Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
File: OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft (raw, json)
Hash identifier: 6ppkjMFqKuxi7XFt9VZ3/6GkAC5eIWZRBviV4sE7yyU=
Subject key identifier: CE:8E:03:E5:0F:FE:AD:30:27:82:47:C6:B9:44:DE:7D:FD:32:D6:A5
Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
Certificate issuer: /CN=39348867dcb2956aca65d08348e440d4727a3743
Certificate serial: 0196A577FFD327795E01416CD7FD9ED713EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
Manifest number: 02CB
Signing time: Tue 06 May 2025 12:00:26 +0000
Manifest this update: Tue 06 May 2025 12:00:26 +0000
Manifest next update: Wed 07 May 2025 12:00:26 +0000
Files and hashes: 1: OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl (hash: 2cFBYtvy/WhxB4N+gz23AMTyGWVysONBszd/ebMXetU=)
2: c6YXeFcziXYV8oA7IxxFWWIl7jo.roa (hash: 772kO8FIL8B9L379YEWTLwC21iJYKEhsMHuMIDdHwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:77:ff:d3:27:79:5e:01:41:6c:d7:fd:9e:d7:13:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743
Validity
Not Before: May 6 12:00:26 2025 GMT
Not After : May 7 12:00:26 2025 GMT
Subject: CN=ce8e03e50ffead30278247c6b944de7dfd32d6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:ca:b3:b3:b3:54:ae:a2:f0:8f:09:dc:29:
94:00:e6:f0:fa:91:fa:d4:f7:05:2e:e2:37:6d:b6:
1d:37:a9:13:61:6e:10:42:46:af:47:ed:99:79:45:
3a:1d:90:0c:ce:61:f9:ca:dd:ac:a2:68:30:b3:6f:
22:ef:95:a8:1b:6f:86:53:14:d7:b5:7c:8a:e1:5c:
29:58:87:fa:80:67:51:98:6e:67:55:a3:3e:19:00:
d6:26:50:a5:6d:18:bc:4b:30:6d:33:8b:95:f3:10:
e4:9f:84:04:55:a0:f8:51:a1:14:cd:54:c4:2b:dc:
b8:ba:91:81:82:8d:a8:5b:e7:0c:e7:ad:cf:37:19:
05:eb:d6:28:76:bb:4d:af:6e:33:a8:40:ab:bd:dc:
f9:de:b0:32:00:2a:21:9a:59:00:28:ed:68:7e:01:
78:25:49:7f:ea:25:bf:93:52:79:78:a4:fb:d0:56:
3e:46:7f:5b:cb:a1:49:03:20:86:8b:1a:d3:a8:dd:
04:a5:ee:54:01:f6:6a:fb:12:81:5a:22:6a:93:ef:
4e:cb:e6:6b:89:74:c5:7f:86:4c:44:e3:36:e8:86:
6c:91:fd:a9:ce:0e:16:5f:f3:38:0e:f3:f2:1e:61:
fa:7f:c4:74:0c:51:72:0c:24:b3:21:8c:15:b7:b1:
4d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:03:E5:0F:FE:AD:30:27:82:47:C6:B9:44:DE:7D:FD:32:D6:A5
X509v3 Authority Key Identifier:
keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:0a:01:88:1b:c5:6a:c9:6b:91:b3:64:09:bf:7e:bd:bc:
90:dc:ba:e0:91:4c:7a:99:75:fa:b6:f5:dd:86:7c:ca:27:7e:
87:35:a0:b6:4e:7a:43:92:d5:dc:a2:81:e7:de:f1:60:2a:15:
8e:dd:cc:0d:3f:c5:c8:0f:ba:99:ed:f9:be:e3:60:ca:fb:f1:
f2:63:b1:ac:75:49:41:0d:46:c8:ff:b4:46:4b:04:8c:3b:71:
ac:0d:5b:c7:2b:30:f5:ab:7e:f8:69:3b:a3:ff:c8:3b:82:96:
7d:e1:01:10:96:f5:3e:ef:ab:73:9a:5a:03:04:b8:32:34:56:
a5:8a:71:a9:08:99:77:17:99:71:ef:87:28:4b:8d:c5:22:ca:
0f:91:0b:7f:27:b1:ce:fa:29:71:04:c2:eb:74:93:d0:d4:76:
46:09:d9:ee:e8:15:88:25:1a:e2:85:dc:0f:a8:56:93:1c:7b:
49:41:58:7f:0a:fb:8d:eb:0d:19:e1:cd:64:64:92:13:18:4f:
f1:98:e4:dd:5e:7b:bf:c4:e6:19:37:8d:31:a6:b9:f2:fe:4c:
69:b2:f1:99:96:f7:51:4d:27:29:4d:e2:0e:dd:66:ec:79:77:
18:19:a5:d9:3d:fd:d5:75:1a:75:cd:36:e3:5b:14:c4:e1:f0:
ef:49:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:54:25 2025 by rpki-client