Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier: jVyPAhZZb4wMELS2PE+TSrGLGF+6WaxNVoY6l7jM0oQ=
Subject key identifier: C1:55:78:27:1E:01:9B:F4:76:44:4C:BB:C1:E1:0B:7A:C3:AE:DD:FD
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial: 0196A0BF645BEAFAECDAF2105FF30376E5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 14:00:19 +0000
Manifest this update: Mon 05 May 2025 14:00:19 +0000
Manifest next update: Tue 06 May 2025 14:00:19 +0000
Files and hashes: 1: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: nsA2GOrMhSKbSlOVM7HhljkSIS0RJyje64/zF5NReYQ=)
2: uXecHkITe3bY6-3ektwCD9ek34Q.roa (hash: 5+69NhDXNCJ8JAsANzmdkWv9h8VWfgURSoIbAe4jtSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:64:5b:ea:fa:ec:da:f2:10:5f:f3:03:76:e5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
Validity
Not Before: May 5 14:00:19 2025 GMT
Not After : May 6 14:00:19 2025 GMT
Subject: CN=c15578271e019bf476444cbbc1e10b7ac3aeddfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:8b:35:9d:b3:9f:6e:a7:07:aa:22:24:4b:
2e:87:f2:58:1f:c7:10:ba:0f:a8:cd:67:5e:f5:4a:
db:73:b3:69:4e:62:bf:45:26:4f:81:e2:97:3d:b1:
fa:c5:cb:76:7d:fb:0d:2a:8b:32:3a:84:4c:c9:35:
3d:b3:53:e6:f9:72:c9:39:f2:a1:62:0a:3b:50:42:
54:3d:ff:10:06:c2:d2:8a:a8:b1:65:78:e4:97:b8:
5c:75:cb:dd:f5:5c:91:10:f5:6d:9e:70:3a:65:2a:
3e:c4:69:25:c9:3d:04:48:e4:33:f4:d1:68:e4:48:
31:2b:e4:5b:9e:2d:fa:3b:79:32:d6:94:71:5b:e8:
cb:10:7b:fe:30:1c:af:53:d0:88:fd:6a:40:cf:e9:
d8:5e:41:31:a3:e9:d9:79:14:6f:75:ee:18:93:e6:
23:c4:72:f2:60:fe:69:98:1a:45:e2:9d:fe:55:7b:
aa:7d:2f:a1:7a:03:9e:22:72:58:ad:7b:2d:f4:a1:
5b:c5:af:d9:fc:19:ca:9c:aa:50:7e:e9:47:27:a8:
02:07:ac:ac:94:5a:73:0d:00:05:4f:3f:9a:6e:8f:
7c:e4:db:e5:08:ab:6a:1a:b2:ee:c5:79:13:76:d1:
14:21:6f:f4:2e:c4:5c:9f:9f:fc:2e:41:99:2d:25:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:55:78:27:1E:01:9B:F4:76:44:4C:BB:C1:E1:0B:7A:C3:AE:DD:FD
X509v3 Authority Key Identifier:
keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:61:9f:c9:4d:95:3e:d6:33:28:30:7d:1f:8c:84:8b:c5:b4:
1a:44:a1:9d:eb:7b:04:cb:37:08:a2:10:1f:13:55:2f:42:ee:
37:ca:4d:09:8a:ee:a4:eb:a1:72:a9:81:c7:3b:ee:e1:87:88:
49:55:d1:cb:e4:15:15:0e:35:6e:64:e2:09:b1:f1:cf:5d:a0:
55:18:61:27:24:7c:b2:02:49:34:df:ae:cc:03:05:f5:2e:e3:
2c:e9:26:cd:ef:91:83:42:43:8c:f5:e6:39:7e:2c:76:e2:73:
6d:17:2f:59:c1:d9:aa:70:58:02:4b:86:7d:30:f5:5e:32:72:
91:da:40:e6:8f:25:43:2e:59:f9:c0:3b:35:10:dd:f7:fe:2c:
7f:fe:4f:e3:e3:bb:91:7a:fd:5e:da:75:d7:ca:08:76:49:8a:
4f:98:fb:81:41:65:36:75:89:24:59:25:a8:e1:60:31:e4:c3:
06:69:26:ca:22:30:75:cb:f5:b6:7c:7d:df:9a:aa:f0:36:f1:
5b:01:b2:a8:cf:78:18:d7:10:b8:54:c5:3c:29:91:b9:87:e5:
5c:56:e7:64:b0:5c:94:06:9a:e0:63:e9:96:f0:eb:aa:99:c1:
a8:26:9f:b6:31:5f:39:ec:12:a0:94:2c:22:20:b3:82:7b:02:
b9:eb:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:42:16 2025 by rpki-client