Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
File: OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json)
Hash identifier: EpmrI9bitlX6vPlKV+4knVg0bddkEoOcppl3G3uY28A=
Subject key identifier: D3:64:D0:70:C2:3A:35:45:11:7C:52:B6:04:9C:AD:24:CA:56:E5:80
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial: 019645566573A3BB9A6D9BF9633A058D1BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
Manifest number: 144B
Signing time: Thu 17 Apr 2025 20:00:11 +0000
Manifest this update: Thu 17 Apr 2025 20:00:11 +0000
Manifest next update: Fri 18 Apr 2025 20:00:11 +0000
Files and hashes: 1: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: EeooIGkKsPVzLIBmOzreWzbm60ifqWO7wPD2DZRXw2w=)
2: QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa (hash: MbjZHir8r+jpFNjo1IiwrrSwZjkeJw6BZ6V05J/2V+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:65:73:a3:bb:9a:6d:9b:f9:63:3a:05:8d:1b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
Validity
Not Before: Apr 17 20:00:11 2025 GMT
Not After : Apr 18 20:00:11 2025 GMT
Subject: CN=d364d070c23a3545117c52b6049cad24ca56e580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:57:e7:9e:a4:43:75:96:f7:5a:f2:3b:84:
b6:37:ba:e4:45:5d:9a:d7:a2:f3:83:31:c9:83:08:
e2:a3:a8:77:e3:48:a1:11:50:86:e7:e4:f4:ab:72:
9e:eb:35:db:19:ca:f0:41:4a:4e:3e:f1:83:fb:93:
51:50:c3:25:43:99:f8:27:d9:9a:bc:db:07:63:18:
99:ed:2f:fc:cd:2e:07:e1:58:18:98:bb:47:a2:f3:
02:cf:69:94:ec:32:26:35:0e:59:eb:5c:35:6c:8c:
a6:21:98:36:43:a2:7f:cf:c6:c5:10:c6:e6:8b:e0:
70:2b:69:30:5d:cc:b1:03:f2:f4:7b:80:f2:3c:37:
40:b4:ad:d4:23:c7:c1:50:54:12:f2:df:3e:a5:88:
f8:22:5a:f6:7c:28:a0:b4:42:dd:23:51:2f:48:31:
01:f1:d6:65:db:84:42:8b:7b:c7:6d:ff:dd:b1:30:
40:be:ff:74:06:9b:d4:bb:f0:61:34:3b:38:f5:d0:
bd:5d:b6:ba:7c:ad:93:87:5d:31:be:fd:8c:e8:5f:
c4:d7:5d:15:bb:06:59:41:3d:0e:75:af:1f:65:0a:
4d:06:52:53:d0:19:b8:84:c6:58:10:42:d4:41:b5:
cb:8d:43:a5:25:f1:18:0c:ca:24:d8:36:55:e6:bf:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:64:D0:70:C2:3A:35:45:11:7C:52:B6:04:9C:AD:24:CA:56:E5:80
X509v3 Authority Key Identifier:
keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3a:01:f5:70:3d:5d:11:07:ca:75:cd:b7:88:de:ce:9e:1b:
0d:56:17:3e:91:a1:2e:02:f0:ec:bf:5e:77:4e:f3:88:2e:f4:
50:54:45:fc:fa:70:a9:42:24:13:27:5f:2d:a4:d5:d2:5d:8c:
7c:c4:5b:3c:ac:b8:16:d6:c2:d2:2b:36:da:67:61:d2:0a:79:
98:f8:1f:b1:97:cb:20:a5:fc:f5:e8:10:44:04:f4:3d:ad:0b:
d4:cf:06:ea:22:e6:20:39:6e:8a:45:1d:94:39:48:3b:95:49:
52:5b:97:8d:07:53:88:14:6b:88:d2:03:ae:19:8d:d9:f3:ed:
8d:e2:75:66:ef:8b:75:bc:8a:da:97:44:b8:f7:d6:74:1f:9b:
f7:f4:9f:75:15:05:2b:15:de:3c:e3:b1:58:d7:27:f0:a1:92:
6c:89:da:fa:c2:0f:2e:c6:08:02:8d:ed:a7:47:c8:a4:12:3c:
7c:1d:98:28:86:f6:a9:cd:cb:07:2c:0a:94:a8:4a:98:71:14:
6e:1e:46:26:50:78:2d:fa:3f:53:ee:b6:bf:43:5c:67:86:0a:
d7:50:7f:ab:79:c6:89:b0:91:5c:d0:de:02:5e:50:ce:5f:95:
d7:c6:2e:f1:9b:cc:19:b0:ff:b8:ad:da:fc:a9:8d:48:04:a0:
37:cb:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:55:54 2025 by rpki-client