Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: 60mm8jqSKPtu79KqzbJfrulDLguc0Hok0WRLAhsLmyU=
Subject key identifier: E4:6C:8A:AF:10:05:D0:E5:91:0B:E5:B9:A1:74:B0:D2:14:D4:06:A3
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 019780FAF78773C30D81705870A642DDF266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 159D
Signing time: Wed 18 Jun 2025 03:00:20 +0000
Manifest this update: Wed 18 Jun 2025 03:00:20 +0000
Manifest next update: Thu 19 Jun 2025 03:00:20 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: Zx1ClAMUuD9lyG7YgRP_om-ZEYI.roa (hash: gbBcl06UfQ1+hxbFp7K2ZbQwEqAaFU9l3RdaNWVj9Fw=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: UE1gpcTvgBm1KvkzWkDmspPsY5XuXLIJtgQybJE+eNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fa:f7:87:73:c3:0d:81:70:58:70:a6:42:dd:f2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Jun 18 03:00:20 2025 GMT
Not After : Jun 19 03:00:20 2025 GMT
Subject: CN=e46c8aaf1005d0e5910be5b9a174b0d214d406a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:b8:f1:6e:32:6f:51:36:9e:a0:98:fe:cc:
8a:34:b0:2d:17:dd:8b:9e:3d:5c:8d:96:93:c0:3b:
6d:38:e5:2c:ae:b5:65:7e:ca:21:c6:74:72:f8:31:
a2:0c:80:a4:c2:6c:1b:30:8b:de:0b:09:9d:97:3b:
12:23:58:da:f2:64:6f:53:a2:fc:f6:bd:6c:a8:58:
e5:16:a5:82:02:0c:8b:52:c0:42:0a:88:88:cc:96:
18:e8:81:92:2b:05:c6:e4:5f:6f:67:3a:e6:cb:da:
69:96:b3:35:8f:86:56:8a:8a:82:8b:34:ce:4c:97:
0b:8f:06:5b:ac:51:55:7a:df:60:f7:2a:84:5c:c6:
2b:0a:59:91:7e:67:59:4a:6d:df:4e:63:b4:83:4b:
ed:8a:e5:19:ca:6c:d0:f5:f8:8c:89:4a:3a:a1:30:
72:51:34:aa:47:09:35:bd:c7:d8:9b:3d:cd:80:dd:
be:9d:21:3b:03:b0:c4:33:8a:cd:71:91:41:6e:55:
7f:f8:54:a6:53:81:e4:3d:d5:e2:7f:59:66:e0:d8:
0e:e6:5c:ad:c1:ec:f6:07:0d:27:78:0e:66:40:21:
5e:21:a7:25:e1:e0:d2:e7:8b:f8:e1:ab:3d:5c:1a:
40:4f:82:e0:36:78:68:f3:71:c8:51:5f:51:1e:21:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6C:8A:AF:10:05:D0:E5:91:0B:E5:B9:A1:74:B0:D2:14:D4:06:A3
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:89:e3:3d:e9:45:f4:b0:31:be:69:c9:ce:01:d5:b0:0c:60:
36:48:06:8e:83:fa:42:a7:6b:c6:ed:43:6a:ca:3c:3f:de:e0:
54:af:83:89:c0:23:f1:0f:a8:46:27:8f:cb:09:aa:a6:c9:3b:
53:fe:09:f0:7c:18:6e:a1:55:00:8a:b7:c3:f7:83:98:d2:40:
87:01:e0:46:e8:51:78:56:0e:0a:44:03:19:88:09:7a:c2:d3:
27:a8:2f:f0:b9:d3:71:ba:1d:55:7e:4c:3b:0c:c3:6c:b5:5e:
fa:40:0a:da:f4:ea:51:20:18:8a:cc:af:33:23:39:5c:a6:8e:
e6:89:bc:4a:88:4f:4c:8d:57:df:35:ba:93:58:36:80:85:08:
91:77:2c:b8:18:78:6f:93:36:90:9f:7a:41:61:ed:bd:9c:86:
a9:96:08:52:02:21:45:6b:88:34:c4:7b:ed:22:cd:84:f6:17:
0c:8e:ad:e8:b1:02:7a:e9:94:20:91:e1:72:22:49:a8:db:ce:
7c:c9:6c:4d:15:f4:fb:98:0f:b7:c6:e9:ee:cd:54:31:d9:f8:
b2:b1:45:fc:be:16:e8:bb:79:8c:33:81:d7:d6:a9:d3:60:03:
3d:1a:e1:6a:b3:08:50:aa:7c:8b:82:21:4e:f7:a1:0c:cd:9f:
29:f9:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:08:01 2025 by rpki-client