Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier: eAiCtoPydapUtXF9h3FJBVSCSoYjP4S18BGr6n7d9/M=
Subject key identifier: 69:52:7C:C5:84:73:87:26:EA:C1:64:41:AF:74:71:93:A1:F6:00:E6
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 0196BD811CC90C74F210A3D9A354050F4DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number: 13D2
Signing time: Sun 11 May 2025 04:01:17 +0000
Manifest this update: Sun 11 May 2025 04:01:17 +0000
Manifest next update: Mon 12 May 2025 04:01:17 +0000
Files and hashes: 1: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: eAr1UyXdcVZqETsYDS+0SSlUnbh7kaZAskVjGhqLstQ=)
2: i7yXvmlWG45A5KxBFSXl668mPOM.roa (hash: xpvrCv1mTXlVyotmQuRYzvYT5pY/lTfAVskj11L66Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:1c:c9:0c:74:f2:10:a3:d9:a3:54:05:0f:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: May 11 04:01:17 2025 GMT
Not After : May 12 04:01:17 2025 GMT
Subject: CN=69527cc584738726eac16441af747193a1f600e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:ba:16:9f:91:31:e7:6e:63:9b:0b:e2:1c:
98:fd:9a:ca:8d:03:e2:00:f1:28:c4:67:be:17:d0:
2b:a7:63:ad:62:1e:ad:91:d3:74:fe:70:54:39:a8:
5b:8f:96:24:7b:90:8b:c5:78:ff:ca:40:6f:92:d1:
4a:2f:95:7c:1d:4b:76:84:ec:ba:b6:8a:33:ed:61:
66:3e:29:0f:a4:c7:05:65:89:be:18:45:23:78:c7:
f9:74:35:a0:d8:e8:a7:00:fb:b4:bc:09:ac:f9:d6:
e7:9d:5a:b9:2f:4a:1e:ab:61:0a:24:69:ae:74:cf:
f3:f5:af:3e:fc:bd:56:ca:11:11:66:60:b6:08:a7:
4e:da:08:ac:d8:a3:8b:5a:5c:e0:0d:b9:1d:b5:da:
48:c6:aa:55:51:3a:0a:c4:cc:39:92:2e:af:e8:77:
47:75:9d:9f:03:95:75:35:2a:55:40:08:6d:00:b3:
cd:5b:55:b7:f1:3d:50:67:de:c9:b0:af:81:00:e2:
f0:6c:06:38:ea:0a:3d:51:a2:4f:f1:84:ff:e2:a2:
95:68:f3:41:80:fc:74:42:b0:0e:5c:c4:53:57:23:
56:4e:ab:d9:c7:c6:be:f1:06:31:d0:b0:6b:55:e2:
b4:33:e4:4f:0c:22:16:d8:8a:b8:f4:5c:d6:bf:3c:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:52:7C:C5:84:73:87:26:EA:C1:64:41:AF:74:71:93:A1:F6:00:E6
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f1:54:9e:ab:e6:c7:00:6d:a8:54:4d:94:b7:5a:a2:8f:18:
07:b3:ac:de:9b:10:82:14:17:75:fa:5e:cb:40:46:38:92:46:
e7:4c:25:f2:6f:45:9c:47:07:a6:96:8e:e4:42:fa:1c:c6:a5:
c0:25:63:2b:3d:69:97:4c:2e:b0:6e:d8:ec:f1:87:7b:ad:33:
09:4d:7c:9f:3a:6d:ca:c3:c0:48:19:d2:b4:7a:99:53:7f:27:
50:13:a7:c9:40:ae:bc:50:e9:6e:81:86:b6:4f:9b:4b:24:0a:
aa:e6:50:62:3c:a1:12:f6:58:50:92:b8:77:c6:29:8c:77:ee:
8e:76:1c:72:04:96:67:d1:f7:df:2f:b8:02:7d:ec:de:76:8c:
64:5a:83:f9:42:97:c6:88:1a:87:6e:f1:54:9d:0e:9b:3c:8a:
ba:d5:d3:f6:7d:0e:a6:8b:08:c9:42:c7:91:ce:ed:90:a5:54:
bb:69:2b:c0:7b:ce:2e:23:ab:d9:ee:04:5c:b2:74:4c:0c:01:
46:d4:1b:30:7c:79:30:e3:40:a5:d7:34:73:be:5f:2d:e1:71:
45:57:0a:b8:e4:10:f0:0c:00:2a:47:db:f7:e4:76:b1:2c:54:
fe:80:73:c4:6d:6d:43:9d:2e:c6:3a:db:b7:92:a9:44:20:86:
cb:71:81:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:39:30 2025 by rpki-client