Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: Tk/u5X8Ew86xvr/d4C4qlobna7pgNQ/fSSBJJgTlwB4=
Subject key identifier: 5B:DE:36:A0:F3:6C:60:04:D0:9F:C6:B9:BF:C2:EA:3C:24:5B:60:E2
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 01958EBD0F5F2E9C428588BEE40487AF6361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 0452
Signing time: Thu 13 Mar 2025 09:01:49 +0000
Manifest this update: Thu 13 Mar 2025 09:01:49 +0000
Manifest next update: Fri 14 Mar 2025 09:01:49 +0000
Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: G5bx1GbV3CE/vA1iydslyyxRYUnhHq3OLbWwlifJtvE=)
2: sq58ozSBBYn9Pq2iD0u8A1RCXws.roa (hash: HPO9RE+AHD5O6YfVyp7Diuw2Q5Nz4j4DREm/1Ool0tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:0f:5f:2e:9c:42:85:88:be:e4:04:87:af:63:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Mar 13 09:01:49 2025 GMT
Not After : Mar 14 09:01:49 2025 GMT
Subject: CN=5bde36a0f36c6004d09fc6b9bfc2ea3c245b60e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:f9:60:16:26:54:75:43:f8:2d:4e:cb:27:
67:31:de:96:30:a5:c3:e7:71:65:c0:c0:75:21:7a:
94:7c:6d:33:73:f6:3a:cb:c1:72:df:dc:48:ed:af:
51:4d:88:9b:0e:89:ca:c4:e2:f8:e1:b4:55:51:f1:
f4:a4:8b:5f:82:70:0d:af:f5:28:6d:d3:59:a9:c1:
cf:8c:79:06:bb:7b:44:1d:45:1c:66:ef:17:17:b4:
dc:e4:e5:6e:71:d9:e6:25:9c:16:a3:fe:94:9a:e4:
38:3f:7f:01:be:c1:cf:8d:d9:32:57:b7:04:97:ee:
94:c3:e2:7e:bd:c5:bd:98:56:24:1e:83:fb:20:b4:
96:22:90:75:1e:11:0b:b9:14:aa:30:d1:3a:fd:79:
ad:69:65:f5:7c:19:6b:39:45:af:e9:87:0c:cf:80:
e5:34:dc:26:1d:91:9c:62:1a:64:e9:56:2e:ed:24:
6b:21:eb:36:f1:87:97:6f:00:0e:37:3c:d3:65:11:
20:34:99:60:ae:9e:42:71:49:95:ba:e0:1d:ea:1c:
ab:2a:29:5a:34:83:59:98:dd:4a:8b:83:b8:e1:21:
0c:6b:17:0b:7e:e2:37:a3:49:37:23:ad:b8:4d:fc:
74:98:d6:c0:9f:47:63:47:d6:b2:60:b6:0d:f3:2a:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DE:36:A0:F3:6C:60:04:D0:9F:C6:B9:BF:C2:EA:3C:24:5B:60:E2
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4a:75:7d:5e:de:4c:09:ac:52:4b:44:ea:d6:a4:58:66:2b:
2a:9f:f7:cf:85:f1:22:05:8c:54:d5:31:28:c9:a4:26:fa:41:
5b:e3:b1:49:0a:bf:20:74:33:5d:60:3c:51:a4:55:59:56:94:
70:16:da:2b:6b:65:32:19:dc:73:12:fb:22:d2:22:b1:78:51:
5d:cf:d5:84:a3:b4:37:1c:10:63:8d:df:97:1d:27:e6:b6:4f:
87:b5:58:94:86:75:95:07:19:1d:1f:3b:6b:d0:fc:a1:e2:fa:
fc:e2:95:97:e1:fe:2f:d2:7c:78:39:aa:25:ad:30:78:ec:51:
8b:59:e7:b6:53:9b:a6:07:9a:d8:ff:3b:71:49:10:09:9d:7e:
c3:4b:28:f0:e1:33:12:e6:80:f3:01:a1:30:52:2c:af:05:89:
c9:f9:65:d4:3e:72:1e:7a:e5:b0:40:e8:ef:89:de:ad:17:86:
3d:63:50:ad:45:7c:1d:f3:69:3d:3d:7d:02:f7:05:e8:7b:4d:
45:ff:a1:ac:af:a7:99:59:65:f5:f3:9f:7e:ec:ec:5b:e9:49:
17:45:76:0a:69:20:a1:3e:86:e9:39:94:b6:b2:9e:3d:c5:3d:
b7:be:d9:a5:14:c7:4a:23:f5:23:ea:e2:fe:0f:78:4d:a1:e8:
34:88:71:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWOvQ9fLpxChYi+5ASHr2NhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzlmOTJiODI1Y2UxMTA5MDNjMzFkNTIyYjBmNTBjYWZk
NzRhNmYwHhcNMjUwMzEzMDkwMTQ5WhcNMjUwMzE0MDkwMTQ5WjAzMTEwLwYDVQQD
Eyg1YmRlMzZhMGYzNmM2MDA0ZDA5ZmM2YjliZmMyZWEzYzI0NWI2MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq75YBYmVHVD+C1OyydnMd6WMKXD
53FlwMB1IXqUfG0zc/Y6y8Fy39xI7a9RTYibDonKxOL44bRVUfH0pItfgnANr/Uo
bdNZqcHPjHkGu3tEHUUcZu8XF7Tc5OVucdnmJZwWo/6UmuQ4P38BvsHPjdkyV7cE
l+6Uw+J+vcW9mFYkHoP7ILSWIpB1HhELuRSqMNE6/XmtaWX1fBlrOUWv6YcMz4Dl
NNwmHZGcYhpk6VYu7SRrIes28YeXbwAONzzTZREgNJlgrp5CcUmVuuAd6hyrKila
NINZmN1Ki4O44SEMaxcLfuI3o0k3I624Tfx0mNbAn0djR9ayYLYN8yoEOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFveNqDzbGAE0J/Gub/C6jwkW2DiMB8GA1UdIwQY
MBaAFDk5+SuCXOEQkDwx1SKw9Qyv10pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMt
OWZjMzY0MTFhY2NjLzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMtOWZjMzY0MTFhY2Nj
LzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUp1fV7e
TAmsUktE6takWGYrKp/3z4XxIgWMVNUxKMmkJvpBW+OxSQq/IHQzXWA8UaRVWVaU
cBbaK2tlMhnccxL7ItIisXhRXc/VhKO0NxwQY43flx0n5rZPh7VYlIZ1lQcZHR87
a9D8oeL6/OKVl+H+L9J8eDmqJa0weOxRi1nntlObpgea2P87cUkQCZ1+w0so8OEz
EuaA8wGhMFIsrwWJyfll1D5yHnrlsEDo74nerReGPWNQrUV8HfNpPT19AvcF6HtN
Rf+hrK+nmVll9fOffuzsW+lJF0V2CmkgoT6G6TmUtrKePcU9t77ZpRTHSiP1I+ri
/g94TaHoNIhxvw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:05 2025 by rpki-client