Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: oAf7LKQdotc1rEZ7kox0PSHMiIr5ZC6DqjacgHxW064=
Subject key identifier: 2D:28:83:0D:A0:A6:E3:87:00:FD:53:A1:49:51:18:02:46:D8:DB:FD
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 0196CA29492E1FA2327BDC8D69E53AB91867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 15:00:25 +0000
Manifest this update: Tue 13 May 2025 15:00:25 +0000
Manifest next update: Wed 14 May 2025 15:00:25 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: 9ngBv/pPHQ9NY+95636GAQ+e/hNJs7AxXmZxc4MT8zE=)
2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:49:2e:1f:a2:32:7b:dc:8d:69:e5:3a:b9:18:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: May 13 15:00:25 2025 GMT
Not After : May 14 15:00:25 2025 GMT
Subject: CN=2d28830da0a6e38700fd53a14951180246d8dbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:3b:d1:9a:1c:30:7c:0a:45:75:23:aa:3f:
e9:f8:49:7c:b3:81:15:19:de:4f:27:12:61:11:60:
c7:d6:89:bd:73:26:6c:4e:33:93:e3:e2:5f:6b:30:
dd:1b:a1:cc:f8:b4:c0:8f:11:d3:8c:ec:44:df:ed:
88:7b:17:b2:21:62:b0:75:24:be:38:dd:48:94:89:
64:4c:88:c7:8a:32:dd:04:79:4c:03:87:cd:7c:d0:
22:8a:ed:a9:3c:98:eb:d2:e9:e2:36:76:4b:67:fe:
34:f0:58:ba:3f:c5:d3:29:3e:e4:03:94:92:81:c7:
0f:6e:40:c8:9a:9c:4c:bd:78:72:de:e3:26:e3:4b:
83:b0:a7:22:6f:e3:4f:4e:8a:ab:b5:ea:4b:cc:78:
50:84:0e:bd:c1:fb:0f:74:e6:69:97:0e:4a:b6:50:
3f:bd:a5:c0:c6:4b:3f:8d:c7:80:42:4b:d1:bf:d1:
ad:38:1d:bf:a1:57:34:e6:bf:3b:87:7e:e2:5b:5e:
c9:7d:68:bb:c1:b0:32:df:ac:46:8e:7f:b3:5e:7a:
ff:86:d7:86:88:37:3d:97:10:71:62:ad:92:48:06:
2b:d8:fe:d3:da:1b:05:81:a2:12:cd:26:25:61:de:
fd:c8:66:c3:b5:3f:ea:71:1f:32:4b:11:b3:59:8b:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:83:0D:A0:A6:E3:87:00:FD:53:A1:49:51:18:02:46:D8:DB:FD
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:64:09:5b:f8:57:08:d3:34:8f:fa:b3:4b:10:ab:74:e7:ba:
85:85:99:f6:a1:db:05:3b:ea:22:eb:62:3c:af:da:87:15:86:
1e:c6:ae:4a:e6:4e:1e:52:bd:2f:01:7f:dd:11:24:8a:89:11:
eb:71:1d:d6:e8:e1:99:c6:5f:6f:6d:ad:83:01:ff:7f:72:4d:
f6:b3:c7:cf:b7:6e:62:fc:f5:25:bc:c8:6e:eb:64:fa:4a:91:
2f:e9:73:1a:d0:99:42:a2:fb:48:d8:41:06:db:4b:cf:b8:71:
f4:93:50:eb:55:b2:8c:d7:1b:02:53:01:47:81:44:6d:94:bb:
8b:b0:f6:7b:a2:76:d9:31:d7:2e:0d:4a:a4:9e:e5:a0:69:21:
4d:f0:cf:5a:fb:a9:f7:d0:03:80:fd:a7:ba:5f:0d:a6:21:4c:
b2:f2:39:48:f4:5a:fc:8c:51:4d:cb:70:68:74:69:3f:df:41:
c8:21:aa:04:b3:d4:57:ec:64:3b:03:7a:85:83:01:cd:73:59:
d3:4a:2a:30:2d:a3:41:a7:cf:c2:1f:f5:31:8b:d7:47:9c:31:
93:95:de:28:1f:4e:34:92:1c:6b:ad:14:61:ca:fb:f4:85:0a:
19:9a:35:79:af:04:d5:4d:e0:ab:be:cf:d5:85:12:8a:2e:fe:
f6:3c:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:15:50 2025 by rpki-client