Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
File: OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft (raw, json)
Hash identifier: 9/X75RMQ5yjpB8hJxY7lKaPyyzzk/OqyakRXQqGCvqU=
Subject key identifier: FF:84:60:4F:21:95:A1:C0:B5:A1:4E:3B:F6:64:B2:32:B5:73:9B:AC
Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
Certificate issuer: /CN=39348867dcb2956aca65d08348e440d4727a3743
Certificate serial: 01965838B79D26234C2A68F57C6A1357B380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
Manifest number: 02A3
Signing time: Mon 21 Apr 2025 12:00:34 +0000
Manifest this update: Mon 21 Apr 2025 12:00:34 +0000
Manifest next update: Tue 22 Apr 2025 12:00:34 +0000
Files and hashes: 1: OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl (hash: kIs+O1+T2NKzGCwTtuf8idPFVwGNxBDtORYCT+Vi0ns=)
2: c6YXeFcziXYV8oA7IxxFWWIl7jo.roa (hash: 772kO8FIL8B9L379YEWTLwC21iJYKEhsMHuMIDdHwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:b7:9d:26:23:4c:2a:68:f5:7c:6a:13:57:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743
Validity
Not Before: Apr 21 12:00:34 2025 GMT
Not After : Apr 22 12:00:34 2025 GMT
Subject: CN=ff84604f2195a1c0b5a14e3bf664b232b5739bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:45:11:d6:59:51:93:59:62:16:19:20:be:
3c:4d:2a:a2:8b:db:15:d6:02:cb:a0:68:2e:d5:73:
8a:c5:c1:a2:12:1d:04:c5:66:bb:5b:95:1d:e1:b8:
d6:42:cc:e4:d7:67:9c:79:95:aa:3b:1f:14:78:13:
dd:80:2b:7f:0d:c8:3f:ff:a3:1d:35:dd:f7:bb:6f:
21:97:8e:63:b0:4e:87:b7:75:4a:fe:61:d1:f5:06:
17:b4:a8:96:a9:21:50:00:93:a1:d4:b6:28:b3:64:
49:25:65:69:d2:a0:0d:89:cf:cc:df:0b:ff:0c:c9:
13:82:6d:68:dd:8f:10:ea:71:c7:56:ce:bb:e5:52:
bb:1b:ad:f2:e2:66:c1:f3:fc:3f:3d:c3:6f:8f:73:
05:f6:56:ff:2d:d0:5f:11:51:ff:55:2b:0a:3e:e1:
97:4f:d8:cb:15:9d:13:f7:01:c4:92:34:41:8d:5a:
55:e5:88:df:94:0f:20:0e:4b:d0:f4:65:f7:5a:72:
1c:e1:cd:d9:56:35:ff:9c:8a:41:24:78:15:4b:49:
3a:13:1c:56:79:26:82:8a:d3:0a:44:55:72:e4:3c:
3c:0c:df:6d:cd:bb:ae:dd:a6:13:c8:4e:8d:98:31:
84:2b:85:f6:49:62:95:5f:6f:a9:82:24:83:fb:b3:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:60:4F:21:95:A1:C0:B5:A1:4E:3B:F6:64:B2:32:B5:73:9B:AC
X509v3 Authority Key Identifier:
keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8c:98:4b:cc:f2:ea:91:ee:7f:86:4c:ad:e3:59:5f:0e:24:
65:f5:65:c2:a6:3a:4f:c7:88:08:3f:57:43:b1:7d:09:7a:6a:
61:ca:4d:20:ec:0a:fa:fb:03:21:49:74:c1:c4:38:13:6c:38:
88:26:12:05:8d:96:3e:3b:88:79:59:79:d6:6f:68:a6:74:c6:
04:24:b8:04:25:d9:33:9c:fb:53:f6:3d:98:7c:57:34:27:be:
3c:fb:c1:f4:d4:65:70:59:dc:1c:74:fe:ef:28:ce:2d:7d:fa:
be:9f:56:ce:df:60:e6:64:df:35:04:32:af:74:77:3f:fb:c9:
10:24:4f:66:51:c4:64:9d:d8:23:20:d8:f0:d7:3a:07:ad:6c:
16:56:34:69:0f:13:91:cc:1b:56:d1:0b:03:f4:ec:b3:3b:1b:
8f:8c:2c:b4:23:8c:53:88:fd:28:63:4e:a7:04:93:73:8e:c7:
1d:30:79:98:2b:24:61:be:08:9c:89:c7:a5:a4:8f:0d:8a:39:
f3:cb:04:5e:83:e5:c2:42:9f:26:b3:de:11:6b:de:47:16:40:
0e:06:5c:bc:05:e2:0d:c0:17:45:fc:2a:5a:a7:c4:85:dd:ca:
74:e2:14:27:a3:b1:10:df:c7:c1:d4:3d:56:16:55:76:13:66:
38:61:83:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:57:45 2025 by rpki-client