Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: +OJ6oQSUrI983qDSJ1Kj1oHKvFusSipcyqmUp0L3ip8=
Subject key identifier: ED:48:D3:C2:E3:F8:F8:83:6C:12:DB:7F:13:25:73:B7:74:06:B1:A8
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 01969ED119051045B37C6410EEB20F09ECD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 02E8
Signing time: Mon 05 May 2025 05:00:25 +0000
Manifest this update: Mon 05 May 2025 05:00:25 +0000
Manifest next update: Tue 06 May 2025 05:00:25 +0000
Files and hashes: 1: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: 4K2iLojPWc+zzyZdixCXPhqPkNCny9s8qmNGl+J0VWQ=)
2: XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa (hash: MHnaHZdpDHAywK5Gif3w+d5y+x0GzsWCN2jIZcL+Afc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:19:05:10:45:b3:7c:64:10:ee:b2:0f:09:ec:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: May 5 05:00:25 2025 GMT
Not After : May 6 05:00:25 2025 GMT
Subject: CN=ed48d3c2e3f8f8836c12db7f132573b77406b1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:a5:f5:5c:a6:09:9f:73:44:6d:5b:37:2b:
8c:cf:ea:fc:72:0d:aa:ef:71:15:04:9f:44:2d:1f:
86:24:87:f2:6a:53:be:81:fe:f4:05:07:9f:a3:08:
f6:7f:d1:68:77:d9:53:1e:ef:10:70:a0:1f:0d:df:
25:d8:69:7b:43:62:13:37:b7:a9:4b:9b:8e:50:33:
6b:b7:80:90:6f:2e:36:3d:d2:1d:ee:ff:eb:db:6f:
22:16:ba:2e:28:01:fb:e1:e4:77:45:64:ef:03:dc:
31:6f:1b:e3:28:6a:8d:cd:94:2d:87:60:8e:42:1a:
a5:f0:c4:9e:a1:ca:f0:47:36:63:08:75:f8:2d:f8:
28:12:d0:8b:b4:61:6a:e9:64:14:f5:b1:9c:6f:36:
11:a4:af:0e:e3:f6:96:10:ac:3c:97:62:44:3b:7f:
4f:3d:b7:fb:fa:6e:33:d8:a3:8b:ce:70:92:51:45:
78:1f:d9:79:24:75:2c:f0:af:79:24:96:4e:19:45:
71:50:08:2a:b6:fc:43:9e:f6:96:47:3a:23:51:6b:
56:36:05:a4:01:99:f3:3e:57:78:ba:fc:63:50:ea:
f0:ee:44:4e:da:90:8b:ae:93:ee:da:f1:a0:a1:05:
30:1e:4e:8f:63:0f:1f:69:03:14:1d:d1:45:c6:f7:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:48:D3:C2:E3:F8:F8:83:6C:12:DB:7F:13:25:73:B7:74:06:B1:A8
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b0:2e:24:47:fc:94:25:ca:91:1b:55:7c:13:ac:e5:63:cd:
99:db:98:9c:cd:7a:b3:96:56:7d:97:66:3a:9e:4e:fd:3b:84:
19:76:d6:6d:36:07:5a:0c:ba:92:d2:fe:c2:05:57:66:10:4d:
12:1e:a9:be:f8:56:86:bc:4f:43:30:f7:38:b6:a2:6f:d8:95:
4b:69:51:54:d5:34:b1:f5:10:f9:4d:9e:f3:81:df:5b:17:72:
29:83:28:de:3c:d5:ed:b1:c3:59:58:c4:41:0c:9e:4c:5d:5e:
8a:b7:0f:07:c6:ab:e1:ce:5c:5f:23:cb:94:a0:4e:f9:a3:43:
a5:e0:3a:2a:36:be:78:a2:0b:8c:14:97:0a:c2:53:a1:b2:a3:
23:04:a8:34:1c:95:bd:c1:47:eb:d2:9e:7a:28:5f:07:4e:8d:
b3:ae:bf:22:9c:b4:15:10:67:15:6c:26:e6:03:96:be:27:d7:
0a:6e:28:83:85:d5:9a:b6:ae:f9:2b:90:0a:9a:3e:e8:b1:5d:
3c:bd:c7:ed:48:96:a6:41:88:ce:db:4d:2b:e1:8c:86:7c:36:
24:64:72:a3:9e:81:bf:e2:d5:d4:93:bb:ed:02:42:7f:96:da:
20:07:b9:b6:46:8c:29:21:37:1d:1f:c8:c7:ca:d7:cd:98:f3:
55:c5:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:30:27 2025 by rpki-client