Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: iCzdg1MTm6bnFstFuPFRjG5wf+n+6Tc0G7MyN83acCc=
Subject key identifier: FF:80:EA:0E:65:7B:2D:35:D9:32:6A:E0:F9:8C:B6:68:51:A3:DE:20
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 01965E3ACF84C698325D631C241983ED8105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 16:00:34 +0000
Manifest this update: Tue 22 Apr 2025 16:00:34 +0000
Manifest next update: Wed 23 Apr 2025 16:00:34 +0000
Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: wU0BR35tq/brMKih2kpj+dGqlHU99SDGFuGxAzf8xDI=)
2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:cf:84:c6:98:32:5d:63:1c:24:19:83:ed:81:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Apr 22 16:00:34 2025 GMT
Not After : Apr 23 16:00:34 2025 GMT
Subject: CN=ff80ea0e657b2d35d9326ae0f98cb66851a3de20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:2a:3a:30:a2:a0:b9:66:66:c0:2d:a0:ec:
b6:60:d7:fe:ee:ef:37:20:bf:47:55:5c:c0:54:6b:
08:9e:c0:95:ba:ef:a7:91:f0:63:f3:30:71:fe:16:
b0:ae:24:62:45:59:de:0c:84:88:fb:fe:00:a2:e1:
0c:51:70:80:45:46:05:a9:a0:25:13:74:85:f2:48:
63:0f:17:5f:9d:8a:24:18:dc:cc:ff:18:85:03:29:
6d:85:c2:ce:bd:b7:f7:dc:be:88:2a:81:fe:c3:ec:
08:c6:b4:52:ea:10:2c:af:58:d0:3d:9e:c7:89:11:
d3:76:00:70:46:06:39:9d:be:6f:49:6a:ee:c3:8c:
8a:48:85:96:47:e8:77:6b:dc:0e:49:7b:53:cc:c8:
e5:9e:27:ef:d6:70:17:d3:9a:0a:17:fd:b1:e1:23:
fc:63:19:2f:50:d1:ce:b4:a2:81:ae:5b:49:02:0a:
b9:d4:aa:fa:9c:bc:8e:bc:16:d0:b1:9d:f8:f6:77:
51:b8:dc:fa:6f:63:c8:60:aa:af:1d:2a:a7:9c:73:
86:41:78:1d:5a:88:93:7f:05:89:77:63:d2:7e:a6:
b3:85:85:70:14:da:0a:f5:fd:1b:af:c8:a3:af:f3:
2b:08:d6:31:18:67:d1:cd:e7:f3:b9:cf:ea:f7:2c:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:EA:0E:65:7B:2D:35:D9:32:6A:E0:F9:8C:B6:68:51:A3:DE:20
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f2:4f:7a:41:88:be:d5:c2:38:05:f4:7d:7f:dd:0f:ab:69:
7e:c8:35:dc:6b:8b:3f:6d:23:c7:65:55:41:81:20:56:b5:ff:
64:26:7b:49:f5:be:a2:c9:cb:90:96:a9:af:00:6b:01:e7:7f:
3d:a2:40:50:9e:61:47:06:e8:15:bf:49:c1:64:4a:29:3f:9f:
2f:23:7e:b1:0f:1f:24:42:e5:da:75:af:39:0f:df:f0:99:9e:
da:6b:c5:da:cb:ac:e6:73:54:ea:6f:a9:65:2c:ba:5e:f5:92:
16:80:7a:f4:5f:9e:59:7b:e8:fe:96:6c:98:66:c6:2c:0a:3b:
91:6d:99:45:45:2b:9f:6a:2d:2e:8a:ff:ad:d3:71:f3:d9:38:
6f:fa:96:51:83:a1:d2:8a:36:f9:fa:05:ea:b8:26:da:69:f1:
39:e3:39:c7:45:1d:3e:1b:2a:60:a1:d1:85:bf:5f:80:10:9f:
82:5e:bb:5d:3a:58:cb:ad:2a:2c:35:fa:1b:da:04:25:4e:11:
c6:90:7b:65:fd:71:ee:68:5c:07:2e:93:ca:44:af:16:d9:fa:
a2:da:12:df:84:e2:5e:ed:f1:6d:aa:50:ee:72:05:70:ee:66:
5e:bb:4b:31:0c:7b:02:ed:53:43:0e:d7:0e:1f:24:6a:52:50:
32:11:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:07 2025 by rpki-client