Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: +miSIcm/s33j4VkT1VLa2EhnBQ+CV8Jy4NiQk0b7RUc=
Subject key identifier: 55:DD:0A:F8:3C:B4:60:61:FE:7A:CA:57:97:C7:0D:26:18:86:6E:58
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 0196BA48E703E9AFA2FB5ECA455754ED23C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 14C6
Signing time: Sat 10 May 2025 13:01:01 +0000
Manifest this update: Sat 10 May 2025 13:01:01 +0000
Manifest next update: Sun 11 May 2025 13:01:01 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: UDXha/yXbcQeupj7i+9Qo7pA0gSvYj+YlcxDavYkv6Y=)
2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:e7:03:e9:af:a2:fb:5e:ca:45:57:54:ed:23:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: May 10 13:01:01 2025 GMT
Not After : May 11 13:01:01 2025 GMT
Subject: CN=55dd0af83cb46061fe7aca5797c70d2618866e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:8c:e7:97:27:f9:2c:ac:c0:09:07:25:4a:
f1:d3:d5:21:d4:e1:60:c0:37:83:fe:9e:f3:72:e6:
46:a3:16:93:68:fb:29:7a:80:7c:ac:38:83:2c:07:
25:04:06:b1:b4:7d:5e:23:71:de:9b:d8:73:d9:59:
42:82:8a:7a:01:16:03:da:59:26:cc:fd:07:46:e4:
00:19:c9:62:ef:d0:05:19:dd:4e:ef:f7:4e:86:86:
bd:14:69:4a:93:24:56:d1:06:65:e5:1a:4e:c7:30:
de:fa:8d:49:3f:af:79:b9:44:73:e6:29:37:4b:c2:
c2:ed:b0:25:d8:50:96:6a:4c:7b:a8:f6:16:61:18:
fd:8e:a4:01:b6:71:2e:1c:98:4c:ef:91:75:88:94:
28:3a:9d:19:b3:53:11:e5:73:ba:2c:10:16:54:b9:
e5:fa:f8:80:d8:e8:7e:86:45:3f:d6:df:0d:a7:44:
8e:7a:ce:45:ea:97:21:88:9e:65:09:c5:da:ff:b2:
dd:2b:16:bf:49:24:b3:43:a4:c2:44:ef:1c:19:65:
ff:fd:21:d1:9b:83:0b:95:52:93:a7:66:76:14:fd:
f4:82:f5:0b:65:34:01:3f:b2:d1:dd:80:9e:86:43:
69:2b:8c:aa:76:c3:f5:44:26:42:e2:f1:a8:3a:7a:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DD:0A:F8:3C:B4:60:61:FE:7A:CA:57:97:C7:0D:26:18:86:6E:58
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:49:5a:75:11:16:9a:9e:b2:94:8b:9c:6a:ee:cc:0b:1f:55:
2e:5e:c4:3c:53:4a:4f:28:6b:bc:c1:c7:cb:08:1f:d3:14:dd:
5d:cc:2a:54:c9:26:de:ca:b5:9b:27:51:d3:0e:45:b3:30:e7:
ea:c6:d1:84:a1:4f:85:64:02:a3:39:1a:d7:b0:a7:9d:ca:c2:
7b:d5:82:74:0b:3c:37:70:0c:e2:a5:a6:d8:b9:53:2e:01:0e:
04:b5:0c:19:79:a5:c2:6d:9e:66:a8:00:36:d7:6e:7c:2f:6e:
d1:18:96:74:6b:1f:9c:0f:eb:4e:f4:90:6a:10:59:84:87:4d:
df:34:3b:32:03:e0:4d:83:2d:ad:79:cc:25:2d:cb:32:04:d9:
a0:2e:7e:27:e4:a1:de:00:35:fa:e0:47:b2:a7:27:48:da:f5:
21:c9:d5:12:ef:63:1b:6a:ff:32:6c:35:0e:30:6f:41:61:65:
3a:88:32:87:0d:33:e5:cb:1d:df:9c:47:a4:e7:12:c7:ec:94:
01:d1:e6:aa:b0:95:c7:9b:3d:ed:3b:54:64:e2:6a:a1:e7:9c:
f1:b3:c0:95:ce:62:cb:ff:c5:83:5e:60:fb:96:ac:ab:4a:b9:
a0:0f:14:4b:8e:c1:35:fa:fa:09:b9:c2:28:1c:3d:cf:ec:47:
7d:62:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:08:43 2025 by rpki-client