Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: 1q7KlaIYKvr84fPnVLNCbgC3Tf0peVDP5XC+J1mKaOI=
Subject key identifier: 86:2E:06:75:D0:8B:66:84:59:62:2D:80:CE:40:21:BF:74:41:2A:87
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 019659F049ECA89DD9A7F3DD0B3BE0A0195A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 20:00:41 +0000
Manifest this update: Mon 21 Apr 2025 20:00:41 +0000
Manifest next update: Tue 22 Apr 2025 20:00:41 +0000
Files and hashes: 1: cXzh2EByibI6pp16VOl9xphGioo.roa (hash: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: 8FAJugbHa3rWqsYjjdnaiwYUmRHhFuN0coojxgMRFA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:49:ec:a8:9d:d9:a7:f3:dd:0b:3b:e0:a0:19:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Apr 21 20:00:41 2025 GMT
Not After : Apr 22 20:00:41 2025 GMT
Subject: CN=862e0675d08b668459622d80ce4021bf74412a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:4e:53:4a:16:7f:e6:ef:d9:ae:ef:50:36:
29:74:a8:3c:08:d3:f4:20:d5:b1:f1:87:d3:82:a5:
ea:c5:dd:e8:cf:82:7f:92:e6:cb:91:12:17:4c:19:
6b:b1:9f:47:0e:ac:57:6d:49:e1:45:bb:fe:e4:c0:
32:9e:54:01:50:e5:e6:ef:7a:bb:0d:20:85:e8:c0:
51:4c:1b:ac:e2:4d:9c:0b:80:39:78:2d:b7:7f:ab:
8c:a8:ee:95:cf:4a:20:15:cc:54:89:6d:ae:32:22:
6a:9d:e8:14:60:09:3f:1f:59:55:de:1a:48:99:b7:
c5:0a:05:4a:ab:41:21:5f:33:c7:5e:17:df:84:7e:
c5:d9:91:a8:1e:d1:b8:62:c8:0c:c7:5c:cb:84:26:
2a:5b:1b:eb:56:01:49:62:99:ec:bd:8b:da:9c:6b:
7b:03:16:fe:41:f4:13:61:dd:26:d6:7a:b1:d7:a9:
6e:3d:6b:4a:18:c4:90:16:c3:2d:17:f7:04:23:99:
38:3a:a5:c8:14:46:59:a9:17:50:59:0f:37:8b:1f:
38:24:aa:31:b0:a2:36:e0:5c:3b:05:6a:e6:29:b2:
22:2f:49:09:fc:c0:b1:52:cc:39:da:c7:7b:be:82:
8c:9f:4a:e5:8f:f2:20:1e:7f:05:e4:68:38:0c:62:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:06:75:D0:8B:66:84:59:62:2D:80:CE:40:21:BF:74:41:2A:87
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1c:d0:64:9a:e8:1b:a7:40:db:93:9c:1a:e7:71:21:f4:78:
bd:48:25:45:c0:83:90:68:4a:ab:a0:47:5c:29:33:df:75:ff:
71:6d:ea:44:2d:17:ff:9e:8d:24:88:b1:77:98:2f:d2:f8:dd:
ee:6c:ed:0f:7b:27:51:61:e7:77:6c:28:40:7d:08:c5:92:e4:
6c:58:ba:89:e3:66:b8:77:2c:b6:c7:17:12:ab:6d:69:f5:f7:
a2:db:0b:f1:8a:6c:9f:52:f5:e7:8f:7f:2c:8a:cb:3a:62:f5:
a2:d1:9d:38:53:d5:38:48:1f:86:60:fe:25:fe:6a:20:c8:06:
4f:7f:2c:b9:fb:41:3c:59:df:8b:f6:1e:e3:e1:6d:fe:6a:ce:
26:02:fe:05:3c:72:7e:5b:cb:aa:f4:08:b2:0d:f0:a2:77:04:
36:06:f1:9a:33:4d:9b:78:c8:b6:02:b1:a1:a7:b9:5d:a1:9d:
27:46:66:ab:92:37:31:40:c4:ef:46:9d:c0:26:68:df:eb:b3:
4e:39:a4:34:0e:16:47:51:de:8e:b5:21:57:12:be:a1:35:5c:
bb:a5:a2:ed:5c:8d:51:f5:22:30:c0:d6:f2:a9:d9:41:3b:8d:
cf:15:db:ff:3f:ba:ab:72:f2:73:c9:fb:74:ef:86:fe:08:52:
cf:45:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:47 2025 by rpki-client