Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
File: OCvsQ90a_pemT1brhUx58WP6TuY.mft (raw, json)
Hash identifier: jF1GKAFL9tci2g8wCpOhJRKOSLx+IdZDaDwQbEwbNm4=
Subject key identifier: 45:75:FC:7D:C9:10:6E:41:62:A7:BB:4D:DC:47:30:B5:05:15:57:B0
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 01965E71DD2F9DEB9D011DA1149CCD46F091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
Manifest number: 1505
Signing time: Tue 22 Apr 2025 17:00:42 +0000
Manifest this update: Tue 22 Apr 2025 17:00:42 +0000
Manifest next update: Wed 23 Apr 2025 17:00:42 +0000
Files and hashes: 1: OCvsQ90a_pemT1brhUx58WP6TuY.crl (hash: A7rV8BPBCW1MQwz3IzvcU361hA0necYLK8ZSLFwcTV8=)
2: ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa (hash: ElsDKcX3/AeNMZDxpF6Opg+D9XtiydscqeFlhPJCg+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:dd:2f:9d:eb:9d:01:1d:a1:14:9c:cd:46:f0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Apr 22 17:00:42 2025 GMT
Not After : Apr 23 17:00:42 2025 GMT
Subject: CN=4575fc7dc9106e4162a7bb4ddc4730b5051557b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:68:f0:5e:a3:12:6f:d6:f4:4f:55:6b:0f:
f2:b6:59:b5:8e:e7:1c:b8:c9:34:d3:86:a4:49:4e:
61:34:d2:f0:33:6e:25:c6:1f:e1:c5:ee:cd:ef:4a:
af:90:04:9c:33:eb:8d:0b:be:1f:61:c0:d6:9a:ea:
2f:53:d4:b4:37:79:70:3e:35:62:ac:7f:4e:fb:28:
8f:71:f3:d8:6e:1a:fc:bb:b8:a6:8c:fd:37:38:ca:
b9:10:9c:e0:55:f1:ac:11:8e:b2:50:ec:5d:38:e1:
f6:b7:f8:e0:36:fe:43:20:93:55:d7:24:b0:90:7e:
cd:88:eb:51:e4:d3:1c:90:00:8c:14:95:39:6e:c7:
a7:46:97:72:bd:2d:f3:c2:aa:6c:3d:e3:3a:69:4c:
5e:71:8e:7a:1e:12:7a:71:37:2e:57:23:b1:f0:92:
90:5c:1d:29:0e:ac:c5:97:27:91:2d:1c:a5:30:cb:
97:71:cd:df:7c:d0:46:28:ae:7d:68:c8:0d:2b:48:
3f:23:99:21:e9:ec:80:83:d5:4d:b0:cb:d6:ac:98:
14:b1:30:93:fe:0d:58:7d:4c:b0:67:d8:8f:e0:3d:
de:ac:7e:19:9f:2c:44:28:1f:67:54:d1:b9:ef:7a:
8d:ae:54:e1:20:6f:91:66:8c:e0:2c:f7:29:d0:c1:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:75:FC:7D:C9:10:6E:41:62:A7:BB:4D:DC:47:30:B5:05:15:57:B0
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:95:8f:ba:81:b6:72:c7:47:82:03:1a:89:dd:45:99:02:33:
d5:e7:36:d1:4a:03:a7:78:e6:af:ec:88:79:2b:f0:72:ce:50:
da:be:dd:8a:d8:73:25:70:b7:60:4e:bb:c6:4c:6a:b6:8d:0d:
0d:99:55:0a:23:ba:1f:c6:a4:99:5f:85:1c:d4:53:af:1f:3f:
9e:49:9e:50:41:bd:7e:eb:43:fc:a8:69:ee:35:ca:41:0d:29:
1b:72:59:cb:70:5e:d4:03:66:11:f8:d1:32:ac:35:9d:2b:88:
28:c0:db:f7:0f:f7:71:a5:9a:c8:58:55:72:d7:55:f3:1a:9d:
26:c0:f1:75:03:39:4e:9b:1d:87:c8:36:6a:7f:a3:4b:3d:ec:
9d:fe:e7:68:8c:15:b0:7b:bf:62:11:29:35:14:16:14:33:95:
e5:1d:81:b4:4d:32:ce:df:54:e6:e2:8b:4c:07:d2:4e:09:56:
df:3f:79:8f:70:81:82:fa:75:bf:57:37:e6:9c:c4:81:a3:fc:
9b:31:2f:e7:ab:dd:4f:f6:56:6c:e1:d7:08:32:63:d5:16:0e:
be:2e:7b:3d:db:3f:d5:5b:c8:0e:9c:31:7e:aa:02:d6:77:f6:
de:36:42:1b:e9:52:3a:29:94:a9:dc:e6:4a:e3:73:e7:31:c9:
c0:f0:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:27 2025 by rpki-client