Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json)
Hash identifier: iCr5vs51DwIAFqUCGeO6ciLBRjlTfK34IvNxRX26TcA=
Subject key identifier: C2:C5:A3:E5:A6:97:84:54:8E:CE:13:41:B5:9B:0B:E4:08:86:D1:BE
Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Certificate serial: 0196C5DE877F644D351609E93F46B33F94CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 19:00:17 +0000
Manifest this update: Mon 12 May 2025 19:00:17 +0000
Manifest next update: Tue 13 May 2025 19:00:17 +0000
Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: dQ8CuNhjiAwYMan1hgweGs4ue+xqJXBhxFWDh73+ecQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:87:7f:64:4d:35:16:09:e9:3f:46:b3:3f:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Validity
Not Before: May 12 19:00:17 2025 GMT
Not After : May 13 19:00:17 2025 GMT
Subject: CN=c2c5a3e5a69784548ece1341b59b0be40886d1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:ac:f1:8c:d5:1e:62:0e:53:36:c9:78:77:
a4:ac:76:c3:d4:2d:fb:53:b1:a1:b0:38:79:df:79:
47:b7:e1:0d:1b:42:93:a7:15:5f:38:c9:05:b0:94:
13:16:58:66:1c:c6:22:8b:d8:c5:e7:62:61:f6:89:
c6:32:5e:3f:45:fb:6a:9a:84:36:fb:f9:b1:34:d9:
73:d2:58:32:ee:31:9b:7e:49:55:37:54:70:f1:b4:
32:e9:0f:42:1b:6b:7d:50:ce:f2:4e:8b:f2:72:9b:
1e:fb:ab:2a:d6:43:3d:e4:cf:81:be:fd:4a:be:aa:
77:eb:5f:c9:5d:21:1e:9b:7b:a4:41:2d:f0:55:47:
03:64:bc:e7:37:df:51:fc:80:b7:01:05:5f:e9:73:
1c:cc:12:81:7b:17:a3:7e:b4:29:17:ea:5d:90:c1:
79:b1:76:ad:55:e2:a3:3f:de:1e:53:44:20:72:5e:
1e:04:6e:79:fc:31:d5:a3:b8:ec:24:d7:12:5e:70:
1c:10:1d:bc:f2:d4:88:ea:c4:08:c5:71:06:d3:0e:
ed:32:92:29:39:a8:0c:73:9e:f9:06:d9:8a:ef:f0:
dc:44:5f:e0:00:8b:43:d4:8b:75:27:4f:5f:50:62:
57:c9:21:8f:7f:34:0e:36:1e:22:e0:2e:a7:48:24:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C5:A3:E5:A6:97:84:54:8E:CE:13:41:B5:9B:0B:E4:08:86:D1:BE
X509v3 Authority Key Identifier:
keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:2d:15:54:ab:c9:1a:f4:65:5e:fb:b8:fb:3f:b8:5b:90:
c4:71:08:43:d0:94:e3:ae:87:44:38:fe:ba:2e:9f:73:4f:ec:
35:b1:a7:17:cc:cf:93:7a:5c:4b:b4:c9:1c:42:94:94:6a:e3:
83:88:94:8e:4b:05:c2:a5:b9:70:ca:ca:ea:da:95:b1:a3:5a:
d9:3a:66:4b:a9:95:30:9c:63:7d:f0:39:fb:59:f1:d3:e0:64:
33:2b:be:77:4e:57:f2:2e:f4:75:c9:62:3a:a3:19:68:9b:f3:
16:b0:eb:97:c7:fe:c2:96:85:de:42:a7:8f:34:4f:43:a1:73:
41:c4:d8:4c:18:9f:06:89:8b:e2:b9:d5:89:d8:f5:12:8d:4f:
0d:ab:6a:a5:d2:b9:21:d2:ce:92:1d:52:43:89:27:26:8d:b2:
8c:4b:b8:75:c2:28:61:7d:28:63:ae:a0:e0:19:66:e6:b1:4b:
9a:e6:53:24:da:cd:24:1c:70:ac:0c:cf:83:83:37:50:62:06:
2f:78:d8:ab:bd:a1:fb:e3:a2:dd:b3:1f:83:95:89:3f:2b:1d:
e6:02:e4:8d:2b:5b:a6:8c:05:9c:24:e2:41:2b:ea:d2:52:75:
8e:f6:c8:df:54:db:0f:8d:39:1f:e4:47:f7:7b:2f:1c:da:50:
ae:47:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:35:20 2025 by rpki-client