Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
File: OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft (raw, json)
Hash identifier: gpiKxPwkb71NC4kK3qt9r4eUv6+2BvWuBaX0asQLYAU=
Subject key identifier: 52:22:4D:AD:BE:78:64:AF:40:AE:4C:1D:0F:C4:20:B5:79:B1:F7:E8
Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
Certificate issuer: /CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Certificate serial: 0196A2E581A56103A41711E43737FC3C718C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 00:01:11 +0000
Manifest this update: Tue 06 May 2025 00:01:11 +0000
Manifest next update: Wed 07 May 2025 00:01:11 +0000
Files and hashes: 1: OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl (hash: MPW2B0G1c/hY6REvsn8Kh+VJ05kVVSCPQG80oRXL5Bo=)
2: RsGZdVH4KWGZ4OCvnGaMXWv4oaQ.roa (hash: fuepCE8j+3Iy2fKvIdO+nibeCW6A9px2SfnOVg5ddX0=)
3: fYkfiykKnS8ZeTHGRB-UgiJB3G8.roa (hash: r/260Im8uYUydEHgzIf9ZOg2UlQ6MQMr6ct6EbwfvX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:81:a5:61:03:a4:17:11:e4:37:37:fc:3c:71:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Validity
Not Before: May 6 00:01:11 2025 GMT
Not After : May 7 00:01:11 2025 GMT
Subject: CN=52224dadbe7864af40ae4c1d0fc420b579b1f7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:15:17:60:7d:91:f4:b8:f0:52:53:2c:18:
cf:1b:7a:8c:b9:76:d9:c9:c3:71:5a:5e:3a:b2:3c:
96:d2:6c:66:b7:91:ea:4c:fc:1f:84:ac:98:41:45:
67:2f:8c:f6:a1:75:75:1f:5b:9c:3e:fa:d4:90:39:
95:03:b1:39:a1:8a:c9:1e:cf:66:ab:52:3d:90:2e:
c6:04:12:07:f0:c4:ac:86:e7:5a:0a:1b:aa:4f:51:
68:92:22:17:ff:a1:4c:dd:47:88:6f:31:8e:6f:d7:
48:51:a6:95:6b:06:fd:bc:37:c2:e6:54:e8:d3:36:
00:d2:bb:9c:93:62:7d:90:63:99:d9:8b:d0:f8:52:
fe:07:f8:47:49:8a:9a:b4:52:72:e1:af:f7:3d:76:
59:69:42:b5:9c:bb:1e:10:3a:9a:0d:1d:c9:7f:c0:
9d:8a:a6:ef:db:7e:b1:7b:6f:3e:2f:64:a1:97:f6:
c4:11:5f:56:4d:a0:46:b4:fd:cc:15:ed:fc:71:61:
4d:66:55:8a:63:0f:b0:a5:1c:f6:3b:4b:97:71:39:
e8:dd:cc:51:dd:ba:2b:0e:ac:48:fe:59:4c:3e:45:
23:46:8e:a4:7e:d9:21:8f:c6:16:6f:31:51:09:a1:
ae:16:d8:ca:c2:4c:7c:ee:34:96:73:75:84:e4:71:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:4D:AD:BE:78:64:AF:40:AE:4C:1D:0F:C4:20:B5:79:B1:F7:E8
X509v3 Authority Key Identifier:
keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4b:ab:22:e4:13:e8:fb:e5:05:6d:3a:f2:b5:af:81:44:f9:
ad:7f:47:15:48:1e:55:3f:6a:a4:ae:0f:44:a2:a8:bd:6d:d8:
85:da:ad:bb:c3:a5:bf:51:6a:98:06:35:fd:52:49:87:22:f4:
e4:cf:87:92:c0:0a:76:57:ee:5b:b1:7a:11:06:a4:3c:55:44:
30:05:9e:30:ff:20:09:62:62:cb:7e:3b:fc:24:cd:40:0a:e0:
b8:e0:16:bc:b4:53:5a:11:b0:c7:ec:2c:bc:ed:68:86:3d:24:
91:7e:26:36:ae:7f:59:b6:6d:77:3e:9f:8a:9a:35:98:5c:e5:
08:53:5d:c4:7c:f1:66:cf:bd:25:9c:d7:23:8e:e8:db:e3:aa:
5d:c0:35:11:35:de:da:41:ef:5c:a2:d2:36:4e:d3:49:e5:f1:
0a:8d:fa:8b:b5:c6:55:fb:e7:67:b8:6c:27:4c:bc:21:6c:17:
91:56:f0:e0:8a:e2:ff:fb:0f:a4:9e:9a:7c:e4:b4:46:e6:d1:
17:d0:54:58:4a:a2:7e:6f:33:8b:ca:9c:3f:35:8e:a3:5b:77:
db:ba:5c:06:eb:83:f8:52:c4:ba:9c:65:86:85:ee:bc:76:9c:
c8:22:79:72:11:83:6e:81:18:55:42:79:a2:91:44:10:5f:10:
bb:0b:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:05 2025 by rpki-client