
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier: 0upB7tThCy0duQgIZRQDz4Y2FJ/2TyKrzpcESbcNmiU=
Subject key identifier: 05:6D:22:C6:2F:7B:0D:80:D6:F4:44:10:B1:FD:CF:FF:8D:1E:DE:B8
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial: 019677FB50D4EC50E0DF1E62BE971398A0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number: 1477
Signing time: Sun 27 Apr 2025 16:01:21 +0000
Manifest this update: Sun 27 Apr 2025 16:01:21 +0000
Manifest next update: Mon 28 Apr 2025 16:01:21 +0000
Files and hashes: 1: 8iSreq9sFy4jQpPohIGSY5mGVho.roa (hash: JWocgKBNIhnSVWHkP0cAfvpMZaqkdklTc5KStlxqdMY=)
2: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: qaXfK3vvEAQ5fOvII8zIkLhi/uXBdnsMaUIqXZCe0Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:50:d4:ec:50:e0:df:1e:62:be:97:13:98:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Validity
Not Before: Apr 27 16:01:21 2025 GMT
Not After : Apr 28 16:01:21 2025 GMT
Subject: CN=056d22c62f7b0d80d6f44410b1fdcfff8d1edeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:d3:d3:6b:0b:23:3f:98:66:fd:38:5a:a2:
db:de:67:fd:59:1c:f4:fb:39:de:99:c6:ec:3b:ab:
81:bf:70:5f:b8:c3:19:34:94:4a:a4:8f:cd:9b:0c:
e0:88:7c:9b:21:db:35:fc:90:e7:91:64:e7:b4:46:
d5:ed:6c:81:06:51:2c:ef:00:b7:bf:2e:a6:fa:57:
ff:13:06:a4:1b:0e:65:c8:37:0e:d3:db:f5:18:38:
8a:2b:be:8b:d7:8b:82:91:59:b0:06:4c:70:8b:90:
a0:e4:2d:cf:cd:da:80:2b:0c:81:8e:0d:f7:a0:df:
b2:66:32:44:7f:67:56:41:06:da:5b:a9:5c:6a:84:
ba:12:1a:c9:8c:dc:5e:a2:73:fa:ae:9e:45:b9:3b:
ba:15:25:b9:b8:3e:77:54:7b:20:7c:3d:db:a7:8d:
b3:e7:df:b0:b3:db:8b:90:d7:b0:63:5a:78:43:bb:
4c:d6:5f:24:36:02:7b:8f:07:4a:1e:60:3a:43:c8:
be:af:80:24:f6:ab:80:69:02:23:a2:e5:7d:51:3f:
5d:c6:fe:a0:2a:5b:24:21:d2:7d:2d:3b:5c:cc:01:
74:49:04:96:0f:f2:71:b9:92:06:5a:b2:58:48:98:
6b:ad:ec:33:66:a2:a6:71:59:a1:6f:6f:cf:48:ab:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6D:22:C6:2F:7B:0D:80:D6:F4:44:10:B1:FD:CF:FF:8D:1E:DE:B8
X509v3 Authority Key Identifier:
keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c3:8a:99:c4:6f:51:21:aa:ef:db:d7:b3:6a:2c:af:63:58:
7b:dc:1a:7d:e0:d4:4c:55:b3:4b:97:1c:58:ac:08:90:b4:36:
31:08:d8:66:da:40:02:bb:84:04:17:5d:35:70:d1:85:ac:e7:
5c:87:b5:d0:11:28:ad:eb:e4:40:7d:77:3c:63:3c:f2:6c:91:
81:16:21:aa:a5:c8:24:a8:cb:e2:87:3d:a4:94:1f:1d:d3:d8:
30:6b:25:d5:6f:ab:33:d3:b7:e4:42:53:25:8c:55:48:33:fe:
c8:c8:16:af:bd:1f:0c:4f:25:23:1d:d6:2e:bd:93:37:19:78:
1c:9a:2c:a2:dc:6d:31:d2:7a:7e:c3:2a:73:7e:d5:80:69:75:
fa:e2:90:8d:3e:55:68:33:bb:35:5c:15:68:db:ca:f1:b2:5f:
45:b2:de:4c:d7:fb:53:23:15:f5:6f:c9:66:45:ba:9c:cd:33:
2b:bd:ff:dc:d9:5c:c8:cf:e0:c5:bc:90:f6:8c:af:75:85:8c:
05:c2:b0:03:b9:b9:6c:ce:65:84:c5:18:73:25:45:ad:99:69:
c8:71:d7:23:5e:25:98:7a:05:fa:9d:73:69:af:22:b8:eb:30:
6a:74:37:0e:bc:d2:4f:ba:40:d0:34:06:6a:d3:b6:6c:4c:66:
ee:ee:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:32:23 2025 by rpki-client