Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: vOo7DQOGMsYw7JFCBke7Cb23VDXp2lVM3WTaS3G0ql8=
Subject key identifier: 23:09:21:05:4A:CC:4B:B0:F1:DD:8B:F6:3D:45:3D:38:D0:1A:00:A0
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 019659F09444F926B402C0FC482AB309804A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 20:01:00 +0000
Manifest this update: Mon 21 Apr 2025 20:01:00 +0000
Manifest next update: Tue 22 Apr 2025 20:01:00 +0000
Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: tqRPYrUQ+9S1dTozGJXvpBUgV5XoCIqZLkw0qjpM7ds=)
2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:94:44:f9:26:b4:02:c0:fc:48:2a:b3:09:80:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Apr 21 20:01:00 2025 GMT
Not After : Apr 22 20:01:00 2025 GMT
Subject: CN=230921054acc4bb0f1dd8bf63d453d38d01a00a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:20:a1:9e:e0:8d:f7:76:92:7c:ff:bd:9d:3f:
15:37:98:e6:7f:d7:b2:a0:54:81:8b:0f:dc:8c:7d:
85:5d:c3:71:e0:79:08:8b:f7:8e:5b:98:49:51:a2:
2a:1f:44:4f:e2:b8:a0:55:5c:fc:29:74:f0:19:fc:
77:12:4e:df:5b:3c:01:5b:f8:23:42:a9:17:98:36:
f2:15:55:b9:59:de:e4:d5:62:e7:90:d2:2a:b1:9f:
6d:71:cb:09:b3:fb:2a:91:39:63:59:d6:42:8e:0c:
a5:dc:30:a1:d7:fa:8d:0e:d1:69:50:20:86:1c:40:
99:f8:05:9e:2e:ed:a4:07:1b:4c:42:18:be:97:f0:
0c:c4:a7:9d:cb:a6:06:3a:52:c3:a9:9f:1e:e9:80:
a6:1e:8a:12:e5:c2:77:f5:86:22:0a:a2:f5:89:49:
21:ec:99:64:9b:16:8d:1f:a4:3b:ad:0a:0d:fd:f8:
e9:74:cf:c9:a4:4b:0e:a0:bf:f8:c5:5e:5f:2e:56:
b3:f8:e9:f8:3f:69:dd:3b:60:f6:68:e1:e9:b8:f7:
45:a3:74:c2:74:d5:f8:98:46:18:6f:5b:ae:07:7b:
d5:b2:c6:dc:e3:04:35:55:ee:df:fa:46:5f:c6:22:
43:52:74:3c:db:ee:13:6d:25:2f:05:64:90:b6:4c:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:09:21:05:4A:CC:4B:B0:F1:DD:8B:F6:3D:45:3D:38:D0:1A:00:A0
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:96:4e:8f:de:27:20:ae:70:26:fb:05:d4:a0:80:7b:2f:e3:
72:e6:72:0f:07:62:52:bf:a5:13:cd:80:42:33:5b:f9:33:67:
fd:e3:59:17:8b:e9:f7:d1:77:e2:7a:e3:65:ab:b9:54:2d:30:
51:6e:33:e0:34:2a:e2:c9:95:68:27:bc:34:1d:d4:f4:0c:e0:
b7:8b:04:2e:a9:1b:47:c4:18:7e:a5:5e:6a:62:86:40:93:49:
9c:b9:a4:9a:d5:57:3c:10:3c:e7:22:15:bd:87:fc:8e:7e:28:
f8:47:ac:ea:3d:d7:33:d2:71:ca:54:ad:e8:6d:79:bc:98:25:
9a:60:c5:f4:68:55:ef:11:88:17:30:eb:23:de:ce:2d:54:52:
ec:80:ca:7c:55:3e:1d:9f:31:37:1a:07:9b:7f:5a:3b:68:7b:
29:a9:0a:37:de:11:5e:6f:81:a4:bc:5a:15:b6:59:18:49:79:
1c:29:b9:39:6d:20:1b:d3:b0:cf:e3:94:c8:b5:f7:55:0a:fc:
3e:00:4b:d7:63:76:d1:1b:94:17:95:af:2d:5f:a2:18:2a:5a:
93:0d:5c:62:b1:d0:b3:8f:f5:a2:ea:e6:76:8c:4f:18:48:a6:
9e:ea:a1:76:2c:77:36:bf:5c:0f:bb:8a:83:96:c8:da:82:72:
11:fa:d7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:42:59 2025 by rpki-client