Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: pIvyuK880VRmiUFnJ16QmNlyNi46JcBZqzKuegjiJ7c=
Subject key identifier: 34:1C:B8:5E:5F:38:A3:97:16:8D:52:10:DC:CB:19:6E:4F:3F:23:3E
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 0196C3F0D048B7DB4757C7599CBDC7B30E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 0379
Signing time: Mon 12 May 2025 10:01:00 +0000
Manifest this update: Mon 12 May 2025 10:01:00 +0000
Manifest next update: Tue 13 May 2025 10:01:00 +0000
Files and hashes: 1: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (hash: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: sMoQfib/ageQR9Lu4TKKudx3qVkIaQrVibfZK3ZwBG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:d0:48:b7:db:47:57:c7:59:9c:bd:c7:b3:0e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: May 12 10:01:00 2025 GMT
Not After : May 13 10:01:00 2025 GMT
Subject: CN=341cb85e5f38a397168d5210dccb196e4f3f233e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:eb:9d:80:b3:19:84:0c:89:cb:95:65:12:
6c:40:9b:cb:14:fa:c6:98:27:fa:cf:c8:05:b3:63:
cd:11:88:2e:f7:8a:f5:4b:f7:91:40:80:b9:fd:06:
40:5d:e6:4a:ad:fb:85:a2:04:40:bf:5e:74:9b:c4:
d3:12:76:46:3d:df:36:49:f6:c1:cd:0e:40:17:46:
4b:da:25:91:78:4d:7e:9f:fa:33:1d:98:41:b5:48:
3f:c4:75:a2:19:4f:aa:f6:ff:11:c5:3c:c0:23:40:
f6:d7:14:9d:e2:ba:99:da:b2:9e:bd:d9:da:72:17:
87:03:40:d1:57:ac:3a:50:5c:c0:96:00:ca:32:c4:
b1:c9:98:7a:80:07:74:1c:1f:06:bd:87:1c:6c:0b:
72:93:90:73:d3:73:98:3d:4b:5e:29:b5:4b:e8:22:
84:fa:d9:d7:5c:41:27:2e:19:cd:e3:b6:17:49:ce:
f7:c7:6f:c6:12:7b:a1:92:8d:61:e7:20:f6:2d:b4:
16:2d:2c:0f:07:23:4c:fc:21:1d:f5:c1:52:f2:f8:
b5:76:6a:b1:c2:e6:3f:25:5c:96:7d:36:b8:7f:f2:
9f:a9:4e:aa:53:99:ef:b6:bc:a9:2a:f0:34:4f:eb:
2b:ca:b4:8a:ef:55:bc:14:60:d4:98:ff:85:19:69:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1C:B8:5E:5F:38:A3:97:16:8D:52:10:DC:CB:19:6E:4F:3F:23:3E
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:da:a8:4d:9b:07:76:2a:9c:c4:e6:70:c1:32:bd:23:2b:cd:
28:1e:42:e4:e7:00:87:e7:9a:ad:9f:dd:8a:05:39:fc:59:5f:
a1:10:a1:38:42:27:b1:bc:ec:9b:a2:96:62:3a:a6:96:7e:7a:
57:23:aa:20:12:8e:db:08:c5:28:a6:d9:83:32:ef:46:04:6a:
67:ae:81:38:ab:2d:12:07:02:8a:68:14:8f:0d:05:01:58:5f:
5e:62:99:23:d6:0e:56:02:f9:86:e7:96:75:63:64:ac:e8:ee:
ad:ef:44:e6:7c:98:60:3d:12:d1:60:d4:dc:b3:82:4e:73:6d:
4c:db:f8:9e:11:2e:93:71:2c:a2:5e:79:38:86:fa:5c:42:ee:
33:75:92:1c:1a:53:1d:87:11:78:93:09:16:9a:72:82:ee:40:
e8:16:b5:d8:f3:f5:e4:b3:06:a9:42:07:ef:47:7f:1b:21:5d:
31:ce:a7:c6:ba:98:9e:c1:ca:38:8c:fd:30:05:be:d6:b7:bb:
ba:4f:d6:e7:a6:ab:0d:d0:af:98:bd:71:09:43:c7:20:fa:f4:
6c:f4:a6:fa:d0:a4:57:8c:f7:1f:ad:30:16:0e:a5:4d:20:8c:
b3:83:03:34:39:1f:0c:f4:38:0c:53:a3:57:1f:65:21:8e:3a:
7a:a5:08:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:35:38 2025 by rpki-client