Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: B7D2URmhXwi7cmV+xA35k3hpZDEuugcOTf+e9K3D1GY=
Subject key identifier: 7E:37:FF:20:A7:18:87:49:44:E2:CE:C6:0D:95:12:A7:FB:96:8B:BB
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 019748FA4E724FCF787664E16905E0A1C209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 06:00:53 +0000
Manifest this update: Sat 07 Jun 2025 06:00:53 +0000
Manifest next update: Sun 08 Jun 2025 06:00:53 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: Zx1ClAMUuD9lyG7YgRP_om-ZEYI.roa (hash: gbBcl06UfQ1+hxbFp7K2ZbQwEqAaFU9l3RdaNWVj9Fw=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: pzFsjtVdxRZ9F16C9cImxnrNaslBdfmqtXWzrQca1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:4e:72:4f:cf:78:76:64:e1:69:05:e0:a1:c2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Jun 7 06:00:53 2025 GMT
Not After : Jun 8 06:00:53 2025 GMT
Subject: CN=7e37ff20a718874944e2cec60d9512a7fb968bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:74:72:2c:50:64:c7:a9:fa:2b:5b:4e:c4:
f6:e2:fe:06:4a:5f:ee:a8:72:8f:3c:9d:e5:47:5e:
61:0c:54:f0:4a:33:17:13:c8:69:01:93:67:d6:b4:
4a:8e:4c:d4:34:e8:d0:78:bd:97:d9:1a:37:8b:66:
20:a2:de:e4:97:18:14:ec:88:38:32:0e:09:49:c5:
23:c8:2b:c2:3e:8e:6e:c4:f8:f4:d2:5b:4b:b1:46:
82:01:d3:62:98:72:e4:f3:95:76:96:15:80:33:a9:
be:c4:54:2b:5b:f7:2c:f0:e9:23:6d:bf:cd:84:18:
f0:4e:9a:56:e6:21:62:bd:34:d1:a1:9e:a9:ee:43:
58:03:22:b8:99:45:5b:da:e0:51:c8:ea:22:1e:07:
20:92:51:fe:3d:1e:d7:6d:e4:7b:d9:c7:05:90:bc:
e5:e8:50:f7:74:f1:75:f1:64:c2:3a:1b:07:1c:bf:
b1:bb:70:06:22:e4:42:bf:ad:b2:e2:9d:86:22:e3:
df:3a:54:bb:31:f0:7d:41:18:31:9f:b8:db:29:f1:
8b:61:86:b4:78:96:09:6e:99:4e:64:f5:4b:99:e9:
a9:01:9b:2f:04:58:b5:56:a5:83:a3:10:f8:2a:f6:
ad:ff:7c:65:7e:a7:d6:6f:ac:e5:ce:74:e2:40:e7:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:37:FF:20:A7:18:87:49:44:E2:CE:C6:0D:95:12:A7:FB:96:8B:BB
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4d:5e:11:d9:f3:9c:96:69:3b:e9:9d:cd:58:22:45:b1:f6:
dd:70:44:14:59:ad:d7:a5:c7:83:3d:dc:31:2f:b1:dc:75:0e:
25:c2:23:88:b7:14:42:d9:fe:0a:85:9b:60:e5:2d:77:ef:01:
cd:af:85:92:46:33:78:b6:c0:6b:58:9e:1d:ac:6f:e6:b4:0c:
16:d1:33:2f:cd:9c:f8:e2:24:8b:c3:4d:05:d6:e3:ac:7d:fd:
10:e7:c3:37:c5:65:85:14:c4:50:74:cc:65:2f:1a:ed:65:81:
6e:74:fc:48:24:3c:41:49:35:b2:fb:16:8c:5a:e6:59:e1:91:
4d:ce:a4:97:a9:81:6f:b4:85:c8:9c:72:99:28:e7:f0:ed:8a:
8c:30:f0:8e:b4:00:c2:37:26:97:ae:34:ce:dc:e7:81:ce:19:
20:f7:e8:03:77:1e:ef:8e:85:06:fa:60:7d:2a:be:a7:d5:84:
59:06:1a:60:84:83:13:47:f7:6b:d9:c1:fa:aa:c9:36:d8:a1:
06:2c:f5:e5:ef:f0:5b:65:61:4b:f0:5b:21:5c:45:66:34:e2:
3d:67:6c:9f:df:33:86:f0:a4:36:d1:8d:9f:35:82:29:29:19:
79:d0:f8:a3:73:ae:82:03:50:fe:61:ce:f8:5d:ff:28:77:d0:
55:3a:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:15 2025 by rpki-client