Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
File: _OTzlnKb9HjmNlSYIfb2lw2JP1I.mft (raw, json)
Hash identifier: o0QCy0Ng3eRazWOJlbgFmmEfabTmqWS3VUUTzKxpDgI=
Subject key identifier: 89:BC:43:FF:CC:92:ED:BF:24:E0:75:0C:D7:36:56:29:C2:9C:5C:42
Authority key identifier: FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
Certificate issuer: /CN=fce4f396729bf478e636549821f6f6970d893f52
Certificate serial: 0196BB243310861F74AC5E24662F726D1BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 17:00:33 +0000
Manifest this update: Sat 10 May 2025 17:00:33 +0000
Manifest next update: Sun 11 May 2025 17:00:33 +0000
Files and hashes: 1: _OTzlnKb9HjmNlSYIfb2lw2JP1I.crl (hash: 8OGEvyv6BxqZcdvHa66UofiBrsSysrdSfojWx1wiC5c=)
2: adNqeNQUFWI4IAHxy1r153UdECA.roa (hash: xLvUeb8ak+yii4A1TZl7dHrog2mgx9j4/AxydjM8K8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:33:10:86:1f:74:ac:5e:24:66:2f:72:6d:1b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce4f396729bf478e636549821f6f6970d893f52
Validity
Not Before: May 10 17:00:33 2025 GMT
Not After : May 11 17:00:33 2025 GMT
Subject: CN=89bc43ffcc92edbf24e0750cd7365629c29c5c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:4c:20:ca:2c:51:82:57:c3:28:cb:7c:71:
61:b3:c2:a4:10:83:a4:b5:16:f6:a3:b5:61:54:1c:
77:53:e9:6e:c4:c2:25:9a:f5:6c:28:bf:80:6a:b8:
cc:7e:4c:26:da:d5:8a:b5:43:79:f9:e3:ea:f5:5b:
b7:37:16:1a:28:7b:e8:c7:03:31:37:34:e8:71:bc:
1a:84:5a:e3:4a:c2:27:ec:9a:a7:2e:0c:6c:29:f0:
ee:0f:b3:e7:eb:70:8f:e1:54:13:ff:c4:15:0b:d4:
90:23:98:b8:2d:59:b7:70:e7:45:d1:7c:54:6f:c2:
47:00:67:24:fc:60:d6:ff:a7:cd:26:11:3e:1e:55:
a1:11:50:60:3d:fc:86:bc:80:3c:56:1c:c2:d9:62:
1e:c7:42:97:a9:33:09:0a:79:ea:4b:63:b2:80:12:
2b:bd:34:47:c3:50:d2:27:e4:83:b5:bd:b8:07:b4:
40:a2:61:fc:09:42:84:be:db:21:85:63:a6:1e:1c:
d3:fa:48:38:95:64:3f:84:5b:c3:65:b2:1d:91:e6:
80:4e:55:d5:96:3d:dd:89:e3:be:55:7d:28:09:aa:
84:e0:9f:36:33:b7:c1:bf:33:2c:ae:6c:dc:92:d7:
c2:bb:83:76:9f:fd:16:26:63:0b:0d:47:44:05:8c:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:43:FF:CC:92:ED:BF:24:E0:75:0C:D7:36:56:29:C2:9C:5C:42
X509v3 Authority Key Identifier:
keyid:FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:42:96:86:df:78:32:e8:1f:a4:54:36:72:82:6b:c7:af:e8:
6a:ab:95:27:f5:19:00:45:b9:0c:6b:e3:01:76:29:a9:ad:e4:
c4:ef:87:ca:f6:f3:7a:d4:ee:7f:a4:bf:5f:7d:e1:fd:78:2a:
55:23:6d:e2:ed:c8:10:ce:d0:b2:bb:95:ea:92:c1:f7:16:07:
f0:b8:a1:cb:27:74:e1:ff:68:c7:aa:c7:93:a4:13:55:ea:64:
ed:4c:4b:06:ac:82:24:cb:f3:7b:8e:c3:69:11:d8:1a:c6:82:
7c:1c:18:fd:50:b0:bc:99:25:6d:4b:44:f2:e4:71:80:52:96:
c4:b9:27:70:17:3b:98:fc:31:10:0e:7d:0f:04:e9:92:f0:1b:
6a:0d:c9:da:58:6d:ee:0d:6b:1e:71:42:cd:4b:0d:e0:ba:59:
b1:5f:d2:af:f4:66:e1:e5:4a:f7:9d:39:01:44:96:70:a1:97:
c6:60:0d:1e:db:93:03:c1:1e:bc:ab:1b:59:63:63:d8:ed:2b:
c6:00:8e:c9:9c:46:e8:83:88:9c:78:29:97:47:30:83:a6:73:
e6:df:7c:26:a6:ed:09:95:c7:f1:1b:53:59:aa:0a:c5:63:65:
c1:14:6e:49:9c:4f:9f:1f:85:83:8d:13:7c:6b:75:b8:70:3f:
ca:03:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:40:38 2025 by rpki-client