Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: btncBZn9MfV67qmV8btqHP/Zm43Q1YEsaV3zwaT1bgY=
Subject key identifier: 20:38:37:C2:84:14:65:49:1F:25:C2:7A:E3:32:71:C2:65:E6:6E:B9
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 01963A2E7B00A8197E53CEF6D81080E65753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 1500
Signing time: Tue 15 Apr 2025 16:00:46 +0000
Manifest this update: Tue 15 Apr 2025 16:00:46 +0000
Manifest next update: Wed 16 Apr 2025 16:00:46 +0000
Files and hashes: 1: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: H0vVGkPCKJlzCCNzQGHhmENDwPJo6GP2CQ/liAG4ZlI=)
2: bYZg5VNnDS3g8_L52xT8Z2YcZHI.roa (hash: 0G8Nfe3vvbb4R9E1kVJGXztygd9crnFLcrSCl4faEH8=)
3: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (hash: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:2e:7b:00:a8:19:7e:53:ce:f6:d8:10:80:e6:57:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Apr 15 16:00:46 2025 GMT
Not After : Apr 16 16:00:46 2025 GMT
Subject: CN=203837c2841465491f25c27ae33271c265e66eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:18:17:30:0c:71:55:89:1d:6a:e6:5d:ff:
37:cc:13:81:fc:cc:07:d5:87:f6:e2:4f:44:aa:5f:
77:a7:82:59:12:61:94:97:10:e2:75:a0:47:67:e6:
08:aa:59:c8:4d:40:64:a8:c6:29:cc:3f:71:0c:f5:
c8:9a:1d:f8:20:d2:1f:4e:e8:af:e4:ed:37:ed:ba:
08:79:43:6f:68:0f:48:77:34:07:0f:70:a2:3e:fd:
0f:0f:12:5d:63:e6:b2:9b:6f:8d:d0:67:c4:2e:c1:
0f:fb:9d:34:a9:79:a1:34:e5:cf:06:ad:32:e8:e4:
7e:a7:0e:32:74:42:c3:de:0b:c3:0c:bd:f4:12:00:
fd:59:1a:bb:d5:83:8c:42:e3:a8:24:ee:7c:6a:5c:
aa:ba:ff:ba:3c:35:3c:d8:6b:52:a4:0c:6f:bb:de:
8b:b7:a4:a3:7b:aa:52:cb:b5:a1:e9:c4:c1:c3:f6:
dc:19:8f:b4:6e:02:b1:7e:11:f2:e2:65:49:2d:8c:
f0:04:47:01:7f:f3:c8:08:c7:e2:74:9b:0a:31:6b:
85:e0:e4:2a:c0:e4:09:ef:66:ce:36:c3:31:d8:f0:
ba:0d:7e:c0:ee:c3:c5:43:f6:2c:2b:46:92:f0:e7:
b7:f0:ae:42:38:8e:73:2f:1d:78:63:eb:ae:4c:59:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:38:37:C2:84:14:65:49:1F:25:C2:7A:E3:32:71:C2:65:E6:6E:B9
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:40:02:f3:a9:cf:f7:bd:b4:bc:27:53:d6:b8:92:dd:5f:45:
77:c9:b3:cf:ce:c2:70:9c:62:53:e7:60:8d:ad:1c:22:35:97:
54:9e:e3:a9:4e:4c:96:4a:2a:a3:26:69:66:7c:3d:c9:ea:91:
86:11:e3:92:48:5d:1a:ed:34:0a:0e:1c:0b:25:4d:0a:70:65:
a3:b7:9b:e4:55:99:f9:51:e6:5b:17:34:89:fd:22:60:0d:a2:
fd:85:2d:e8:19:b3:93:04:c2:c5:72:b9:dd:df:89:29:0a:a6:
97:fa:c9:c5:f3:1e:1b:2c:b3:34:8f:6f:97:bb:60:93:71:bc:
43:a1:9d:39:0c:19:0a:51:c8:23:a9:f7:08:8b:c0:57:bf:dc:
89:a7:ff:fc:98:5c:6f:4b:94:b2:a3:d1:df:ac:fd:3b:d6:6f:
cd:b0:5e:71:97:17:8b:f5:37:c1:58:da:e3:e0:52:b2:63:c0:
cb:07:f2:21:c9:76:53:18:1e:bf:4e:65:11:c7:b2:02:92:f9:
b9:d0:cf:91:a2:55:cc:d3:95:95:f0:4a:bf:94:3d:91:d7:c1:
46:00:66:a6:53:67:63:98:2e:50:06:b7:6e:61:93:c8:42:46:
f6:fb:2d:ae:71:a3:cf:46:06:f7:c3:15:af:12:b4:ce:78:5d:
8b:41:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:29 2025 by rpki-client