Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: A/40+YHwA5mGknJt0Oo3JQ5ePJUuhCjCAO9z22Mj/sQ=
Subject key identifier: BE:F6:E9:C9:48:CD:66:66:0B:3F:93:4A:87:FD:30:56:AB:7C:4C:7E
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 01964A0EDF9A8F82B8415BD17A20BB2612A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 14FC
Signing time: Fri 18 Apr 2025 18:00:10 +0000
Manifest this update: Fri 18 Apr 2025 18:00:10 +0000
Manifest next update: Sat 19 Apr 2025 18:00:10 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: Zx1ClAMUuD9lyG7YgRP_om-ZEYI.roa (hash: gbBcl06UfQ1+hxbFp7K2ZbQwEqAaFU9l3RdaNWVj9Fw=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: x8vl6+4YH1M+DvU7Q17hyShq9LFoEqpRadjJPVZ/+GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0e:df:9a:8f:82:b8:41:5b:d1:7a:20:bb:26:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Apr 18 18:00:10 2025 GMT
Not After : Apr 19 18:00:10 2025 GMT
Subject: CN=bef6e9c948cd66660b3f934a87fd3056ab7c4c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:c6:e9:22:65:1b:ef:d1:d6:c7:dc:9b:25:
26:3f:43:a8:35:41:53:96:6c:c0:03:1b:95:2a:61:
1d:52:e3:a1:c2:31:44:b6:c7:4d:86:d0:23:0f:5d:
9a:e3:81:6c:ab:55:c8:20:a1:7b:7c:de:40:92:78:
7b:7d:1b:6f:24:30:f3:f7:83:00:6d:7b:e8:0d:5e:
66:45:ae:a9:7e:4a:47:34:bd:b6:db:bb:f7:cf:64:
d2:e5:88:d1:d0:55:4e:57:99:04:62:0a:d7:35:99:
b0:3b:5a:c3:d9:76:21:2e:f4:b0:b8:6f:54:44:19:
3d:65:f7:7b:7c:a2:56:0d:88:49:9e:90:ab:2f:b4:
23:6e:96:d6:22:2a:fc:c3:55:06:72:41:68:a7:dc:
f2:e7:d9:91:76:73:48:67:ef:72:b7:35:78:77:a2:
a9:4b:50:bd:ed:3b:b3:30:3f:9e:51:aa:9e:d8:ff:
1d:b2:2b:ea:d4:66:03:41:8e:99:ce:cd:d1:ff:7b:
23:3e:3d:9c:55:1c:b5:6b:36:d8:69:73:12:5e:43:
0c:94:58:97:94:d7:30:16:3b:82:36:d2:05:2d:53:
b4:97:27:a5:10:a4:71:f5:fa:99:1b:7f:2e:fa:41:
07:ae:15:8f:71:55:a7:68:ad:56:e3:4a:c2:41:e5:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:E9:C9:48:CD:66:66:0B:3F:93:4A:87:FD:30:56:AB:7C:4C:7E
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:25:9b:8e:cd:48:52:ed:6e:63:37:cb:64:a0:2d:c8:45:b4:
ad:d9:16:e9:6b:98:f4:eb:93:25:3c:ae:c2:74:5b:f4:23:1a:
84:85:4c:fa:4d:af:08:d2:47:dd:15:92:9a:df:0a:7c:eb:dd:
d2:71:39:c5:0b:f0:b2:f5:31:cc:88:04:28:11:ae:5a:00:2c:
58:3a:f3:01:2f:51:35:41:88:4d:ff:f9:17:e3:e0:43:0c:fb:
01:05:4a:f3:f0:9a:38:77:90:23:f3:33:e1:4d:0f:ea:52:8a:
1f:94:27:11:31:aa:9a:9f:22:d0:2e:54:16:e2:cd:c2:79:59:
24:03:92:2c:86:8e:56:59:59:c7:ea:29:d1:0a:69:9a:86:5d:
0a:44:27:4d:c4:6d:0c:4f:ea:88:12:21:3d:70:ef:7d:81:dc:
23:88:51:20:81:3a:80:17:9b:c0:c5:0f:10:21:6a:24:52:cc:
0d:49:9a:69:bc:42:b5:81:f7:4e:d7:3a:7b:d3:52:c4:4b:14:
4d:54:22:26:12:03:6c:e6:3e:27:7b:86:e4:46:73:cf:f6:e2:
0e:b8:f9:d3:2c:f8:ca:a6:e2:78:7a:b5:d1:14:33:08:a7:d4:
81:7f:f3:12:9b:ed:e6:f9:36:6d:65:11:5d:d5:d3:4c:ca:bf:
58:97:5c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:08:33 2025 by rpki-client