Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: +eYuNtTF5m1ujHeFChUeAjbdo/fhkYZM2Y7pcYY0M1I=
Subject key identifier: A2:6B:87:3A:4A:7E:15:FA:50:47:54:67:B4:39:B1:68:AA:32:05:E2
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 0196BCDBEDB41D7C8ACEC5FC7E6738BD3FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 0391
Signing time: Sun 11 May 2025 01:00:51 +0000
Manifest this update: Sun 11 May 2025 01:00:51 +0000
Manifest next update: Mon 12 May 2025 01:00:51 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: nkhckeaM9NspjJKLWPRe0oJopd1He/Vlr3h0mX3YERE=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:ed:b4:1d:7c:8a:ce:c5:fc:7e:67:38:bd:3f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: May 11 01:00:51 2025 GMT
Not After : May 12 01:00:51 2025 GMT
Subject: CN=a26b873a4a7e15fa50475467b439b168aa3205e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:e5:53:ca:d1:11:25:41:bf:74:80:52:9b:
99:ce:75:a0:a9:d6:9a:75:4e:9a:b2:68:06:06:04:
19:d8:7c:d2:97:15:93:5c:de:aa:41:19:72:92:2a:
70:c8:c4:d1:a6:54:a3:46:bf:23:d1:db:b7:9b:30:
83:42:3e:e6:f1:12:4f:dd:65:40:ef:b9:6f:ad:04:
c4:c8:77:78:41:ec:28:5c:33:3d:91:36:10:71:52:
fa:f4:6b:11:7c:87:3f:5d:0a:31:2e:fe:b3:29:01:
87:92:fe:d5:7f:74:2b:dd:e9:db:c8:01:89:1f:68:
36:a9:11:b3:92:e2:df:a2:63:c0:b5:70:75:98:b7:
cb:4e:40:d8:e4:ba:c5:a3:8a:25:59:bb:0b:f2:4e:
d3:c0:bd:b8:dc:80:a3:52:86:32:22:b8:31:dd:44:
4a:fd:e2:13:fc:aa:df:05:6e:28:7d:94:f0:59:76:
6e:11:a6:f0:18:0f:a2:03:29:d5:4b:0d:1d:0c:1b:
38:d3:ca:0e:3b:93:80:3e:8a:3d:a3:e5:b3:84:d9:
f1:bb:17:a6:ef:05:7c:17:3c:dd:75:06:59:f5:71:
3c:1b:9a:03:4a:aa:22:f9:e3:50:69:e1:35:11:2c:
45:d1:0f:de:75:d3:67:06:56:7a:ea:0a:15:cc:b5:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:87:3A:4A:7E:15:FA:50:47:54:67:B4:39:B1:68:AA:32:05:E2
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c3:22:20:34:52:c7:24:14:55:76:bb:35:d3:f2:59:b3:f9:
83:36:09:b3:90:06:fb:5c:bd:9b:77:b0:7c:f9:82:a1:fd:36:
14:47:d0:34:f0:33:31:65:f6:dd:2f:7b:89:d6:14:93:8a:f0:
53:e3:9e:1a:e1:bb:35:06:95:38:6b:47:03:0d:36:ba:b1:0f:
0d:54:9f:c2:03:81:c2:4c:82:17:d7:36:1e:ae:d6:f1:d5:6b:
ee:6c:f8:ff:cf:93:b3:1a:de:c4:55:8c:49:ce:d5:66:b9:2b:
49:ed:45:32:17:e6:b7:1f:09:87:66:3a:07:52:f8:22:87:ad:
f0:f0:19:6a:db:58:0e:76:ec:66:23:c9:e3:6b:0a:34:d4:d5:
7c:bc:5d:84:79:43:0b:65:18:67:59:82:a3:0c:68:85:60:b6:
a5:8c:8c:5b:ee:77:9f:80:62:60:82:60:13:32:a1:46:1e:18:
0c:a6:1b:c2:70:dc:95:c3:b3:08:6a:44:6b:b7:99:0e:69:86:
54:13:71:2c:43:2c:8c:c0:44:eb:55:72:84:bf:3b:b6:33:ed:
5a:9c:18:13:d2:c3:1b:5c:d0:7f:25:43:58:52:9d:9e:78:6c:
fd:6c:54:72:c3:da:cd:0b:68:82:87:f3:ac:b7:65:28:64:f2:
bb:ae:6b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:41:12 2025 by rpki-client