Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: 18zo4gbop6ZTpK4qXQ9kqv90KhYAAk2zsMrS4ORYH9Y=
Subject key identifier: F4:C7:56:C2:A0:BF:8E:9D:BE:80:0A:FC:02:7C:CE:27:A7:C3:1A:90
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 01969F0812159BEFFF5D3FA2A41896E75E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 06:00:28 +0000
Manifest this update: Mon 05 May 2025 06:00:28 +0000
Manifest next update: Tue 06 May 2025 06:00:28 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: Zx1ClAMUuD9lyG7YgRP_om-ZEYI.roa (hash: gbBcl06UfQ1+hxbFp7K2ZbQwEqAaFU9l3RdaNWVj9Fw=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: 94NMWJCLbboPyJsuulGFa7o/I+4YTULIKLsoMWj5SPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:12:15:9b:ef:ff:5d:3f:a2:a4:18:96:e7:5e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: May 5 06:00:28 2025 GMT
Not After : May 6 06:00:28 2025 GMT
Subject: CN=f4c756c2a0bf8e9dbe800afc027cce27a7c31a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:11:f9:f7:ba:e9:11:e4:f2:e9:5b:17:81:
74:db:26:a3:6f:5a:fa:82:d1:70:5c:b9:41:29:27:
29:33:94:8e:3a:29:b8:e2:f4:70:78:0b:d0:f2:02:
91:2a:b3:92:31:88:7b:c3:68:95:07:c8:6d:3e:fd:
e3:75:91:36:3a:68:91:6a:c9:3c:30:bb:92:f7:9c:
8b:40:0f:94:f4:25:ae:17:f0:3b:11:5d:bf:6d:60:
a2:be:6c:93:6c:c6:77:92:bd:f6:12:64:95:b2:4c:
6b:fb:21:7a:d2:1d:bc:fa:80:61:94:09:d5:8b:47:
42:c0:72:8c:f5:c5:5e:d0:8a:b7:74:ba:65:0c:e8:
ef:db:85:9f:3f:bd:7b:a8:9f:7a:62:5c:34:c6:70:
48:11:13:c5:50:cc:b7:14:ff:a4:86:57:5b:34:b7:
21:12:d9:f9:fc:13:de:f3:fe:d5:7d:42:17:3b:79:
53:ac:08:51:78:ce:ca:15:7b:bb:48:13:3d:20:64:
97:c4:54:12:2e:54:a6:b8:66:1e:4d:ee:11:4d:f5:
81:6b:ba:0b:a2:ab:db:d4:8a:a7:8c:78:3c:13:75:
5b:7d:18:53:24:c8:de:fc:f5:dd:48:c6:08:a4:00:
c7:b9:57:06:ab:88:8d:29:bd:49:13:c7:ec:f6:b9:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:56:C2:A0:BF:8E:9D:BE:80:0A:FC:02:7C:CE:27:A7:C3:1A:90
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b8:17:4c:2b:af:85:2c:9f:97:d3:1b:69:45:3f:ab:fd:21:
2f:91:3b:aa:20:74:57:d6:f9:d8:01:fc:bf:ae:e7:da:8c:c9:
d9:36:b2:67:45:90:9c:ca:94:6b:6d:0b:f4:38:bc:1b:ab:43:
53:8a:2f:51:cd:0b:35:9d:56:be:6f:df:48:8f:91:29:37:73:
87:c3:59:c6:92:0a:94:03:ff:18:6b:72:9d:c9:c9:20:ea:4c:
7c:93:c3:7b:0c:71:73:9e:8a:d9:59:25:dd:bf:62:44:5c:4f:
a2:2b:1d:ae:d0:69:11:af:63:4d:9b:83:86:a7:79:f7:a8:09:
80:74:26:cd:54:75:5a:9e:74:fe:cc:da:d6:65:de:d1:06:60:
20:9d:19:c2:b0:25:d2:96:30:70:ee:76:07:1b:3c:73:23:d4:
2b:33:d1:31:83:81:b4:3b:a5:be:2f:e6:b0:fa:14:fe:54:3a:
bf:34:e3:97:af:7c:b8:e2:77:dd:ae:3c:1e:74:a1:7d:5d:cb:
8d:5a:f2:91:18:92:27:82:d0:0a:f4:cf:0f:23:a9:05:0f:e6:
6a:60:d3:44:f2:b1:79:ee:5b:97:54:d6:2e:dc:d2:b5:9a:2f:
ce:2a:27:06:7f:ed:52:d5:f7:cb:05:c1:7a:c6:15:b0:35:24:
0f:b4:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:37:04 2025 by rpki-client