Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier: ikC5VmD+mVKNnZ6f1E1ggZnKFk2ZifyRw3h+dQfbOU8=
Subject key identifier: AA:8E:94:87:8F:13:F0:02:BE:E6:69:01:11:2C:14:57:40:7F:23:FA
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 0196BD128C5216FF833F874FF8FA4CFA9C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number: 10C4
Signing time: Sun 11 May 2025 02:00:31 +0000
Manifest this update: Sun 11 May 2025 02:00:31 +0000
Manifest next update: Mon 12 May 2025 02:00:31 +0000
Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: TGuXVuVNPa1vJVKbuATH8wlKKQ2KgAfx29Q2OeFvFdk=)
2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:8c:52:16:ff:83:3f:87:4f:f8:fa:4c:fa:9c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: May 11 02:00:31 2025 GMT
Not After : May 12 02:00:31 2025 GMT
Subject: CN=aa8e94878f13f002bee66901112c1457407f23fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a6:16:72:97:f0:8e:df:0f:33:7a:8b:14:7e:
a0:bc:44:8e:ca:7c:cd:5e:bc:6a:62:29:a2:44:9e:
61:26:12:dc:8b:6c:f2:07:80:54:54:a6:d2:c9:52:
01:fc:bb:32:11:0f:3b:b8:4b:dc:6d:f9:b2:34:44:
03:3f:c4:98:c8:0c:8f:3d:33:6a:82:48:ff:5e:f2:
33:76:c7:13:6c:bd:6f:d8:d3:c4:3f:cc:7d:b3:db:
0b:3c:2a:4a:0c:1b:4e:d7:89:b6:fe:12:ed:6f:8e:
ae:99:e8:0f:94:fc:b5:f2:f1:b0:07:b0:b5:ef:3a:
d6:c9:49:b1:f0:22:72:e0:71:8c:f8:5d:72:22:4f:
fa:16:69:3b:1e:b1:8b:e8:84:44:06:81:0d:f2:e9:
8a:94:6e:7c:62:cc:ce:c9:9a:cc:5b:e7:c8:22:b9:
ce:55:93:4f:a2:10:f4:90:c2:dd:2e:d8:0b:34:3d:
b1:7b:89:5c:40:f1:00:3b:87:d4:e1:3d:4f:37:05:
93:fa:09:a8:54:35:72:1b:67:d3:ad:9b:56:a7:8f:
4d:69:29:f9:8f:4f:5d:cd:fe:61:c7:e1:cf:fd:ac:
56:4e:88:3e:44:32:76:8a:84:7c:20:61:71:53:48:
1c:05:ff:52:08:a3:2c:3c:ba:bd:36:82:26:21:9c:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:94:87:8F:13:F0:02:BE:E6:69:01:11:2C:14:57:40:7F:23:FA
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f9:2a:34:c3:f4:03:6f:68:50:99:47:65:41:8e:b3:5b:83:
aa:60:f4:74:7b:16:bb:cf:0c:8c:10:a3:30:6c:f3:a0:32:12:
d7:30:d4:7c:91:71:17:32:82:e4:41:89:2e:14:31:e4:f3:c6:
1f:0a:16:11:02:f6:91:ae:5c:b7:b3:02:1a:97:0c:31:80:b0:
e0:58:28:85:55:a6:0d:e0:95:1e:56:a5:7b:23:66:fb:46:f3:
2a:6b:41:c7:6d:62:29:bd:2d:76:76:7c:95:1c:b2:b4:9b:b7:
c3:fe:2a:ec:53:da:7e:24:e6:be:b7:9b:39:df:46:ef:b8:d6:
46:cd:75:93:61:c4:35:07:b4:f4:af:43:c5:63:e2:ae:27:64:
3a:25:ea:80:c5:a1:61:13:6d:92:e4:9a:84:77:7e:8a:1b:9d:
50:48:82:ed:91:d4:d2:60:14:30:13:fa:e3:4c:5a:4d:d1:db:
ae:f5:88:78:8c:2e:41:01:0f:b4:2b:3c:a5:ef:51:21:50:8d:
da:56:30:20:ce:c3:55:34:c3:ed:58:be:8c:2a:7c:e7:bc:9d:
90:f8:03:18:f3:e1:74:95:05:94:4b:4c:f7:41:06:27:f5:35:
55:61:51:f3:c6:cb:cb:1b:c6:4a:44:f2:2a:f6:e5:4c:95:ac:
7a:2c:23:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:33:11 2025 by rpki-client