Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: SrL1ratm6Z7QqD/EAoTILIwgdVs9mSxktIzrTG4CdHY=
Subject key identifier: CC:1C:C3:A1:C2:87:58:1A:CB:54:97:37:E6:DE:A1:A6:B7:4D:7D:2C
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 0196550078C382588F6BDAA5865112CDB1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 21:00:16 +0000
Manifest this update: Sun 20 Apr 2025 21:00:16 +0000
Manifest next update: Mon 21 Apr 2025 21:00:16 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: qwS+rxhCHsGeKJEt6gFLTx3w0siMzAGhnQbczDAzRzs=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:78:c3:82:58:8f:6b:da:a5:86:51:12:cd:b1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Apr 20 21:00:16 2025 GMT
Not After : Apr 21 21:00:16 2025 GMT
Subject: CN=cc1cc3a1c287581acb549737e6dea1a6b74d7d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:b3:bc:46:43:83:e8:bf:ad:4a:ed:cb:e8:
02:25:49:64:df:7e:79:0f:e3:aa:00:95:7f:d1:11:
30:d1:84:db:96:8c:3e:71:7b:f6:f4:3a:9b:ea:ab:
7c:fe:cb:90:d5:f7:8c:0c:ee:ae:2f:3a:d5:e6:89:
01:4c:28:34:ad:f2:99:4e:3b:a2:b7:18:aa:ad:96:
4b:fa:13:38:00:83:ad:42:c0:80:c5:5a:5b:e4:07:
99:ff:71:41:27:4d:69:49:b8:1f:4a:1a:9f:20:ce:
8c:2a:d5:0a:70:e4:74:74:ec:db:0d:48:62:db:24:
1a:c9:43:a3:f8:71:25:78:93:1c:75:9d:b2:6b:c5:
de:71:e9:62:a4:5c:7e:9d:fb:ce:14:eb:89:9f:8e:
d3:d7:c6:69:9d:ec:b8:ea:89:a9:f7:60:00:08:9e:
ab:17:50:49:9d:6f:02:df:c9:d0:dd:67:31:76:3a:
d4:bb:32:bb:8b:81:64:f4:87:7a:57:1d:59:7a:86:
cf:40:27:65:fa:3b:8e:2a:cf:a9:06:86:70:95:b1:
0e:ef:4b:77:1b:15:75:8b:91:36:83:f8:24:75:1e:
29:70:62:ed:51:f4:73:4c:11:7e:9b:30:16:c9:fb:
72:9a:2f:e7:2e:a5:e3:fa:67:8e:6d:bd:04:1f:0b:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:C3:A1:C2:87:58:1A:CB:54:97:37:E6:DE:A1:A6:B7:4D:7D:2C
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f6:5e:65:60:94:8a:2b:4e:50:6a:b0:05:36:8f:17:0f:70:
94:f7:0e:4a:84:32:e7:2e:05:fc:d0:2c:23:79:2c:6b:cd:40:
82:63:f8:32:c1:95:18:a5:1d:2a:fb:3c:91:a5:97:c8:85:12:
fe:2c:ff:57:3a:4e:23:49:fb:7f:53:e8:32:d6:36:92:1a:e1:
3e:7b:d1:01:b9:85:70:41:e3:75:7d:f4:bb:8e:d0:7f:e1:04:
73:e3:ce:d8:55:47:b3:0c:a4:b3:25:89:09:cf:93:c5:e1:28:
20:14:34:49:45:05:00:c6:f7:c5:ee:1a:42:b0:11:c7:9b:c5:
d6:1f:64:04:8a:2d:ff:50:72:8a:46:0f:1b:65:c5:54:a5:29:
78:95:9f:60:56:8e:90:41:26:3c:b4:50:0b:f3:15:8b:96:3c:
c3:2a:c7:8c:90:de:cc:c3:a7:96:5a:53:10:cb:22:65:7c:5e:
12:82:b9:c1:9b:e7:72:13:99:b3:31:05:b8:9e:76:78:1f:ad:
d6:bf:80:cb:04:61:ac:a7:5b:27:d8:60:ec:cb:03:50:76:0c:
ad:00:8a:23:e6:44:a1:12:be:3a:87:be:7c:f6:74:43:06:52:
86:98:05:91:9e:05:9d:37:d8:ed:a1:a5:f1:78:84:df:2b:10:
46:93:50:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:02:46 2025 by rpki-client