Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier: vmFKp07ldT3BEVC2pkUmUuIDYpCPhZcGP6BmIfPQ6AY=
Subject key identifier: 04:4B:E0:88:8A:6E:EC:07:9C:BE:48:BD:36:3E:C3:6E:AE:A3:3A:DA
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial: 0196BA11B210E446264ECC3F64E5E179814A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 12:00:43 +0000
Manifest this update: Sat 10 May 2025 12:00:43 +0000
Manifest next update: Sun 11 May 2025 12:00:43 +0000
Files and hashes: 1: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: vICptb5ZlCPv6ZDRS/F4tpI8/OOtXHK7CQJfw2d+JeY=)
2: rtw5EuFYH3ySq0jw3-ZmGwFMoqo.roa (hash: Ii5lxajvlSV2gkqSCAYWVLgdyHye7gIbfTFfAGtSUlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:b2:10:e4:46:26:4e:cc:3f:64:e5:e1:79:81:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Validity
Not Before: May 10 12:00:43 2025 GMT
Not After : May 11 12:00:43 2025 GMT
Subject: CN=044be0888a6eec079cbe48bd363ec36eaea33ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:3b:59:7e:b7:38:82:b6:a9:20:bb:38:0e:
a6:2b:57:bf:d0:90:bf:e1:62:be:0e:da:99:b5:56:
6c:73:20:61:e7:3d:3d:a3:27:d2:7b:75:9c:61:31:
ce:7c:0d:86:56:2c:bf:45:75:c1:77:76:81:f1:e3:
35:b4:23:a8:6f:c8:49:02:89:33:1e:fa:e1:6e:26:
a4:42:73:36:88:06:79:a4:9c:82:09:7a:5b:a4:16:
f4:05:16:53:8d:66:e2:8c:1f:70:11:15:01:1c:80:
a2:40:81:f0:0b:e6:f6:10:d9:7b:39:a0:7c:50:55:
98:06:3b:45:ec:1f:b8:2d:00:96:c5:eb:fb:e6:09:
c2:8b:c2:a7:28:48:50:e3:72:d4:82:f5:af:3e:8b:
34:1d:88:f0:d5:ff:d5:9c:b7:2e:ca:e6:d7:23:0e:
50:ea:22:95:e2:f2:97:28:e1:ae:67:88:51:97:02:
ec:a5:1e:ef:db:2f:f8:0b:0c:7f:e6:4c:1a:47:19:
34:4d:56:91:52:25:2a:61:81:cf:ae:ce:a7:50:2b:
f8:45:67:f5:9b:c6:21:fa:ff:db:e0:77:0f:98:ab:
f6:94:e9:8c:ab:46:93:35:b4:19:cf:f3:42:4d:d9:
38:f3:31:bb:bc:fe:93:2d:d5:a4:76:b8:7b:7f:09:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:E0:88:8A:6E:EC:07:9C:BE:48:BD:36:3E:C3:6E:AE:A3:3A:DA
X509v3 Authority Key Identifier:
keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:90:2e:ea:54:45:30:66:18:f3:e2:08:d4:03:aa:fa:d2:ec:
ed:6f:e3:01:69:ee:f1:2e:f1:1a:4f:dc:e6:8a:21:b8:e2:ad:
5d:80:a2:90:18:1e:7a:7f:07:29:a8:d6:7a:c4:6e:bf:e9:75:
c8:48:53:8d:8a:d0:14:bc:b4:1a:b1:75:47:98:5b:21:ca:48:
3e:64:58:a1:02:66:82:fc:23:30:7f:77:fd:97:69:10:4e:c8:
93:34:c8:ca:55:91:05:44:33:d9:3b:cb:c9:b2:c9:47:f0:3f:
b1:fc:57:52:60:5d:db:54:15:32:4e:8a:95:f3:53:bd:3b:5c:
24:9b:b0:3a:4b:dc:7a:ab:2a:c9:d5:08:f8:b1:fe:84:0d:b9:
e2:ef:b7:08:b9:bd:68:c4:53:dc:9b:6d:69:47:16:59:0e:96:
59:aa:c3:bc:12:e9:d4:82:80:3d:50:a6:2c:49:78:a0:49:34:
ec:af:49:a3:e3:58:d8:3b:2f:74:90:4e:ed:77:95:2c:c2:f6:
fc:1f:91:da:80:84:83:69:0f:e0:b5:6c:20:87:95:18:ba:54:
71:34:5c:ac:af:ed:18:41:53:d1:fe:03:b8:50:fa:bb:d4:a9:
99:33:14:3f:e6:62:e4:51:36:99:52:28:66:b1:de:9a:ed:b8:
f8:9c:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:13:02 2025 by rpki-client