Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: zmaFnBKZwlkinVHK2H94Fa4l+soi0zwrXnn6fNo0lVE=
Subject key identifier: A8:B1:3C:9D:42:73:21:7D:77:22:A3:69:BF:26:68:F4:82:12:9A:21
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 0196A72FF5A9E981D9F414FA4FF485B23BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 152C
Signing time: Tue 06 May 2025 20:00:59 +0000
Manifest this update: Tue 06 May 2025 20:00:59 +0000
Manifest next update: Wed 07 May 2025 20:00:59 +0000
Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=)
2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=)
3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: xC4wOqS1ecL/xQL1lL32/esUlO5q3w3pJYm4Iy3ZABA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:f5:a9:e9:81:d9:f4:14:fa:4f:f4:85:b2:3b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: May 6 20:00:59 2025 GMT
Not After : May 7 20:00:59 2025 GMT
Subject: CN=a8b13c9d4273217d7722a369bf2668f482129a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:44:7f:5e:3d:9e:75:28:ac:41:0c:1c:2d:
e8:d4:d5:12:22:48:9d:bb:32:56:32:4a:e7:b5:da:
7d:c3:98:a0:52:0a:2d:30:e8:e1:1f:aa:6c:a2:5a:
0e:57:96:c1:24:84:fc:9e:19:91:44:2d:97:85:97:
f8:dc:ca:de:c7:d4:b7:42:62:7b:7c:11:99:df:6a:
eb:5e:05:99:af:9c:71:f2:c7:fa:f9:19:54:49:6c:
16:80:65:34:81:e1:88:7b:86:19:85:c6:fa:40:ee:
cf:c1:df:62:d4:6f:e7:df:40:7f:cf:9c:ad:4e:9e:
99:b3:38:90:1b:e6:a3:d8:0e:92:d2:f3:77:3b:4d:
ae:80:d6:f7:b9:c8:80:f7:1b:e6:5c:ae:0d:44:22:
4a:63:3b:4c:98:50:96:4a:af:a8:06:4f:0c:11:a2:
fc:27:77:be:32:92:16:a9:a5:f4:58:dd:8e:1e:51:
c5:14:72:e0:b1:a0:cc:49:e3:ac:65:e6:da:47:12:
56:a0:33:34:1b:eb:3c:fa:d9:17:56:c0:56:e3:2d:
63:98:7c:e9:54:4d:c0:a5:af:f0:aa:20:5a:90:49:
58:1f:42:98:67:aa:b3:9d:1b:36:94:b6:cd:36:6d:
bc:10:a6:0e:ba:a1:71:1b:d2:cc:ba:50:86:06:c8:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B1:3C:9D:42:73:21:7D:77:22:A3:69:BF:26:68:F4:82:12:9A:21
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b2:de:50:41:ea:e6:5e:6a:24:50:78:5b:20:22:de:cd:36:
1c:24:fb:f4:99:2d:1a:00:06:a3:c2:08:ba:d2:9e:5d:ef:71:
9f:76:4f:ef:4c:c2:16:88:1d:d0:b3:b0:33:24:b0:c4:b5:fc:
3f:7c:af:83:94:ee:02:cf:a0:de:26:c2:d2:e0:0b:9f:c8:15:
73:70:c5:f0:0d:90:35:50:6e:9e:17:67:a2:97:48:d8:95:6b:
ac:02:30:a5:95:72:9d:41:73:8b:78:0f:ea:40:10:5d:9e:3a:
4a:ad:80:d4:da:49:f5:63:b1:5c:75:c3:6f:56:71:75:62:28:
d3:7e:48:2b:4c:78:a4:bb:2e:fa:fd:f7:a5:0c:0d:69:e8:bc:
e7:b3:7d:ef:00:9d:e2:94:4e:1e:9f:eb:93:ec:16:41:6d:5b:
a9:4b:79:c6:16:0a:3a:82:d5:f6:44:0c:50:20:fe:c3:b5:b2:
2e:45:ce:46:96:db:4e:a4:4f:d5:78:13:76:c9:f7:a2:30:f1:
e7:2a:b0:a4:a3:e9:70:ae:ea:78:11:1d:cc:55:5e:b2:c8:54:
f1:c6:28:17:5e:ad:de:fd:40:54:47:88:6b:de:8e:d6:78:9c:
97:84:be:2a:5c:91:83:4d:a5:19:56:26:79:0c:3c:fd:f0:d4:
33:41:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:35:33 2025 by rpki-client