Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
File: Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft (raw, json)
Hash identifier: RinfFSUUkFGhKiP5gHXRNkoHs4yitKUiVXIxeoJICXI=
Subject key identifier: E4:73:7F:A4:C2:65:79:73:C2:4B:70:6C:8B:13:8D:EA:C8:E6:65:D7
Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
Certificate issuer: /CN=3adfd48a97720cd854029ddb266c51f91f07670d
Certificate serial: 01969CE2BF190356D9C92787004AB4C66AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
Manifest number: 0B23
Signing time: Sun 04 May 2025 20:00:27 +0000
Manifest this update: Sun 04 May 2025 20:00:27 +0000
Manifest next update: Mon 05 May 2025 20:00:27 +0000
Files and hashes: 1: Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl (hash: guHUs/KhSYSGg077uwk9DqieF/XTvlIYnjK2BO60Nd8=)
2: vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa (hash: lyBGyAokiSjopS7O45WDbuUZk8SIrQSCpnYKsmtEQ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:bf:19:03:56:d9:c9:27:87:00:4a:b4:c6:6a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d
Validity
Not Before: May 4 20:00:27 2025 GMT
Not After : May 5 20:00:27 2025 GMT
Subject: CN=e4737fa4c2657973c24b706c8b138deac8e665d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:0d:8a:5b:52:d1:6e:14:85:7b:73:0b:09:
96:a1:a8:ea:96:83:79:a6:9c:e2:7f:3f:90:cf:75:
95:1c:7d:a3:d7:9d:e4:04:fb:78:46:58:b6:9f:0d:
26:47:f6:aa:8c:da:ce:e0:89:58:2c:43:56:37:b0:
e0:67:46:76:02:61:4b:23:c1:9a:7a:cc:c5:b4:48:
88:04:7f:2d:93:63:23:06:b6:97:8c:60:b7:09:be:
1f:1d:c1:25:bb:07:74:38:92:c7:ca:8c:5c:29:a4:
48:4d:c0:f9:4d:3f:98:ab:c5:27:c0:48:bd:ed:dc:
2d:13:27:5e:75:89:ad:96:3c:ac:59:f2:13:11:03:
79:9f:bd:29:22:72:29:72:c3:92:47:40:df:13:d0:
45:8b:1f:ad:01:73:6a:28:9a:fd:c6:e9:af:01:de:
58:9e:e8:55:db:60:aa:1a:39:7a:a1:b7:4c:6d:18:
14:66:66:7a:78:67:bf:fc:2d:15:95:d0:68:2f:01:
ce:bc:da:01:ff:8c:61:ee:ef:33:13:aa:4c:a6:81:
bc:dc:65:fd:38:e3:46:2b:7b:ad:f6:1f:a1:1b:02:
a2:1a:bb:ac:21:dc:01:00:e7:ee:d6:c7:fb:68:db:
cc:92:2b:17:53:f1:b0:c7:31:cd:a7:74:3d:06:20:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:73:7F:A4:C2:65:79:73:C2:4B:70:6C:8B:13:8D:EA:C8:E6:65:D7
X509v3 Authority Key Identifier:
keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:16:16:a0:9b:79:74:e9:7f:32:1d:74:88:4d:2d:c5:2c:b0:
ab:79:ed:62:a0:b9:d1:a2:15:96:f2:49:12:c3:ce:c4:3f:31:
21:97:06:0b:9a:e0:dc:ac:8f:6c:a8:08:fc:9c:39:6c:a4:f1:
8d:09:25:19:93:9d:e3:59:ad:7f:f4:9b:4f:da:df:61:a1:06:
ea:04:a0:ee:91:8d:ac:23:27:3c:c8:fc:89:a2:4a:cc:7d:8d:
bc:df:4f:43:8f:38:b2:3a:9a:7e:58:07:48:3a:93:75:75:7a:
06:9d:07:23:c0:5a:ac:60:a3:41:67:85:2b:ea:b1:29:89:08:
43:91:c8:bb:5b:e5:f6:c2:fe:e1:72:56:95:fb:b3:aa:de:5e:
21:6d:55:b0:9f:ff:fc:62:9f:b2:6a:9e:6b:38:ae:22:38:94:
67:bc:36:a5:2b:a6:d3:76:4f:0d:d9:ff:f8:51:4a:e3:8b:ce:
4a:99:e9:8b:55:3b:27:f4:0b:a0:5c:0b:c9:b7:fc:4f:cc:ce:
06:21:9c:c5:dd:84:2c:a3:b6:8f:07:f5:8f:0f:8d:ec:08:9a:
6b:d1:14:af:3f:61:0b:9a:b8:fd:ea:cf:2d:39:81:64:24:e2:
f9:6f:b8:9e:b2:d0:d2:d6:ee:a1:2d:06:7f:64:e4:1e:ad:62:
c6:52:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:16:57 2025 by rpki-client