Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
File: OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft (raw, json)
Hash identifier: RoLnWGzipik36MLOup80mVg/INHJ2nxnRSoQy92/yr4=
Subject key identifier: 62:68:7D:57:74:78:8C:BE:30:F1:22:8C:87:E5:68:19:65:22:7C:B2
Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858
Certificate serial: 0196BCA4C02459EFDB656E3DAD7BB0244B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 00:00:35 +0000
Manifest this update: Sun 11 May 2025 00:00:35 +0000
Manifest next update: Mon 12 May 2025 00:00:35 +0000
Files and hashes: 1: I01Lo7qwhvaLI2U54ucZ10pkExs.roa (hash: mTrGRc4f1Skt/0lHfZ3XZbVEvrQ9mBUuWZXJpIXORz4=)
2: OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl (hash: 1BUkPP15+F6NLs2tdCTwS9GcuTVD+4VDQwMqn1k5dUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:c0:24:59:ef:db:65:6e:3d:ad:7b:b0:24:4b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858
Validity
Not Before: May 11 00:00:35 2025 GMT
Not After : May 12 00:00:35 2025 GMT
Subject: CN=62687d5774788cbe30f1228c87e5681965227cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:74:8d:37:44:23:68:5d:6f:c4:b1:c2:76:
d3:2f:c6:ff:a6:6f:7c:f8:8e:c0:e9:c9:2f:5a:ff:
f7:b2:39:2e:b3:db:69:dc:7d:22:49:e9:70:03:a3:
6a:b9:64:c4:38:10:61:0a:5a:f8:dc:c9:6e:21:fe:
ca:fa:e6:f2:4a:7e:04:2a:06:50:06:0e:65:93:28:
54:7a:80:75:28:a6:ab:ca:0b:18:d1:76:10:5f:ce:
34:3b:f7:90:03:6e:9a:43:1e:9c:75:e5:d1:c2:68:
88:9c:72:a2:34:73:45:fc:37:94:ba:ac:49:0e:a3:
b4:ec:19:9f:ad:0c:6c:5e:f9:03:48:f6:f2:6b:94:
e7:a4:48:66:29:ab:96:8b:a2:8a:8c:4e:de:c9:d2:
df:ee:64:9c:68:7c:6f:1a:02:06:94:24:5a:53:73:
d3:60:e7:2b:33:76:4f:54:13:2c:3e:d0:35:3c:04:
0c:da:2e:3d:77:0b:f5:cf:b3:60:1d:c0:62:8f:01:
b4:c9:69:e0:38:6d:cb:45:f0:79:ed:d6:fc:89:0d:
ed:cf:b1:c0:c7:83:0b:02:dd:a3:5d:8c:7b:82:8c:
92:b2:5b:0e:07:a5:5a:1c:4d:8f:be:c9:2c:17:49:
9b:a9:42:10:ff:99:59:12:e4:eb:61:b3:1d:f0:9f:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:7D:57:74:78:8C:BE:30:F1:22:8C:87:E5:68:19:65:22:7C:B2
X509v3 Authority Key Identifier:
keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f5:10:90:0b:56:7d:e8:c6:1e:8f:8e:5b:37:7d:1e:18:9b:
75:00:5c:f0:5b:63:87:19:94:ad:dd:f2:30:33:51:44:49:90:
59:28:41:1f:2d:24:9d:e8:50:5e:f3:64:f9:c8:58:c8:30:aa:
bf:8e:25:3b:e0:49:3c:73:a0:cf:52:03:32:d8:9a:84:ea:a0:
aa:34:ca:be:4c:8f:ce:7b:a2:2b:59:3d:42:db:09:09:5b:1e:
c9:51:9e:8a:ec:2f:e9:fb:b3:59:4a:c3:3a:2e:89:00:a8:d7:
61:94:95:1e:97:a9:23:09:59:94:e5:3b:e7:f4:75:e1:82:15:
fe:6d:88:e8:ee:46:6b:a4:b5:a6:22:38:50:d5:6d:71:7e:b3:
b5:10:6e:ee:6c:dc:46:a8:5d:a8:1a:7c:6f:0b:36:24:a3:12:
46:b9:31:d6:b4:c7:16:b3:bf:90:13:dd:8f:d6:ab:f8:9c:9e:
93:ac:fe:f3:e0:82:e7:f6:82:91:45:5e:bd:32:0b:8e:3b:c9:
6c:1c:81:03:78:2e:cc:57:94:91:15:6b:26:a5:bf:70:98:1f:
3e:61:79:98:54:ac:97:80:73:39:42:74:6b:56:9e:ca:f4:0d:
3d:f8:0e:54:ac:c7:41:98:79:a0:79:03:f9:b1:81:19:68:cc:
60:30:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:24:30 2025 by rpki-client