Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: luccDV2lXjL+2sppM5fxrfglRewJB+vYh7ZErlr/C5I=
Subject key identifier: CC:A6:D9:ED:1F:63:CE:61:74:AA:F8:38:2B:F1:D3:C8:95:D3:78:53
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 0196CA60B2BDA27755FC090895AC41E994E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 1542
Signing time: Tue 13 May 2025 16:00:56 +0000
Manifest this update: Tue 13 May 2025 16:00:56 +0000
Manifest next update: Wed 14 May 2025 16:00:56 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: 1JbSoC6of1nC1uTZDUjSdPjDRREMCxwssuYrbmsnWPU=)
2: bnVoAcKQpBUpBdJ_G4E6sEiT0wk.roa (hash: D5MR6IRxVzBiemlQt2yPaFHtcO6ch7oL0gJFMCA2LTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:b2:bd:a2:77:55:fc:09:08:95:ac:41:e9:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: May 13 16:00:56 2025 GMT
Not After : May 14 16:00:56 2025 GMT
Subject: CN=cca6d9ed1f63ce6174aaf8382bf1d3c895d37853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:d2:2e:6e:c0:49:dc:59:de:10:34:12:28:
a5:b2:1d:0b:3f:00:8a:35:b2:31:7d:61:24:2f:29:
0a:99:a2:fb:c2:8d:2d:0c:5b:8d:fc:1a:95:18:55:
3d:49:34:e8:3e:9d:cf:fc:f1:fe:3a:2c:44:f3:d8:
13:9b:41:d9:11:d6:a8:23:bc:f4:d1:1c:e2:ad:68:
3a:3f:6a:bb:a1:52:b1:64:48:17:8e:62:41:16:2f:
a8:bb:9e:57:c8:d5:4a:38:0e:2f:4f:9d:d6:73:b3:
5c:3b:9e:a3:df:70:25:ba:38:0c:5f:0b:e8:af:3d:
10:dd:d7:35:7d:e6:a3:0e:d1:7b:fe:30:2c:7c:7e:
8a:4d:fe:e6:6f:de:e0:94:a7:39:42:5f:7b:03:a0:
84:b3:6d:0f:25:3b:67:d5:2c:7a:53:fb:97:1f:f4:
eb:8f:36:2d:ab:3b:c1:ac:37:38:59:07:ce:dc:95:
55:bb:d1:fb:8b:97:83:be:87:57:0f:94:b4:e2:79:
f1:34:16:75:95:16:90:80:51:50:ff:63:9e:c8:35:
8c:bc:67:ee:83:99:f6:f1:02:99:57:e8:13:8f:fe:
b8:77:b7:b4:ab:96:8a:a1:52:ed:b3:07:f9:f5:32:
79:d7:2a:7d:90:b2:a6:b5:b3:bb:46:a6:2d:0e:d4:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A6:D9:ED:1F:63:CE:61:74:AA:F8:38:2B:F1:D3:C8:95:D3:78:53
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:67:e5:12:f3:e3:ce:12:0c:c5:29:f2:0a:55:48:d6:a9:4f:
09:af:df:26:c3:bb:29:64:f9:3d:39:4f:55:9e:34:0f:11:f2:
03:3f:00:99:07:51:a0:1d:15:03:c4:4e:0a:7c:97:f8:4a:3a:
9c:fe:94:1b:5f:dc:59:42:a3:be:e9:7d:79:a7:87:ff:fa:3a:
d6:7a:9e:33:94:6c:8f:15:30:69:1c:60:e6:fa:df:ad:36:2b:
42:61:fb:7b:c6:da:52:7f:9f:5b:88:53:43:9b:ba:a8:33:aa:
78:1b:85:14:07:9f:04:8b:90:51:06:6f:d7:e7:0e:3b:cb:27:
ef:a0:04:00:7d:cf:fb:3e:28:1b:44:ba:c2:e3:63:2a:ab:2e:
78:0c:40:18:05:0e:0b:04:cf:91:fd:60:2f:b6:19:9b:7f:d3:
1d:f3:27:80:93:23:6c:58:eb:45:73:83:fa:5d:cc:53:c7:49:
fb:64:42:11:8e:ae:9b:9e:90:4b:8b:87:6e:d1:ba:fe:aa:c7:
a2:07:c4:84:6b:cd:6f:87:48:7d:1a:b0:f2:5b:23:80:d1:e8:
13:50:ea:8b:9d:1d:4c:23:69:28:7d:34:e9:b7:2b:42:52:7e:
b0:58:0f:48:92:b4:e5:b0:e6:e7:a1:dd:44:f6:da:83:30:a5:
74:1c:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:26:15 2025 by rpki-client