Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier: DpYDAFSdge0QS1BeUTdmWBdH9JONZ2iOtAsiaoOOfVs=
Subject key identifier: 79:3C:D5:A6:DA:D5:FE:ED:2A:BD:0D:01:AF:BB:DD:FB:A5:34:31:DC
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 019682EBEE4D12FB3CF07086777C26040830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number: 02D9
Signing time: Tue 29 Apr 2025 19:00:22 +0000
Manifest this update: Tue 29 Apr 2025 19:00:22 +0000
Manifest next update: Wed 30 Apr 2025 19:00:22 +0000
Files and hashes: 1: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (hash: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=)
2: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: cw7aODCHMcC3BG03yAPEFij+DP6K+jwaZ06eE399wWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:eb:ee:4d:12:fb:3c:f0:70:86:77:7c:26:04:08:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: Apr 29 19:00:22 2025 GMT
Not After : Apr 30 19:00:22 2025 GMT
Subject: CN=793cd5a6dad5feed2abd0d01afbbddfba53431dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:9f:a7:1f:68:22:51:99:aa:2f:38:e3:d7:
ff:a1:cf:b9:9d:d6:d4:78:3a:ad:50:bc:ab:f8:b2:
57:de:19:30:35:3c:4d:70:79:aa:55:34:37:29:bc:
e3:4e:bc:fb:e8:10:2e:b8:2b:2d:04:b8:76:76:ce:
f8:60:51:ed:94:ed:76:aa:11:a6:bc:fe:b7:99:55:
57:d9:78:f5:be:aa:39:a1:9d:88:24:e0:90:ed:3b:
18:d0:cf:12:85:26:d2:62:92:a9:85:24:58:c5:ee:
02:32:25:ba:77:3b:a9:47:5e:1e:27:cb:4f:a5:77:
73:33:8f:73:38:34:e0:2d:d8:49:f2:e7:1e:80:53:
22:43:f5:01:5c:27:d0:22:d6:33:82:d6:66:ac:5c:
da:25:55:8f:f1:82:84:fc:3f:b0:c7:58:4c:91:35:
78:3a:48:15:a6:b2:9b:1e:1b:35:3c:fc:2c:3a:40:
24:b7:eb:b3:16:5b:68:0b:33:dd:d1:1d:8c:c2:97:
a2:9a:51:e2:9b:f0:c7:d6:bc:87:0b:b8:24:0d:9e:
52:bb:17:23:b7:e2:db:3e:fc:52:3e:65:c6:1c:15:
5d:94:5b:72:75:15:d6:8a:dc:0a:c2:6e:e3:18:9e:
27:81:4c:39:0c:af:f0:5a:b4:85:40:28:46:24:b7:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3C:D5:A6:DA:D5:FE:ED:2A:BD:0D:01:AF:BB:DD:FB:A5:34:31:DC
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9a:3d:3d:b4:93:56:39:f5:35:91:f9:12:07:4d:bb:08:65:
ef:ae:60:91:c0:15:10:75:e3:7b:06:f1:d2:78:49:35:86:a0:
06:86:34:e9:ad:2f:24:da:63:c9:f9:b4:14:6a:ff:53:27:ed:
1d:f1:51:8f:cf:53:9f:3e:0f:6f:32:24:34:6c:fc:42:48:29:
d4:17:db:6a:30:be:9b:71:99:79:1b:49:a8:24:93:42:38:a1:
50:26:b7:53:3e:5d:12:7e:27:9d:c7:07:fe:51:b1:d4:e2:e3:
19:1e:ca:36:67:b0:c0:a7:2c:aa:08:d1:3a:0b:70:f2:3e:a1:
78:60:6f:12:c5:4c:1b:be:22:a9:74:66:54:0e:85:71:44:25:
f5:f9:9e:0e:7f:d2:6c:ce:68:c3:b1:3f:2f:9a:ac:7e:19:15:
2f:81:8f:78:e6:f2:f8:36:b9:03:40:59:af:be:b5:33:0a:5c:
89:33:8c:d0:a6:09:1d:87:f4:26:6a:f0:00:30:fc:9c:87:b1:
11:09:16:41:c3:ef:23:c5:90:46:51:6f:00:f5:a0:56:49:b7:
45:14:48:93:32:78:2c:7c:91:ce:c1:03:46:48:f3:0f:7c:03:
33:34:21:11:60:f0:7c:5b:57:e0:9d:39:75:af:af:00:1e:ba:
4d:5a:83:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:08:59 2025 by rpki-client