Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: RdJdgezD77duzoSlUs5HPHKRuMiZgp2nooH4bBdwwbc=
Subject key identifier: 84:50:6A:22:14:02:1C:0C:A1:85:DC:18:17:89:E4:0D:07:D6:31:3F
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 0196B9DA5FE647941A9C5BBEA9CE06133222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 11:00:18 +0000
Manifest this update: Sat 10 May 2025 11:00:18 +0000
Manifest next update: Sun 11 May 2025 11:00:18 +0000
Files and hashes: 1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: f/RS87pG6cFUBf+muOXhd45Vtapx2JmGbsoAYesc4wo=)
2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:5f:e6:47:94:1a:9c:5b:be:a9:ce:06:13:32:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: May 10 11:00:18 2025 GMT
Not After : May 11 11:00:18 2025 GMT
Subject: CN=84506a2214021c0ca185dc181789e40d07d6313f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:95:70:84:2b:0d:9f:8c:81:ca:05:f8:15:
e1:7e:01:9a:a7:3e:ef:70:58:89:af:90:67:55:43:
b9:a2:57:40:b5:32:7c:dd:16:4d:c0:54:4d:7f:65:
df:c4:6a:52:e3:84:3e:d5:c6:02:d4:49:61:7e:66:
7e:7d:8f:9c:8d:8a:37:96:41:c2:d7:b9:3b:0e:35:
4e:81:d9:fa:99:e1:be:5f:f0:79:bf:b3:23:70:51:
af:76:aa:63:76:04:86:ed:4b:cf:33:18:6e:c6:d4:
6f:56:ee:7f:20:0f:67:19:eb:10:8b:93:7f:2d:22:
95:42:12:a9:90:99:68:44:27:01:60:2c:a1:c1:36:
d3:d8:54:ab:26:3d:de:3a:2e:29:9f:4e:d9:6e:4e:
f7:af:c6:84:51:10:fa:57:1d:1c:a7:66:46:1f:32:
4e:e6:83:5e:f6:0d:2b:bb:8b:42:47:a7:f7:66:61:
4b:7b:e1:05:a8:9e:38:7a:70:cc:3f:ba:3c:8a:42:
4d:c7:7a:22:b4:b0:1e:1a:69:b6:f2:db:46:de:d8:
2d:9a:a8:18:61:1f:d0:00:47:6c:21:70:ee:c0:59:
ba:a5:d2:3b:a5:c1:da:a1:26:08:2c:1d:a9:af:29:
8d:b1:13:97:38:e6:55:6d:cd:60:04:c1:d1:ac:8f:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:6A:22:14:02:1C:0C:A1:85:DC:18:17:89:E4:0D:07:D6:31:3F
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:57:a0:55:ba:e6:6f:89:05:72:64:82:50:94:b9:97:dc:2a:
2a:5e:74:01:98:5a:37:34:5a:b2:f3:51:0e:20:22:dc:e9:cb:
5e:cf:53:61:e3:b6:2b:79:e4:9c:7f:c5:68:4c:87:fc:d4:16:
46:c8:eb:6a:30:72:af:a9:8d:8f:0d:d1:81:56:48:c0:a2:65:
70:db:65:0c:85:3f:e6:13:8b:be:5c:23:83:f1:79:4c:97:5f:
33:c3:52:88:05:92:04:78:9f:7d:08:8a:af:73:71:13:02:e2:
ce:f8:b2:d0:b3:79:a1:96:d6:33:9e:2d:1e:20:ae:4f:32:70:
4c:c6:f3:72:e1:b6:69:b2:76:1c:43:29:98:7a:50:96:e2:d3:
0f:11:e1:27:7b:9c:87:b7:ff:a0:a0:42:31:bd:a4:1a:d3:a8:
02:6b:08:bd:f6:48:47:93:06:5a:01:c4:d2:45:d5:84:3a:09:
4b:5d:2e:d9:8f:33:41:de:c8:c7:ae:ac:74:aa:22:ec:67:94:
e1:0e:00:81:96:98:d7:68:49:76:24:d4:d4:4b:12:e7:d3:37:
97:de:a4:d9:51:7b:88:29:d9:19:d0:74:96:2b:3c:94:ef:08:
1d:b7:40:da:57:dd:60:8a:c6:7c:c8:fc:23:17:75:29:bb:34:
e2:17:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:45:21 2025 by rpki-client