Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
File: OQJ3OPl4_tokqdh7DLi7mqevVA0.mft (raw, json)
Hash identifier: YUhPV6HlFzF8hSP712/gdKxWIt2ZxMWY2pr1IzBUQ/c=
Subject key identifier: B3:4E:B2:CA:92:D3:5C:56:36:E4:D9:9F:B5:56:85:2D:47:91:88:7A
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 0196C5A7B8EF8080FD6A13911CF6BEFB7EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
Manifest number: 1542
Signing time: Mon 12 May 2025 18:00:25 +0000
Manifest this update: Mon 12 May 2025 18:00:25 +0000
Manifest next update: Tue 13 May 2025 18:00:25 +0000
Files and hashes: 1: OQJ3OPl4_tokqdh7DLi7mqevVA0.crl (hash: 2xMq5jAuXQjdLWdvUMdKjnJyWLwgsl9nJkmaN5Tx8Yk=)
2: THEjTsFNcxDVZEOdq3GfXqXC4zc.roa (hash: x5CBmcScUC+Y/Wuw5WgYT+dNtpSqSEasQSVqzZJLzc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:b8:ef:80:80:fd:6a:13:91:1c:f6:be:fb:7e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: May 12 18:00:25 2025 GMT
Not After : May 13 18:00:25 2025 GMT
Subject: CN=b34eb2ca92d35c5636e4d99fb556852d4791887a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:2b:55:66:b4:62:06:a0:16:db:5d:2d:b0:
29:ff:74:23:0a:d9:85:87:6d:89:fb:95:0f:ba:46:
f2:e7:ec:a2:87:95:ae:3b:6b:73:64:a8:8f:88:c4:
40:37:c7:24:6a:24:1e:07:20:e8:a3:04:a4:c3:48:
cc:b4:78:54:ce:35:32:89:f7:61:f8:68:86:40:a9:
42:f6:5c:68:2c:56:e9:13:88:b3:70:16:8c:80:f3:
6a:d6:12:f0:9e:67:4e:ff:16:ac:83:55:4d:f7:b1:
f7:a2:e6:ea:38:8a:5d:b9:9a:3a:a0:15:22:43:33:
2e:61:fb:4f:a6:52:73:7d:1c:65:9d:4c:7e:b1:f2:
29:31:d1:86:c7:47:81:62:95:1e:13:d9:b9:bd:ef:
62:af:07:7e:6b:24:26:7d:25:ab:22:d8:42:39:df:
f6:f0:9e:32:66:f8:34:35:9c:9e:46:82:df:31:40:
fe:1c:f9:e0:66:38:7f:29:d1:4e:a8:69:41:a9:7b:
2b:74:a4:6f:50:0c:d6:d1:0f:ab:3d:7a:a5:3c:13:
0c:92:f4:4e:4b:ef:e9:9c:9d:d6:00:8c:12:37:2d:
43:c0:93:cc:35:96:a5:3f:f2:85:7a:92:e2:bd:9e:
14:e0:85:8c:2b:8b:bf:a5:42:b3:07:ce:b1:d6:29:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4E:B2:CA:92:D3:5C:56:36:E4:D9:9F:B5:56:85:2D:47:91:88:7A
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:98:87:fc:42:53:b7:41:7c:ae:21:c4:77:c5:69:75:b8:eb:
18:8b:c6:d1:a0:39:ee:f7:42:aa:ef:a0:b1:60:3c:56:a0:67:
ec:8c:b7:0d:13:3c:bf:34:28:dd:a8:ef:ad:76:f8:ac:0f:b5:
b7:2f:cc:07:35:3c:d5:90:5f:eb:3c:56:9b:1c:cf:02:64:bd:
0b:a9:02:c4:a5:51:4f:a4:cb:2a:89:28:f2:af:9e:25:a0:e5:
23:22:22:9b:46:d8:18:03:c3:46:ff:54:81:49:20:de:49:73:
ec:92:5b:52:3a:4a:46:e6:17:28:38:16:54:b7:f9:6e:60:3d:
34:24:d6:d4:e3:fb:7d:26:db:0e:02:68:08:51:c0:c0:df:b3:
b6:c0:e1:61:1b:2a:f3:61:e1:60:bb:49:4d:4f:77:b9:63:4b:
fe:21:b8:da:5c:8a:26:e3:51:08:6a:52:a7:ba:d6:ed:76:fa:
33:5d:f6:6a:90:5f:99:04:d1:14:20:37:24:81:01:90:d8:51:
b2:e9:96:5a:db:2f:f5:b6:64:bf:6b:b4:a4:99:33:a9:b5:7c:
e1:70:cd:96:4f:00:4e:3e:54:fc:5f:d1:19:c3:09:94:7c:b7:
4b:4f:24:a4:50:df:86:37:fc:76:22:c9:a0:12:ae:a6:19:10:
9f:23:60:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:20:32 2025 by rpki-client