Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: iqQDdfdeH18N+2QH/zKScHKq4Ik/VmWDiEbP3Rc+V74=
Subject key identifier: 6C:16:D5:8B:11:28:8A:AA:0A:64:4B:E5:8E:31:56:10:08:D8:96:9F
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 0196AE7B10B4429167422E59F6289FD90FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 1528
Signing time: Thu 08 May 2025 06:00:22 +0000
Manifest this update: Thu 08 May 2025 06:00:22 +0000
Manifest next update: Fri 09 May 2025 06:00:22 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: Ui/0x/zoGYcNUq7fkOdDf6OPb4veTO7qTU/DXDF3UeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:10:b4:42:91:67:42:2e:59:f6:28:9f:d9:0f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: May 8 06:00:22 2025 GMT
Not After : May 9 06:00:22 2025 GMT
Subject: CN=6c16d58b11288aaa0a644be58e31561008d8969f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:d3:bb:f1:d5:17:60:a9:0c:0a:2b:69:84:
c2:df:fd:b1:a0:e0:c2:7f:f1:e1:fd:aa:8a:fc:2b:
77:4f:2b:1d:3e:f2:66:01:21:fd:c9:bb:2c:fb:1f:
f7:6c:f6:a0:c4:12:05:cb:54:2d:d9:ac:19:28:1b:
e8:45:1b:84:cb:04:22:4e:f6:10:28:ff:53:9b:65:
03:83:33:6e:e8:fd:73:01:53:38:d4:4c:c0:a6:7a:
6d:6c:8d:3b:17:9c:79:a8:c2:fd:11:91:f3:dc:54:
94:72:42:8c:78:c5:17:cf:4d:1f:e0:61:66:79:11:
c3:b1:55:c0:c1:5d:c6:e2:a5:34:9c:f1:8b:43:54:
4d:6e:63:c7:12:53:1c:b7:a6:66:e0:be:b4:91:c6:
07:9f:66:4e:53:54:fe:38:24:45:f2:62:15:76:97:
59:e0:21:5a:c7:0b:d9:08:82:24:6d:aa:5e:db:3c:
e8:d0:f8:97:0e:c4:07:c0:48:86:b1:3c:01:a8:16:
36:ca:ec:80:ca:e8:33:5d:9f:7f:e2:b7:ca:24:e5:
05:d1:12:11:ee:8f:bd:13:39:ff:02:26:ea:c8:c7:
03:8f:ba:79:42:05:bd:a9:ed:82:6b:65:88:1a:a4:
ea:ba:8b:b5:66:81:b1:68:63:5f:64:5b:fd:d1:de:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:16:D5:8B:11:28:8A:AA:0A:64:4B:E5:8E:31:56:10:08:D8:96:9F
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:55:9f:1f:70:b3:bc:04:b1:ee:f9:8a:39:d4:79:82:6e:8a:
8a:e2:b8:bb:62:5b:f6:de:80:fc:c9:ed:9e:b7:58:77:cd:0e:
fa:50:e4:69:2a:aa:f4:b5:b2:5b:83:4a:3e:75:a9:e1:87:73:
e7:e6:2f:12:79:e3:81:b6:9b:74:7c:b3:3a:35:ba:9e:04:7b:
99:dd:9e:2d:6a:11:5b:19:d3:bb:e5:03:ad:b5:ef:60:de:68:
e1:57:50:68:d5:cd:04:72:1b:0f:7b:6d:3f:7e:2c:a2:4d:82:
0f:fc:a9:87:53:01:ff:e4:1b:88:47:bb:c4:73:58:18:7b:b0:
2d:5d:8c:f4:35:53:7c:1e:e8:bd:b3:8a:78:a9:e5:32:58:3e:
57:ac:93:e0:57:ab:16:95:96:2b:68:e5:fa:bf:9d:c9:18:86:
19:ee:fa:6d:40:8b:90:8d:f4:b4:60:c3:42:c7:3e:cf:3b:2a:
66:17:00:42:67:68:c2:bd:0a:b1:a8:76:2a:14:68:4e:6c:d8:
f5:dc:ea:89:01:92:7a:b3:27:9a:c7:e1:1a:df:94:99:f9:5f:
31:44:78:80:8e:14:87:b6:3e:88:57:24:e0:ed:c7:2c:9f:71:
41:dd:eb:06:5c:62:ac:5c:f2:ea:39:c9:4d:c5:8a:e5:4e:9a:
d7:c1:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:40:48 2025 by rpki-client