Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: KpGPyN/KfvVxm2VPoSgaQobjptnQZbX9csAqntYcjAQ=
Subject key identifier: 4C:93:D1:84:0B:FA:3A:69:E8:E8:F8:6C:1B:40:1E:4E:BC:51:96:6F
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 0196C04AC7131FB93C4451ECFB3A622DB304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 17:00:47 +0000
Manifest this update: Sun 11 May 2025 17:00:47 +0000
Manifest next update: Mon 12 May 2025 17:00:47 +0000
Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: fjsfBupNJiq2OJxHroyrHlloGCyPKi7OwBc+2SQP230=)
2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:c7:13:1f:b9:3c:44:51:ec:fb:3a:62:2d:b3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: May 11 17:00:47 2025 GMT
Not After : May 12 17:00:47 2025 GMT
Subject: CN=4c93d1840bfa3a69e8e8f86c1b401e4ebc51966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:77:c7:62:c1:9a:89:8c:b6:29:ec:29:b4:
1a:2b:86:44:ab:29:fb:d1:ec:dd:6d:b6:90:6a:99:
c7:79:8b:51:42:3c:c4:83:37:75:a6:d8:ea:04:73:
cd:e3:62:80:5b:4a:69:55:24:84:6d:57:0b:1c:3e:
8d:da:2f:c1:21:d7:8d:ba:5f:d2:ec:27:c9:de:ea:
22:37:db:e9:32:ae:c3:17:b1:eb:9d:5c:53:36:1e:
59:a3:95:ac:19:ca:43:96:af:b6:db:cd:f7:e3:ad:
58:7d:2c:4e:9b:9d:1a:88:b2:57:86:bb:e0:8f:27:
33:ed:b9:20:fa:54:39:b8:e0:bc:e1:db:89:e3:e5:
b6:83:7b:de:e5:8f:ec:98:7f:66:1b:1d:01:5d:0a:
f3:ec:33:91:af:c8:21:71:6b:86:21:de:60:76:d6:
83:7f:84:c9:f0:42:45:2f:7e:00:a4:e0:14:f7:e8:
90:c5:d2:28:ad:a7:ee:39:05:d6:75:29:3d:03:5b:
74:27:61:58:93:df:e8:4a:3d:97:ae:11:d3:02:a4:
74:8a:9c:32:96:a1:66:c1:0e:75:36:a3:90:05:45:
34:7a:2c:4e:e9:ce:ab:d9:11:12:16:59:2a:3c:15:
e1:43:78:7a:67:0f:08:05:7e:1b:92:5a:82:bc:25:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:93:D1:84:0B:FA:3A:69:E8:E8:F8:6C:1B:40:1E:4E:BC:51:96:6F
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:95:b3:6d:3c:df:00:4d:d3:29:69:86:b3:cc:98:0a:51:da:
9c:63:f9:b6:48:13:35:68:34:5d:6f:cd:f4:37:df:c7:8d:6a:
39:89:af:95:d1:97:71:82:78:be:d7:29:64:85:c6:23:53:61:
47:5d:00:44:f6:f5:bd:c8:ad:d9:2a:b6:f9:6a:5c:0f:80:8d:
2e:39:f1:40:65:a0:f5:54:59:0f:eb:b0:84:ac:84:d9:be:24:
db:7c:60:96:ec:9f:89:1d:f0:68:0e:16:78:ce:5e:f6:60:89:
bc:61:67:12:0f:3b:51:1e:d1:cb:c8:33:bb:84:ba:57:65:0a:
68:84:68:67:ed:a8:27:28:27:c3:02:1e:27:56:0b:b3:8a:92:
8b:aa:49:4f:74:28:3d:87:16:8f:9c:cb:50:57:d7:06:a2:df:
43:40:8e:de:c9:8a:78:69:13:78:f7:2b:14:4c:a2:ef:3a:6c:
85:4a:d2:65:3e:b6:66:1b:60:ca:c6:0c:c0:be:83:0c:54:9a:
22:cf:aa:57:fc:db:d0:1c:dd:1f:48:27:fb:91:b9:40:03:32:
e1:ea:ef:16:34:c7:c6:ab:e8:ff:3f:91:53:4d:ae:df:84:f5:
d3:82:4d:b2:41:19:2e:ae:ee:ba:c8:ce:58:af:a7:4b:5a:79:
63:23:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:53:20 2025 by rpki-client