Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
File: OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft (raw, json)
Hash identifier: qAnxw5Tlq8tnCCT3XjVaju7KWJeIkeNs9VfaaLHxNC8=
Subject key identifier: BE:55:95:A7:AB:C1:45:4E:A7:43:49:91:19:F1:E5:A1:99:36:0E:99
Authority key identifier: 3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
Certificate issuer: /CN=3b2aa720568171620e9bc9b97dadcc74b513394f
Certificate serial: 01964AEB6590A51273C43331802762197ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
Manifest number: 052B
Signing time: Fri 18 Apr 2025 22:01:03 +0000
Manifest this update: Fri 18 Apr 2025 22:01:03 +0000
Manifest next update: Sat 19 Apr 2025 22:01:03 +0000
Files and hashes: 1: OyqnIFaBcWIOm8m5fa3MdLUTOU8.crl (hash: pQBlsLegtsYSXsawjHifWX9o9QxycGxeRz5af20Us/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:65:90:a5:12:73:c4:33:31:80:27:62:19:7a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2aa720568171620e9bc9b97dadcc74b513394f
Validity
Not Before: Apr 18 22:01:03 2025 GMT
Not After : Apr 19 22:01:03 2025 GMT
Subject: CN=be5595a7abc1454ea743499119f1e5a199360e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:12:56:45:0b:10:6b:2c:17:56:26:ee:14:
c0:45:67:45:55:91:c1:96:f2:07:69:ca:f3:8b:f7:
3e:cc:c5:47:a7:5e:95:a7:38:53:f5:aa:97:8e:6b:
e0:07:84:59:28:d3:3b:d2:80:a6:5d:7c:f4:67:8d:
0a:f0:4b:5a:e1:53:51:6c:07:4c:01:b1:9d:7d:eb:
61:cb:77:87:90:99:f7:65:b6:ed:a0:98:66:31:f0:
04:ea:68:69:5f:34:53:19:31:9b:a4:00:2c:e4:3b:
0d:14:63:0d:15:83:f1:46:ef:f1:30:9b:4d:ba:e6:
d2:be:db:68:fb:8a:6f:74:19:96:b6:4a:37:9d:c1:
f7:35:56:40:0f:dd:56:e2:47:e7:0c:ef:38:c3:88:
e6:b7:7c:3b:c6:50:4e:c7:2d:73:22:d3:d1:3a:73:
5e:34:bc:ff:92:e9:03:8d:43:5c:71:08:c5:03:0c:
b9:53:5b:f1:dc:92:78:56:de:05:38:95:94:b1:bb:
fa:e2:bc:21:51:f3:94:e6:d6:b0:06:b7:7e:55:97:
39:c5:f7:4a:fd:28:d5:a3:52:f4:70:14:1e:33:0d:
b8:42:3d:1f:dc:e5:c1:89:8c:ea:c5:3a:b4:1a:80:
2a:15:fa:35:3c:00:4f:ab:df:2d:e1:64:fc:83:21:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:55:95:A7:AB:C1:45:4E:A7:43:49:91:19:F1:E5:A1:99:36:0E:99
X509v3 Authority Key Identifier:
keyid:3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1a:f2:07:a9:fd:29:d4:7d:8d:a3:61:59:37:70:2a:5f:ad:
c1:2d:43:3c:68:4c:96:f6:da:61:f7:e9:bb:39:3b:3e:1c:76:
26:f3:73:8e:76:26:06:cb:b2:84:0d:88:5a:35:11:b8:c2:9d:
28:d9:af:58:33:63:07:63:06:3c:df:bd:bf:0e:f5:b2:5b:3f:
65:a1:24:a7:13:6f:ed:9f:b2:af:52:b7:54:b5:40:d3:ab:ea:
a9:fd:91:e5:1b:17:50:f9:3f:bd:94:eb:c3:0d:a6:fe:68:00:
b5:be:09:c0:21:43:5e:25:18:d8:7c:f4:a3:8c:e8:95:0f:6d:
1e:f7:ba:e8:3c:0f:af:ac:e1:9f:4c:98:1b:3d:0a:d9:54:2c:
94:29:f8:d1:9d:38:f3:81:5b:97:2a:ff:97:8a:2e:7f:6f:b7:
6e:41:18:5c:11:e2:a4:bd:aa:68:7c:f4:75:7f:f4:f1:b7:fe:
fd:7e:2c:53:dd:6b:cc:c3:9d:41:8f:5a:28:23:73:f5:0d:9f:
57:ad:ce:f6:d9:a7:35:a7:76:6f:4e:1f:28:2c:e4:b6:87:7a:
4a:cd:f6:d7:86:65:ed:83:15:3b:f3:50:75:1c:cc:54:ee:91:
85:a4:cc:96:99:31:b3:53:d4:99:cf:b0:53:36:f8:27:5b:c3:
9d:5e:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:57:47 2025 by rpki-client