Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File: t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier: ktFOXvPbuifr1IYrxWtSPCk7FssCpdJGDeQKI0nCMzw=
Subject key identifier: F4:85:7B:D3:0C:14:6C:7E:04:F6:C6:D0:5C:36:F5:94:C1:08:21:52
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial: 01964C6BD4F989746CED02F9E60089398E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number: 0C82
Signing time: Sat 19 Apr 2025 05:00:57 +0000
Manifest this update: Sat 19 Apr 2025 05:00:57 +0000
Manifest next update: Sun 20 Apr 2025 05:00:57 +0000
Files and hashes: 1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=)
2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: ywBLzN6sDdOjp6hSyUn4iwjw37cKBWwGTiDDGVN1d3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:d4:f9:89:74:6c:ed:02:f9:e6:00:89:39:8e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
Validity
Not Before: Apr 19 05:00:57 2025 GMT
Not After : Apr 20 05:00:57 2025 GMT
Subject: CN=f4857bd30c146c7e04f6c6d05c36f594c1082152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:0e:e7:db:61:d8:97:5f:bc:64:06:51:ba:
b6:b7:59:9d:2b:f8:99:28:8e:92:f3:4c:e2:43:46:
ef:5f:c9:31:a6:ce:46:81:fa:91:d0:26:a5:57:ff:
f0:9e:70:94:a3:4a:57:16:71:fd:16:1c:3f:b4:c7:
c8:17:f8:82:c3:58:84:83:7b:c0:be:a1:b9:5c:6e:
d5:60:1c:7b:c9:fb:8d:cd:e4:45:77:f3:ab:6b:a9:
c9:7f:43:53:27:10:1c:3a:fd:5b:8b:fa:23:ba:cd:
6b:e4:13:54:cf:b2:b3:92:4e:15:6b:3b:29:3b:b6:
a2:fc:f6:aa:92:da:5f:51:e2:c1:0e:a5:b6:32:e4:
35:e0:21:b4:a5:75:92:d4:f8:4e:ee:40:a0:12:b6:
f9:5b:3d:eb:51:a6:11:39:17:05:8a:84:99:2b:8d:
b2:11:42:93:96:30:b1:a3:ec:15:22:a2:d5:a2:15:
10:4b:bb:e8:19:ec:b5:56:1a:f7:da:bb:6a:3a:fa:
c3:e0:de:33:47:bc:28:15:58:07:fa:c9:8a:1f:21:
ff:9b:8e:e8:b5:04:84:86:69:79:60:2d:96:f2:13:
89:6c:cf:eb:58:d8:5f:f0:37:b0:13:29:60:54:c0:
9a:fb:a1:4a:b1:7f:40:7b:e2:92:67:eb:33:35:72:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:85:7B:D3:0C:14:6C:7E:04:F6:C6:D0:5C:36:F5:94:C1:08:21:52
X509v3 Authority Key Identifier:
keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:59:be:55:ba:4d:52:4e:00:ff:f7:be:d3:7a:80:f1:64:3c:
af:4a:2f:a5:02:f1:5c:b8:d2:85:06:e5:e2:bd:11:d0:b5:da:
9d:27:35:78:2c:ad:0d:a0:70:91:67:d9:a8:23:a1:65:f1:86:
47:77:2a:84:3d:76:6a:22:3d:44:53:ad:d9:e4:57:21:2a:6c:
9a:fb:2f:48:06:77:33:63:b2:ef:69:d4:b0:4f:00:e6:2c:f8:
05:ad:b4:67:e1:1f:40:05:cc:f4:d2:46:27:9b:4a:9e:2f:00:
99:bf:1e:75:cd:14:7d:58:ac:70:a3:e7:25:30:66:47:62:c1:
c8:ef:6b:2b:bf:a9:51:ba:12:7b:aa:f2:07:c3:52:ec:10:5f:
a9:1a:21:a2:df:51:12:e0:9c:74:09:61:65:40:4f:63:e3:02:
54:6a:cb:e8:ee:ed:a1:4c:9e:98:2d:95:84:46:72:d7:e1:b8:
f6:89:73:7b:6b:04:36:e0:1e:7f:aa:24:d4:51:99:a9:46:85:
d6:ef:b9:c0:ba:21:7f:62:b6:98:ec:ed:9c:9e:0b:60:d3:d5:
dd:46:23:2e:2f:6b:df:ce:b8:5e:df:b1:7d:13:af:96:63:3b:
be:d8:f1:0c:ae:23:2d:87:79:3d:b6:4d:da:c9:1a:2b:a9:d0:
b1:18:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:39 2025 by rpki-client