Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: N3UICBJnDkkriwCNrTJImL1Z2+Ex8vMc2eG6mtIMzJE=
Subject key identifier: DE:09:24:C5:82:0C:84:D7:94:D6:54:69:22:8C:37:EB:77:34:AF:3A
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 019646D729C5DCE41E29ABB7AC87B0E119D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 0709
Signing time: Fri 18 Apr 2025 03:00:28 +0000
Manifest this update: Fri 18 Apr 2025 03:00:28 +0000
Manifest next update: Sat 19 Apr 2025 03:00:28 +0000
Files and hashes: 1: KGkiu_v0VLQmN7S0ksdeT71QkrU.roa (hash: JLkvT5B6nB370rTNimZvN5bMsuGtWZVcc7r812WnkMQ=)
2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: ZKFPkV34Mbqr6y/cukOJjO4Lxf9rHNK6vDQkKiUW00o=)
4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:29:c5:dc:e4:1e:29:ab:b7:ac:87:b0:e1:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Apr 18 03:00:28 2025 GMT
Not After : Apr 19 03:00:28 2025 GMT
Subject: CN=de0924c5820c84d794d65469228c37eb7734af3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:8d:a0:b6:34:cb:50:51:50:a2:11:bc:29:
1f:34:9a:6e:ab:2d:ac:fc:d4:8a:04:ca:4e:3a:e5:
c3:87:06:6e:70:ae:7e:84:ac:ea:d5:00:1d:60:75:
50:63:3b:51:09:0c:fa:f0:d8:b9:83:99:0f:9e:14:
20:70:91:bd:dc:8b:eb:72:d7:15:ed:0b:d3:64:64:
d9:cb:a5:df:ae:d8:b6:84:7f:0a:87:11:cc:87:f0:
30:e5:f7:d8:cd:49:80:1d:67:d6:a6:ed:ed:23:7a:
c0:4b:20:64:54:ea:af:e5:90:09:9f:1f:f0:2f:2e:
62:a8:9e:2e:31:2e:4e:fe:5a:da:01:6a:e4:ad:60:
fe:b6:5b:7d:2e:c6:1d:b8:d0:41:b2:6d:f0:eb:b7:
f2:a0:dc:3f:97:ca:dd:1e:fd:2b:37:be:b5:b1:40:
46:b2:97:73:0a:7a:e8:20:2b:4f:fc:51:03:67:c7:
f9:88:cf:8c:be:9f:43:d7:d9:bb:35:2d:2f:14:9b:
16:20:c6:cf:76:5f:b1:f9:00:81:4c:d3:c8:75:59:
6a:ea:08:cf:d5:23:a0:37:df:74:16:c3:37:86:00:
f1:c4:67:e3:a2:c7:dd:47:7a:97:57:d8:95:e2:63:
6f:8b:60:6e:bc:1d:4b:13:f8:66:af:f2:df:df:6a:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:24:C5:82:0C:84:D7:94:D6:54:69:22:8C:37:EB:77:34:AF:3A
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:68:aa:71:41:69:c9:da:59:bf:49:fd:93:13:87:17:4c:dd:
78:3f:55:d3:b3:0a:10:ea:49:52:eb:f1:76:72:18:95:a3:81:
9d:c2:08:d9:43:dd:ca:b5:ef:50:97:42:da:72:38:70:6c:85:
ee:b8:50:64:0d:77:22:ed:6a:f1:86:3d:a2:64:72:43:ed:5d:
71:3c:9f:9c:b0:38:c9:de:bf:07:c8:ca:0c:da:fc:95:b8:28:
2a:02:d3:60:d5:69:18:dc:f6:df:bf:c5:6a:43:14:02:95:58:
29:0d:87:f9:74:76:69:fd:ef:39:c1:9f:e8:ae:28:95:15:71:
46:0b:3c:a2:f1:5f:26:a3:ed:57:de:b3:0e:61:0d:9c:28:22:
4c:35:50:aa:f6:8b:5d:2a:5b:e4:b3:3a:6f:6b:8d:85:cd:39:
49:cb:80:e0:91:83:b4:ac:1d:0f:98:d4:16:e3:ac:26:32:00:
ca:08:92:86:a8:0b:a1:9f:ed:62:b1:84:11:e0:6f:fa:55:fc:
26:df:94:49:53:b8:8c:30:1d:f2:00:26:3d:63:28:bd:cd:11:
a8:1f:b6:03:73:c1:47:ba:23:91:c1:17:ae:ca:c6:86:0f:ab:
22:21:8c:8a:e1:dd:7f:cc:ea:82:60:91:77:c6:54:4d:a6:81:
d8:09:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:37:57 2025 by rpki-client