Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: Cwvxev6pA54o4kgHRzOP+NCa/g/ADtOEcRvb/3uWGCs=
Subject key identifier: 58:9C:F7:93:14:BC:EF:87:FE:4E:A6:09:E8:7F:22:6C:DB:7D:49:23
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 0196A164CFF01E407E1A8FE677FC38E33192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 17:01:00 +0000
Manifest this update: Mon 05 May 2025 17:01:00 +0000
Manifest next update: Tue 06 May 2025 17:01:00 +0000
Files and hashes: 1: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (hash: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=)
2: cQexL6krMjfc-1q8FYIof7PMMrw.roa (hash: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=)
3: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: FvDaRYtJeoeTWZdrY777mgBFJ7AVWxbTQLzl40805vQ=)
4: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (hash: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:cf:f0:1e:40:7e:1a:8f:e6:77:fc:38:e3:31:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: May 5 17:01:00 2025 GMT
Not After : May 6 17:01:00 2025 GMT
Subject: CN=589cf79314bcef87fe4ea609e87f226cdb7d4923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:65:81:d7:6f:16:1e:49:ce:e6:e7:d3:02:
42:5f:18:3c:17:06:d0:06:c9:93:6e:ac:96:93:1d:
d6:b5:fd:79:4a:9b:bb:df:68:ed:af:39:23:a2:89:
19:c1:1e:2a:d9:1d:10:9e:2f:4e:1d:9f:63:46:7f:
58:04:fe:4d:54:7d:3b:51:b5:77:0b:4b:48:44:3f:
8c:42:bc:42:b8:fe:43:03:3f:5d:33:43:08:98:db:
af:f8:09:82:cf:0c:9b:b6:c9:a2:17:38:73:d6:5c:
6d:74:71:b3:fa:52:c0:29:f0:29:0a:79:29:ad:fb:
8e:10:79:50:55:be:b2:19:27:c4:ad:20:e1:9b:3d:
ce:68:9e:49:5a:77:e6:50:8f:b6:5d:0a:62:57:cc:
bd:89:2f:8c:67:a8:5c:eb:43:47:c6:47:05:11:fe:
c8:ab:7c:d1:5f:d0:ef:0c:ed:f9:d6:ab:ed:c8:a3:
f7:8b:3f:a2:15:f7:08:a3:b5:8a:3c:70:65:d3:e3:
dd:57:ff:67:7e:44:ab:60:d7:9a:0a:04:6d:12:a7:
6e:fb:92:42:38:54:f6:57:f6:0f:5e:49:be:f1:fa:
50:27:7c:86:aa:a1:9e:10:18:ff:1b:53:8a:da:45:
36:6f:ba:7f:43:a3:7c:7e:1f:3d:41:2a:6d:78:37:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:F7:93:14:BC:EF:87:FE:4E:A6:09:E8:7F:22:6C:DB:7D:49:23
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:40:9a:6b:1c:6b:d1:33:45:54:48:4b:21:ff:32:78:88:f6:
9a:2f:f0:28:a2:ed:4c:fa:e5:9b:0a:ac:99:58:0b:19:8f:4a:
88:d6:9d:c3:23:52:95:0b:df:0f:1e:c8:d3:42:e3:89:4a:64:
26:b5:c9:b1:b6:a9:6c:f1:78:a6:41:a6:fa:06:e1:00:4c:b6:
18:61:91:c7:35:8b:88:a7:d1:e8:9e:65:4c:12:75:56:82:4e:
0f:a2:f9:d5:d0:59:0d:0e:8a:df:14:4a:95:3e:8f:90:01:d3:
4d:f4:d2:91:2b:31:c5:2e:07:93:01:f0:d3:a3:bf:7a:11:d8:
72:6a:cf:8d:cd:5b:16:6c:be:60:5b:e9:c5:3b:36:96:e7:2e:
bf:02:b9:2c:84:de:e6:1f:a6:c3:54:72:4a:63:61:d1:c4:35:
a8:dd:39:f9:32:51:64:54:e8:3e:77:7e:36:63:95:b0:de:6c:
e4:74:ad:8d:b7:f6:20:79:b7:f1:a0:88:0d:d4:ce:a7:b2:9e:
45:4d:05:fb:08:b3:4d:5c:72:99:31:d6:19:2f:db:31:ca:cf:
3d:76:32:60:62:5b:eb:0f:1e:9f:78:fe:20:c2:2a:f4:33:c3:
ad:99:ca:fc:ec:4b:f2:ba:4c:2c:35:6b:08:d3:ed:ad:84:13:
d5:c4:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:11:19 2025 by rpki-client