Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
File: OCvsQ90a_pemT1brhUx58WP6TuY.mft (raw, json)
Hash identifier: pBhDQYu/eR9CrotPg9ANscq8vs6YZZvTRyJGIlSsi2M=
Subject key identifier: 28:52:45:99:1E:C3:D6:97:5D:EB:0A:C1:C3:BB:83:AE:4F:FD:31:CF
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 0196CC85697B0EE8B2DC3A338DD88A43228F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 02:00:17 +0000
Manifest this update: Wed 14 May 2025 02:00:17 +0000
Manifest next update: Thu 15 May 2025 02:00:17 +0000
Files and hashes: 1: OCvsQ90a_pemT1brhUx58WP6TuY.crl (hash: 50H9wV0oiMZRjMgdeMI6+nJm9KBXd2TgzHL/nFxYSmo=)
2: ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa (hash: ElsDKcX3/AeNMZDxpF6Opg+D9XtiydscqeFlhPJCg+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:69:7b:0e:e8:b2:dc:3a:33:8d:d8:8a:43:22:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: May 14 02:00:17 2025 GMT
Not After : May 15 02:00:17 2025 GMT
Subject: CN=285245991ec3d6975deb0ac1c3bb83ae4ffd31cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:9e:07:84:5a:ca:ad:4d:6b:01:0d:96:2c:
30:40:d3:63:0c:a3:27:18:94:7c:c1:33:7d:ce:a9:
5c:b1:26:4e:dd:49:72:48:bb:42:74:64:80:cf:ba:
e4:21:0e:95:be:1f:2e:de:47:4b:6e:37:18:b8:ff:
f2:8f:f3:a9:83:c6:e4:a0:79:65:9a:84:cd:df:58:
06:ae:ed:f2:6e:cd:fa:27:c6:a3:b9:c2:c5:b1:61:
21:0f:67:23:62:ed:d9:d6:fd:e1:ed:ec:30:ea:ea:
ed:9b:8e:01:79:10:f9:a2:eb:d3:4f:57:ad:18:42:
d6:7a:9f:ef:a0:57:9b:79:49:23:ef:ae:41:55:38:
22:bf:92:93:4f:a3:ba:96:2b:61:7e:36:d8:b9:a4:
81:3e:24:9c:23:78:db:0c:e9:6e:91:d4:03:3e:13:
08:af:d6:c1:1e:73:7a:be:95:4c:83:ad:16:79:26:
d9:3d:0a:52:22:5f:4f:f3:4d:d7:12:02:69:e5:fb:
59:64:ec:13:23:13:e3:3f:ff:02:f8:2e:7a:02:95:
cd:04:27:33:16:08:8c:da:85:a0:56:7a:74:69:1c:
8f:26:b7:79:c9:37:af:85:3e:7c:cf:ef:0f:22:1b:
d9:a9:56:f6:18:f1:85:63:c1:f2:a1:4b:42:7b:40:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:52:45:99:1E:C3:D6:97:5D:EB:0A:C1:C3:BB:83:AE:4F:FD:31:CF
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:59:72:a4:85:c0:04:d7:36:5c:10:72:22:3b:c4:fb:be:6c:
76:69:eb:40:89:dd:6e:43:71:95:f0:dd:2a:3b:b8:4e:0d:79:
f5:15:c2:18:e5:99:63:ba:4d:24:70:9b:04:11:88:fd:39:59:
1c:82:c8:ab:02:c6:30:db:d3:f6:2f:9d:8c:ee:7b:41:8f:25:
ab:07:28:e9:1f:65:4d:61:f8:c2:69:68:a5:bc:d2:50:40:8b:
d7:fd:7c:5c:b1:40:6e:f1:1f:77:7c:8f:9f:c6:55:0c:30:a2:
78:9e:b5:38:eb:bf:5c:58:d7:50:a6:60:65:be:b4:e8:07:4a:
b1:29:76:8d:0c:b3:ac:c1:a5:6c:13:f2:a1:b6:53:27:44:95:
4c:60:c9:9a:83:18:9b:1c:e3:e0:66:54:95:8a:fd:aa:a8:a8:
33:1a:78:e7:16:f9:e5:43:52:28:a3:b4:b6:e6:93:e1:2c:b6:
cf:b3:5e:aa:22:87:0b:cc:fe:f1:15:31:2d:fe:e0:9e:cb:f1:
93:67:6e:28:d7:5c:87:5a:73:7f:8b:0c:e6:43:de:d0:2c:5f:
fd:a6:8c:ae:a9:d3:69:83:1b:ab:2f:a6:69:ac:e2:f6:ee:69:
92:8b:76:97:c5:8c:73:4c:e8:98:d9:31:ab:3c:05:15:39:d5:
7a:37:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:01:55 2025 by rpki-client