Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
File: OXh5r_LENp0GxPEZpv16WhPbhpc.mft (raw, json)
Hash identifier: Iu0Mqry++LpVqIT166htWBYZTyNYTMFle06k2cpmF4w=
Subject key identifier: C5:80:DE:3F:2C:CD:51:8A:F1:26:49:F8:82:D3:7D:4E:C5:33:07:B3
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 0196C7280C678FC63FBAAEAA5116E5CB7CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 01:00:12 +0000
Manifest this update: Tue 13 May 2025 01:00:12 +0000
Manifest next update: Wed 14 May 2025 01:00:12 +0000
Files and hashes: 1: OXh5r_LENp0GxPEZpv16WhPbhpc.crl (hash: 4acZXKtKwG1WEG/2uRcFmqiin+bbODrkGC7k8pPPzMU=)
2: WSWkyM6MFxA1ZA-zAVUSwdgeJWI.roa (hash: 5tkFh2eMBLLpaXb8k6oCA+R1YYUjz+3ZjunAdpKVKWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:0c:67:8f:c6:3f:ba:ae:aa:51:16:e5:cb:7c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: May 13 01:00:12 2025 GMT
Not After : May 14 01:00:12 2025 GMT
Subject: CN=c580de3f2ccd518af12649f882d37d4ec53307b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:95:19:5e:e1:6f:7f:dd:27:c1:cc:fe:82:
b5:c9:b4:5e:62:1e:0c:90:92:3f:ee:f5:cf:4f:b4:
ae:2b:e8:4d:df:73:ef:10:ae:65:58:d6:06:d0:31:
43:b2:d8:54:c7:f2:44:43:39:38:c7:df:a8:e8:c4:
d2:9d:7b:ed:da:41:a6:ce:74:97:9a:e4:f0:75:24:
0e:5d:25:01:1e:c1:85:e4:7b:5a:cc:5d:2e:e1:50:
b1:bc:d9:cf:98:1d:7e:33:fb:e3:1e:00:db:78:27:
68:c1:c3:1b:5b:80:46:fe:80:72:62:63:c7:75:6a:
42:d8:f8:a5:4e:17:d4:c7:2c:f6:a2:1c:ff:b0:bb:
18:fd:53:50:f8:8b:79:87:d2:4e:e5:6a:7d:d0:08:
5d:b3:fe:5e:c2:8c:02:aa:5f:3a:2e:b4:8b:1e:ce:
22:da:1e:60:87:47:0d:72:3d:1c:c4:ba:e9:00:c8:
82:d2:df:72:06:d9:f4:67:09:ef:9e:33:f0:16:b2:
c7:23:7b:01:8f:c8:37:38:16:42:f1:fb:63:b2:3a:
e6:48:1e:2a:92:66:d6:2b:c7:34:c5:42:59:38:99:
08:6e:e8:a3:58:1d:50:50:96:41:87:e7:3b:f4:80:
99:68:58:70:0e:79:d7:39:67:22:4d:fc:28:54:5c:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:DE:3F:2C:CD:51:8A:F1:26:49:F8:82:D3:7D:4E:C5:33:07:B3
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:96:36:4a:eb:d6:bc:3d:77:53:c5:e8:12:76:66:6e:dc:e3:
5d:65:a9:73:b4:43:1d:e1:b1:90:8c:c0:e5:73:f1:ab:d8:9c:
68:8f:80:b3:fc:31:7f:ba:a3:48:bd:9f:3b:a5:ea:72:d7:5a:
a0:72:73:c5:d4:44:43:b4:d9:4c:bb:87:20:bc:98:64:75:8f:
4a:94:b2:a5:0a:3a:f0:67:dd:65:16:04:6f:cd:8b:fe:0b:df:
13:8b:c2:3f:43:c6:3f:93:2e:bb:4b:cb:a5:b4:80:bc:f6:21:
7b:b5:28:99:0c:dd:e8:f0:aa:91:b5:c1:12:d2:00:ee:a9:6b:
82:ce:2d:c2:12:ae:f4:48:39:34:f6:8a:ac:dd:e0:4e:ba:09:
5c:c5:ec:7c:e1:34:2e:94:41:db:91:7d:e7:e9:5c:ea:33:fd:
ca:a5:b3:92:d3:28:4e:ea:76:e5:a2:36:92:36:a3:b6:23:f4:
00:05:b6:67:87:80:8e:12:08:f0:eb:b3:8c:94:3f:45:4a:b7:
8c:b2:48:bd:f4:45:53:00:6b:82:3b:66:e1:94:fa:68:74:18:
d3:4a:45:49:29:81:a6:f1:89:1c:fd:ad:c0:9d:e1:fc:90:1a:
10:46:db:7e:85:0b:9a:57:df:31:bf:9f:20:06:63:6a:f0:c0:
19:b6:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:14:45 2025 by rpki-client