Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: ZcQ+CtCtSo+xRDRxPkHZJBOwirzz/qKsbZMw2192riM=
Subject key identifier: 2B:02:9B:51:4E:1C:17:1E:87:4F:B9:20:4D:67:84:0F:4E:58:C4:67
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 0196C75F79FBDE7EB9C210E63401D6E4A712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 02:00:45 +0000
Manifest this update: Tue 13 May 2025 02:00:45 +0000
Manifest next update: Wed 14 May 2025 02:00:45 +0000
Files and hashes: 1: DFvO543buXO6QAD6iga-2ghdPJM.roa (hash: OwW2BWhEe6SpLOjaLPnDoeeE6qmWEx2kPzz7nMDDwRs=)
2: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: BGAm4plL7yotyk39OACHmQ9SsA5USrdoedcXOCH3gaY=)
3: b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa (hash: phtYuXPVmT4EIKYX0FwVqQycRaEtVPLsT/EPqn9XD1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5f:79:fb:de:7e:b9:c2:10:e6:34:01:d6:e4:a7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: May 13 02:00:45 2025 GMT
Not After : May 14 02:00:45 2025 GMT
Subject: CN=2b029b514e1c171e874fb9204d67840f4e58c467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:14:fe:80:8f:3d:a8:e0:db:81:33:ac:73:
6a:03:e4:8f:51:e3:e9:27:7c:d3:40:ed:dd:1c:46:
f7:48:cb:95:42:df:92:ab:9a:3c:59:37:25:f4:fd:
f3:ef:60:e6:54:55:87:46:3c:f7:16:86:8b:c4:06:
e0:64:5c:9b:ed:03:88:d7:78:e9:90:48:c4:d4:6a:
54:90:1a:6b:1e:0a:c5:23:4c:9b:77:60:9a:36:74:
d5:ff:43:d6:d6:f3:28:41:23:c1:9f:67:8e:9d:ea:
a5:d7:a8:d3:35:79:a6:70:fa:dd:26:34:2f:c3:ab:
8b:88:76:f9:2a:ed:8f:93:0a:3d:53:4f:4f:e3:4b:
41:63:ae:ae:cc:41:f6:5f:c2:76:23:b1:92:fd:5b:
27:2e:26:22:96:f8:b0:f8:75:6e:be:ef:85:a9:94:
a3:f1:a5:92:b7:4f:2e:3f:84:33:07:65:e7:89:b6:
29:18:da:30:fa:81:c6:00:6b:5c:18:ec:96:10:5d:
63:60:05:60:17:88:03:51:be:28:38:ec:78:68:15:
1e:03:fd:89:2d:9d:8f:dd:fa:af:6e:66:eb:71:87:
3b:3c:0f:ae:26:fe:a9:1a:ea:8b:ff:e0:2d:b2:d5:
15:5c:48:4f:df:d7:13:a9:cc:eb:57:44:35:d6:e6:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:02:9B:51:4E:1C:17:1E:87:4F:B9:20:4D:67:84:0F:4E:58:C4:67
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6a:ac:95:3a:4c:d9:f2:ea:01:ba:71:24:59:31:40:2f:3b:
fb:b8:21:73:7b:9a:01:db:0c:c4:fc:64:1b:8a:99:80:d5:08:
87:a3:9f:22:5a:74:6b:9e:34:86:d2:42:11:ad:93:a9:44:67:
a1:5e:84:92:b6:bb:ca:84:dc:c0:dd:01:76:e3:44:a2:0f:a8:
c8:10:11:77:85:3f:06:41:49:08:db:5c:3f:ba:a0:d2:6a:fd:
3d:f9:d6:20:c8:78:fe:fc:d8:11:71:26:1e:da:5c:f0:ec:bd:
4c:0e:50:f5:c4:9f:0c:bb:d0:46:9c:52:9d:c7:34:89:c0:20:
65:7a:41:74:4d:62:55:9a:fb:72:7b:05:e6:21:3c:b1:84:85:
82:2b:61:76:4e:24:ee:ca:38:16:f6:f6:5b:40:c8:8f:c4:15:
d0:88:e2:35:24:fd:7d:28:61:a9:5f:3f:8b:21:2d:93:b0:55:
6e:f2:5c:af:d9:55:07:bd:e7:c9:52:76:36:9a:dd:90:a4:06:
bf:0e:f3:4e:5d:37:ce:3c:07:20:d0:49:35:f1:0b:01:d6:fd:
b4:27:07:4b:85:8d:d5:fc:b9:30:09:d2:d2:a0:55:6e:c9:ce:
c3:55:1f:eb:fb:43:80:40:27:66:78:55:45:02:bc:cd:f6:f9:
fe:2c:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:44:37 2025 by rpki-client