Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: pHf9hB5idiFX3sc3O1x1Gf0CHiSN0H7MWe73Bx7rD7c=
Subject key identifier: 7B:F5:12:F2:08:9B:23:75:14:33:1C:3A:0D:19:00:85:9B:A0:9B:53
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 01964DB4C0D4C4FF97B1B58745267344E648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 11:00:13 +0000
Manifest this update: Sat 19 Apr 2025 11:00:13 +0000
Manifest next update: Sun 20 Apr 2025 11:00:13 +0000
Files and hashes: 1: L3VPH_zsfjbjwAwWmPKEb-EZRqg.roa (hash: UjjV+/8s9XVTqZqV/PGNgru/2pjUXQnn5HjnZe2AuZE=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: M3SGJ1uksCbjjitwezOY3KOYhOu54RPE26b+BvgzUsg=)
3: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (hash: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:c0:d4:c4:ff:97:b1:b5:87:45:26:73:44:e6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Apr 19 11:00:13 2025 GMT
Not After : Apr 20 11:00:13 2025 GMT
Subject: CN=7bf512f2089b237514331c3a0d1900859ba09b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:96:8c:86:58:0e:ec:09:64:17:76:fd:1c:
a8:7f:c8:36:53:3b:f1:96:94:c9:37:0a:b4:af:47:
ef:95:a9:5f:33:40:7c:27:21:b9:68:78:d5:44:c6:
18:3b:f0:aa:9b:6a:3d:ef:87:c2:98:cb:b6:4a:fc:
8c:73:08:c0:03:fd:65:cb:61:d6:52:03:9b:d1:db:
17:67:4c:e5:89:fb:77:d7:61:c3:e8:f2:b8:7a:80:
61:50:4c:63:29:07:ed:1d:92:7b:8f:c7:3c:e9:c6:
32:80:09:b7:21:33:1e:e4:5c:d3:7c:16:c3:a0:38:
c9:26:4c:b3:0a:73:1d:c2:f7:f4:09:69:30:ad:b8:
7d:34:e9:72:f1:ac:d4:e2:a9:4d:f8:a5:6a:65:5a:
99:e2:65:b4:db:95:99:06:f1:ec:76:a3:24:7d:ae:
e2:6d:e6:33:8a:b4:6b:d2:82:37:05:34:83:ec:95:
b3:c5:32:10:0a:96:9e:9a:32:55:cd:fb:e5:fa:9c:
98:b4:21:98:8e:d4:4c:5d:1e:00:05:fb:2f:05:46:
38:a0:09:73:95:62:dc:e2:ba:50:01:61:2e:db:e9:
f5:a0:7c:9e:dc:f1:fb:31:70:2b:bf:09:64:3c:8a:
68:d3:07:44:54:4c:ac:1d:d8:a1:4c:10:9d:6e:6e:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:12:F2:08:9B:23:75:14:33:1C:3A:0D:19:00:85:9B:A0:9B:53
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b9:7a:03:16:1f:14:73:d3:78:8c:97:d9:ac:fe:2b:67:d1:
db:2d:72:94:72:4b:e4:76:8f:1a:6b:0f:2a:21:01:f1:31:82:
8a:0a:39:62:31:67:ee:a2:f5:b5:5b:16:d8:fa:05:ed:b5:9a:
8b:48:df:9d:0d:f9:d9:cf:8e:68:18:75:4c:14:8e:25:99:58:
3e:b5:7c:fd:60:4a:93:d0:7e:09:a8:c0:3f:15:fd:e3:09:96:
b1:d0:2b:4b:f5:ca:a5:47:6d:13:aa:ed:34:6f:20:0d:b9:03:
b4:64:3a:1b:4b:ec:a5:8c:da:a8:eb:66:c7:3b:34:37:71:f0:
ea:f7:f6:f8:68:fb:45:5e:f7:c8:b6:bd:7c:4f:d0:cd:ba:dc:
ab:aa:0a:b3:ef:a2:58:de:83:d8:f4:16:13:c9:ce:d1:03:7b:
bc:45:13:48:18:99:d2:07:21:26:cb:f9:05:6e:1f:64:1f:71:
56:69:73:15:1e:a4:f4:b5:39:af:bc:9c:a3:ba:27:9f:07:46:
79:3d:31:3e:05:4a:7c:cb:23:99:63:d9:a4:84:63:fe:e3:18:
0c:5d:de:0d:60:b2:c1:cb:bc:5c:7c:ac:e9:49:be:1b:ad:9b:
2c:d0:82:1c:44:b0:d5:df:31:6a:6f:3e:ed:06:69:fd:51:1f:
99:05:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:13 2025 by rpki-client