Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: YiJjTijUCSIHqFC63YnwB+p0mHm5JBcZS9Pv356dYZo=
Subject key identifier: 64:B3:EF:D6:6A:F6:0B:8F:0F:C0:1A:59:16:1A:77:19:21:65:C8:24
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 0196865B2CCC6A07CBE3818DA58275E29DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 11:00:44 +0000
Manifest this update: Wed 30 Apr 2025 11:00:44 +0000
Manifest next update: Thu 01 May 2025 11:00:44 +0000
Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: Vq8McObGSZbldCkco45ETDs8lKegbO35YSRaU62mDQo=)
2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:2c:cc:6a:07:cb:e3:81:8d:a5:82:75:e2:9d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Apr 30 11:00:44 2025 GMT
Not After : May 1 11:00:44 2025 GMT
Subject: CN=64b3efd66af60b8f0fc01a59161a77192165c824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:25:c8:8c:61:c9:50:40:2e:80:5d:e7:6c:0b:
2b:2d:91:8b:92:cc:fd:69:69:74:2e:ff:d8:8d:00:
2e:9f:23:01:30:2f:d0:b3:68:ea:b2:89:e2:e9:1d:
4e:d6:1d:eb:4b:bf:e7:44:52:b7:38:86:4f:19:95:
b4:36:30:e0:36:ac:71:2c:14:60:55:6d:0d:fa:c8:
2d:39:f0:60:68:00:b3:d5:ec:aa:6e:f1:6e:19:25:
ba:df:87:e7:83:ef:09:3a:90:2f:fa:5d:35:19:a4:
52:77:3e:85:fa:9f:cc:b2:67:0e:ef:65:58:2b:19:
9f:de:05:f9:62:dc:7c:db:c5:ce:fc:38:d9:d0:d8:
fb:f8:e1:e2:99:ce:f4:e4:b7:90:29:99:d9:bf:fc:
54:fa:19:e6:4b:d4:4f:68:76:d3:c6:19:ff:cd:04:
b7:27:d9:54:c3:d4:f1:35:0a:b6:d8:02:8d:b0:81:
9c:ad:5f:fd:69:8d:ed:e9:52:a9:b9:85:6a:35:38:
a1:15:48:81:bc:55:c8:0d:3d:b7:c7:b6:bb:c2:c4:
dc:7c:dc:d9:56:06:af:ae:cb:c9:c5:a4:31:bd:f8:
ff:a1:90:97:9e:1a:00:23:bd:5d:b4:54:26:1e:bd:
c8:6b:48:69:a2:44:0b:f3:59:07:b0:53:22:9c:b8:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:EF:D6:6A:F6:0B:8F:0F:C0:1A:59:16:1A:77:19:21:65:C8:24
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:df:e2:b1:2e:2e:39:f2:78:bb:96:39:ac:1a:67:06:3f:
0c:2b:76:5a:1f:1c:d4:d9:8f:b5:83:24:fe:51:cf:12:62:65:
8c:b5:fd:55:a9:59:06:cd:4d:75:76:c5:c4:45:bf:c5:de:fd:
c4:eb:8e:98:3b:be:86:bc:74:4e:ed:1b:69:a8:f8:cb:95:a1:
33:58:33:ad:9e:d2:14:23:a6:fb:a0:13:64:82:16:92:02:91:
e6:4e:63:a5:62:bf:b1:55:5b:de:e6:f0:b0:10:25:8a:99:17:
0b:de:0b:9f:3a:1d:6a:e7:61:3e:ed:d8:8b:c3:b0:86:ab:3a:
c0:da:b3:ad:d4:ee:12:2d:63:ca:e5:81:0e:1f:47:74:0a:10:
2d:7c:ab:b6:5f:31:51:94:2e:30:82:98:63:aa:46:12:6e:8b:
b7:fa:76:bc:0f:62:de:1a:ed:1b:a7:fb:b2:9f:38:b4:b6:6c:
fd:c1:d7:0a:4d:97:58:e8:15:b5:5b:4b:f2:8b:b6:e8:7e:27:
b4:e8:c1:bc:6f:3b:74:d2:ab:fd:47:c7:b5:09:e2:b5:26:62:
ea:fb:35:82:79:89:3e:a4:9a:a6:aa:8a:c9:50:ce:90:8d:3c:
06:c6:f9:bf:52:9c:63:cf:6f:0d:c0:f0:c4:ef:07:76:6c:84:
9b:ad:34:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:33:27 2025 by rpki-client