Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: 0XTD2tEGgBoXczQ/TwYzWu1fID+P8Qzg2rzNDTC/kb0=
Subject key identifier: D4:62:AE:FB:08:0D:6E:C6:40:8D:0D:D1:FE:6D:8B:D5:FB:45:0D:88
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 01974B56D98D2CFCAB1DA9C10516F6B8D7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 0BBA
Signing time: Sat 07 Jun 2025 17:01:12 +0000
Manifest this update: Sat 07 Jun 2025 17:01:12 +0000
Manifest next update: Sun 08 Jun 2025 17:01:12 +0000
Files and hashes: 1: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: xLNXaprxwp3IfhagDkPcT7aM7NVlnLVQaxZOWYFrsWw=)
2: akjM-xe6r7wN8q85qvVsiC6HFoc.roa (hash: DJGYhYAc1tW0r6f5bvOKTaPIoda2gTETmwDHHbAC3Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:d9:8d:2c:fc:ab:1d:a9:c1:05:16:f6:b8:d7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Jun 7 17:01:12 2025 GMT
Not After : Jun 8 17:01:12 2025 GMT
Subject: CN=d462aefb080d6ec6408d0dd1fe6d8bd5fb450d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:23:23:69:ab:1d:f8:a8:5f:22:f5:df:c4:
59:30:f9:62:c0:ed:e0:59:3d:0a:a8:50:34:0e:9c:
55:3a:df:cd:d1:25:a7:a6:b9:35:66:a2:b8:f5:03:
9a:36:57:2a:0e:e4:c2:53:8e:6b:7b:33:1c:c2:c7:
11:ad:91:8e:4a:57:c8:68:29:01:f1:ba:c5:dd:f4:
eb:14:10:71:01:c5:77:e9:f9:5d:e8:0c:d4:68:40:
df:6d:70:0d:68:69:50:37:b3:e8:e0:94:52:ea:d3:
d1:b9:42:0e:51:c3:63:b5:4f:17:67:74:36:e3:ed:
6f:ae:38:d4:fa:a4:ee:31:45:3d:fa:ce:1c:a8:5e:
cb:41:ad:50:f3:8e:50:f8:38:a3:56:71:f1:cb:24:
5c:f9:b7:ed:8d:de:10:fa:61:d0:d5:92:31:49:59:
ef:e0:d0:df:5d:ab:67:1f:33:5c:34:ec:39:42:bd:
77:ac:84:c7:b3:da:45:12:fe:e3:dc:ba:ca:ce:3b:
ca:10:68:b3:99:72:37:d9:6d:b1:f5:bd:8d:a3:16:
3d:67:3c:ae:88:ee:ff:03:bd:6c:dc:ec:c9:2e:30:
95:9f:90:bb:af:40:b8:cd:2c:6f:f7:25:8c:5c:e4:
6b:50:fd:c6:f6:d7:54:10:35:7d:f0:5d:94:1b:e7:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:AE:FB:08:0D:6E:C6:40:8D:0D:D1:FE:6D:8B:D5:FB:45:0D:88
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:46:a1:a2:fd:d4:d9:79:c8:7b:da:af:90:5c:93:40:09:bc:
c1:13:8c:c8:20:ee:51:3f:9c:c9:45:09:86:95:4b:86:3a:50:
39:50:d1:4e:b1:08:3d:3e:1a:0e:05:79:33:d5:e7:0d:b8:dd:
33:80:f8:7c:83:1c:23:27:ad:1f:71:94:76:d9:9c:0e:0b:da:
35:37:ee:6f:98:e3:e5:1c:d4:78:be:72:4d:f5:7c:22:40:ea:
ff:44:57:93:46:fd:7f:3c:bc:6d:c0:7e:e9:2b:ce:11:e3:00:
8b:f9:f2:ca:07:28:e4:2b:d6:92:9d:12:06:28:a4:e7:be:ba:
2e:d7:e9:49:19:c9:75:31:4f:1b:73:9e:cd:f9:d8:47:8e:cb:
83:ae:f0:74:bf:62:d2:4f:70:29:ad:37:b0:b8:9e:2c:45:3d:
68:47:ef:56:78:1c:bb:75:be:ee:8d:55:79:0d:df:ca:a3:3e:
5c:75:18:f6:5e:34:0e:51:ef:07:55:91:48:6c:f1:26:50:03:
61:98:80:2d:27:4c:27:98:7f:45:69:86:6f:2c:e9:d1:d2:5c:
a8:27:a5:ca:9d:78:cf:ff:86:a8:d7:48:b7:e8:03:d1:16:18:
6a:60:4f:ea:92:8d:bb:3b:e8:83:98:72:8a:5a:8a:15:05:c3:
06:09:09:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:36:34 2025 by rpki-client