Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: dl7iAHtZ3QoFpiQ1hhI+N31z5ywvj1fAP6seOF2WvUw=
Subject key identifier: 4A:4E:57:66:8D:A4:F7:45:9B:E1:34:A4:F9:AD:C2:A3:4D:77:45:98
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 0196CFBD4DCDA7B97E671B62D2B9A8045B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 1542
Signing time: Wed 14 May 2025 17:00:12 +0000
Manifest this update: Wed 14 May 2025 17:00:12 +0000
Manifest next update: Thu 15 May 2025 17:00:12 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: E/S0FP1W1dI1skC+A0ALsB4yF3tFv4YqtQ6IYPrj5fY=)
2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:4d:cd:a7:b9:7e:67:1b:62:d2:b9:a8:04:5b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: May 14 17:00:12 2025 GMT
Not After : May 15 17:00:12 2025 GMT
Subject: CN=4a4e57668da4f7459be134a4f9adc2a34d774598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:3f:df:74:db:21:53:f2:74:f5:20:18:1b:
14:45:c9:7d:32:f7:55:e3:7c:90:a4:ac:ce:b6:d6:
1d:16:a2:d6:13:c6:45:02:0e:00:e8:c0:d0:30:7a:
39:f0:ca:06:2c:87:e7:74:59:7b:e4:71:5b:6c:6a:
2c:91:db:1e:e6:d5:20:3c:d4:16:0f:cc:6a:35:1a:
c5:e7:3f:68:10:fa:9e:14:2d:61:60:75:6d:b8:db:
42:aa:1c:df:49:ef:b3:77:fa:f2:c3:f7:5c:a2:54:
f9:97:b3:a0:d7:3e:7f:2d:73:e1:37:3d:9b:d4:d1:
7f:92:72:81:11:f2:e9:1b:a6:21:69:03:19:f5:48:
8a:04:b7:24:a6:cf:29:91:7d:9b:0d:75:d6:86:30:
08:f1:b0:35:14:80:20:72:27:ee:27:66:86:74:e7:
eb:4a:78:af:48:cd:a2:bd:bc:56:a5:11:97:09:c8:
03:50:89:b3:19:f7:09:8a:b9:1c:1c:97:e2:d8:c9:
5b:68:2d:e8:44:77:64:f2:1b:9b:89:16:06:a0:b6:
26:f7:05:38:ed:2f:1a:45:6c:ca:fe:eb:74:41:69:
4f:3e:3c:c7:97:0b:05:47:4d:8a:49:f1:b2:0b:ad:
c4:22:9c:49:14:2a:4f:c8:10:25:d1:29:b1:13:06:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4E:57:66:8D:A4:F7:45:9B:E1:34:A4:F9:AD:C2:A3:4D:77:45:98
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d0:ca:01:fd:88:92:b0:5c:80:12:07:76:dc:60:f6:f4:15:
9d:6a:cd:40:d8:7d:c3:91:aa:de:ab:53:7f:00:f1:5b:f9:c4:
09:89:f8:8f:36:22:83:ac:24:f5:08:14:9e:43:67:52:d9:c8:
ec:82:8e:d6:a2:8c:e6:74:1e:d9:d1:c6:07:70:f9:aa:1f:16:
64:72:46:58:9b:4d:79:96:5c:47:6d:98:5e:dd:37:36:d9:ec:
2f:10:5a:45:eb:e2:a8:6d:cd:de:f6:f3:5b:5e:99:9f:e5:a7:
24:f8:53:51:16:53:1f:9c:f2:93:37:ad:a5:fb:cd:87:c1:db:
2a:ba:f9:04:17:04:85:dc:15:2b:94:00:18:26:8f:ae:54:41:
37:de:4d:8a:2d:f1:de:21:44:b8:62:4f:cd:2a:12:54:b3:fb:
fa:db:b1:27:b3:69:e6:59:3c:bd:1c:a3:9d:be:f9:57:a8:28:
c3:33:b8:c8:ec:99:a7:a0:c2:9d:7f:81:8a:f6:9d:d0:21:6a:
33:27:bd:69:d1:d9:10:cb:05:21:50:d5:b2:07:42:db:12:4e:
b8:40:74:ea:43:29:44:51:08:4a:86:d4:24:10:6a:5d:a2:01:
6f:69:58:38:d3:7e:76:aa:ca:fb:be:9e:41:5f:9b:82:9b:1c:
90:4e:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:55:23 2025 by rpki-client