:e4:8f:35:ed:d3:69:
99:b7:2f:e5:47:5d:d5:41:57:2a:be:11:11:23:eb:06:87:ce:
89:6e:78:ee:14:81:56:55:d0:2d:f7:33:97:1d:23:eb:64:ec:
be:cc:32:05:63:f0:ee:53:a0:d0:a5:56:10:47:63:51:cd:0d:
f4:e1:7a:c3:d2:75:b3:3a:8d:33:e8:d3:ef:56:30:8f:70:57:
84:38:50:e7:95:cb:f9:04:d0:2e:4a:ed:6d:b4:eb:2d:96:51:
d8:02:7b:68:94:1e:3c:34:92:e6:01:08:e6:1f:a6:ca:8f:82:
bb:93:a5:63:e5:7d:28:5c:f7:0a:fe:de:3e:97:8e:1b:d1:50:
91:cd:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:01:29 2025 by rpki-client