Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: WhcoMJGlWrcliLwXptOKUrqN0QezxfWmdk/f/XhAcvM=
Subject key identifier: CC:7B:A8:FD:27:44:2B:DA:4E:59:32:69:D4:9C:01:96:3A:0F:57:00
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 0196BD1252594DAA71F9CED83D3680476961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 02:00:16 +0000
Manifest this update: Sun 11 May 2025 02:00:16 +0000
Manifest next update: Mon 12 May 2025 02:00:16 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: Yqrf10EckxOMqhmIqaKuYcPA82vKn/KcUdqDy7YIjV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:52:59:4d:aa:71:f9:ce:d8:3d:36:80:47:69:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: May 11 02:00:16 2025 GMT
Not After : May 12 02:00:16 2025 GMT
Subject: CN=cc7ba8fd27442bda4e593269d49c01963a0f5700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:c1:a4:ff:99:a8:ad:e9:42:2e:3e:05:ee:
74:59:f3:f6:d8:fb:41:77:d8:92:d5:7d:90:b3:42:
b9:59:62:a6:55:ff:a2:aa:d0:3c:11:59:7c:43:8c:
bf:af:48:50:67:1c:9b:be:5d:82:bd:57:24:8d:cc:
0d:58:83:77:ca:7c:5e:b1:eb:68:e2:4f:d5:27:15:
8d:6e:ab:7c:3f:97:1d:87:d2:a4:f9:c0:54:cd:a8:
f2:23:62:8f:a7:78:26:8a:36:de:fe:c9:81:72:ef:
19:1b:92:64:a2:e2:5e:bb:ff:83:85:9d:c5:96:8c:
37:af:9f:af:ff:0f:84:69:9f:a0:c7:bd:42:a0:59:
82:b6:66:20:5a:e8:82:fe:bd:5f:6b:8a:5a:e9:e9:
d9:a4:c5:f6:9e:9d:dd:8a:97:e4:f3:2a:05:bb:f6:
2a:37:c0:4e:c4:b7:d0:24:34:ea:04:99:22:fe:c0:
07:c9:2d:64:35:8a:b5:c5:57:c8:93:c9:99:8d:0a:
62:64:7e:0a:80:f0:37:9d:7f:73:66:53:74:fe:55:
0a:bf:d9:3f:74:16:68:04:10:0a:66:9a:3d:aa:db:
11:fb:f4:4c:b6:95:92:c7:9e:ef:a5:c4:39:21:a2:
48:13:6f:b7:da:a4:88:61:39:1e:44:75:1b:db:3d:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7B:A8:FD:27:44:2B:DA:4E:59:32:69:D4:9C:01:96:3A:0F:57:00
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:7f:f1:a0:7e:3a:28:bc:ab:c4:55:91:c9:f8:25:31:34:
22:c5:31:25:be:58:88:1a:29:0d:71:91:06:fe:f1:88:02:82:
03:c0:b1:72:ee:92:4e:11:e7:87:3f:8b:a5:4b:6a:bc:35:8e:
c8:a6:a5:68:4b:92:07:5a:f3:c1:39:f1:7a:e7:03:d6:b8:10:
25:39:2e:a3:22:f9:d3:a2:d2:b2:0d:dc:fe:4d:64:91:bf:10:
29:a9:1e:1c:dd:2c:7f:43:6e:bd:81:12:2d:3a:37:b7:15:11:
bf:98:57:b8:27:94:42:dc:76:25:ff:36:9a:e5:ff:dc:8f:ce:
8c:3c:04:52:2d:f6:af:c9:62:84:21:1f:15:ec:38:8b:d4:e6:
e6:d3:c5:07:f4:63:f5:e2:0d:4e:9a:93:d5:0e:c5:5f:a4:1d:
cb:0c:a6:f0:99:82:75:5a:81:79:c7:1f:bf:73:58:d0:45:5d:
b6:ba:3b:e4:6a:95:b1:7a:4f:c7:0b:39:d5:7c:14:42:c2:37:
ee:08:d1:f7:c3:4d:a4:65:6e:d5:10:c9:c9:06:28:af:73:8f:
0f:bd:3c:4e:78:b3:d2:a6:2c:07:7c:d4:4f:34:6e:01:c9:ae:
47:a3:32:3a:04:d4:c9:7d:ef:16:bc:82:4e:5b:5b:9b:31:27:
7d:fd:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:54:03 2025 by rpki-client