Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier: sOJKAMMyojmCvtNMP+f6G35g/DyuHeRi2GTcOPJXWTo=
Subject key identifier: 41:54:93:AA:5A:57:E3:E6:FE:5C:83:E9:D0:96:68:B6:BC:C3:B3:96
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial: 0196A2774F5C54BF5742D45DCED397FB1A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number: 148D
Signing time: Mon 05 May 2025 22:00:50 +0000
Manifest this update: Mon 05 May 2025 22:00:50 +0000
Manifest next update: Tue 06 May 2025 22:00:50 +0000
Files and hashes: 1: 8iSreq9sFy4jQpPohIGSY5mGVho.roa (hash: JWocgKBNIhnSVWHkP0cAfvpMZaqkdklTc5KStlxqdMY=)
2: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: cycnUEYytMZNIjGmKRLmq4QYmH9Lxgtz2Wp+jzzg8s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:4f:5c:54:bf:57:42:d4:5d:ce:d3:97:fb:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Validity
Not Before: May 5 22:00:50 2025 GMT
Not After : May 6 22:00:50 2025 GMT
Subject: CN=415493aa5a57e3e6fe5c83e9d09668b6bcc3b396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:e0:ee:9b:32:ad:a9:81:0f:9b:6b:48:83:
f4:2e:44:dd:95:5e:2b:ae:fd:b9:bf:fd:b5:8f:6b:
9f:ac:38:25:f8:1b:9d:88:c0:7e:ab:99:ad:d4:fe:
42:63:0d:dd:33:c9:02:c8:fc:d5:53:3e:59:5a:b1:
35:ec:d2:c1:89:2d:2c:ae:f3:d5:7f:14:46:da:38:
cf:e7:50:9e:01:6e:ad:e4:25:94:e7:14:d7:2f:e0:
d2:0f:f4:3b:ea:31:ec:d1:ee:45:da:f7:a2:da:ff:
fc:49:3c:9e:36:ed:70:41:ae:e5:ec:a6:6d:97:b6:
6c:a3:6d:2e:06:80:8e:c8:c7:cb:31:86:26:c2:fb:
63:3a:f2:26:00:eb:a4:6f:10:dc:21:51:5c:93:8b:
cc:23:98:21:0d:03:98:80:e6:f5:e3:a4:32:39:f7:
41:6c:63:a3:20:e3:63:ce:7d:5e:01:d8:b6:79:ab:
4f:83:5d:27:23:68:c2:31:be:e0:3c:33:f0:9d:73:
39:99:a7:7f:6a:43:74:e6:4e:a7:a9:a0:bf:28:a5:
59:4e:c1:d5:dd:6a:79:25:73:21:4b:ad:b7:70:aa:
c9:cb:58:84:c3:82:ac:0c:91:67:6e:c3:12:ec:2d:
49:8f:97:31:36:a1:6e:a1:89:92:f3:8c:11:39:44:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:54:93:AA:5A:57:E3:E6:FE:5C:83:E9:D0:96:68:B6:BC:C3:B3:96
X509v3 Authority Key Identifier:
keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5b:f1:6b:03:99:f2:4f:e8:44:55:df:48:f7:c3:d3:ea:eb:
d0:4c:4c:7c:7a:cf:b0:65:df:ae:14:19:b2:b7:ef:0f:f4:54:
a8:c5:b1:7b:a5:5c:38:e7:9a:34:93:8d:2b:48:4f:90:63:19:
0b:66:67:0b:e8:08:48:78:85:d2:b0:9c:ba:6f:c8:9a:99:50:
27:2e:65:5e:8c:03:2b:8b:de:6b:cb:35:82:05:cd:fe:6e:ba:
a0:01:dd:77:cd:b4:6d:1e:4b:78:47:b1:03:18:d2:5e:66:26:
f6:b7:ad:f6:1c:51:c5:f2:d3:43:c9:2d:71:dd:0f:69:e6:e8:
d8:70:4b:15:d9:23:5b:79:9e:2e:9e:9e:45:39:50:0c:cd:d1:
34:3b:45:a8:73:8e:35:cc:b9:b8:4b:4d:0c:26:6c:6b:81:b2:
2c:cd:a0:9c:18:41:4f:35:ed:51:aa:7e:38:67:d0:ac:69:4e:
bf:9a:74:d0:4b:7a:15:e2:95:de:63:c7:dd:46:42:b1:4a:57:
1a:8d:88:10:39:13:47:ce:fa:bb:21:f8:93:b9:82:37:92:20:
72:48:53:83:95:9e:dc:3b:a3:cb:71:7e:54:0c:68:73:ab:a8:
64:36:82:6d:b7:b9:a3:c7:53:26:86:4a:67:8c:8f:0a:ee:75:
54:f5:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:46:18 2025 by rpki-client