Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: WkPPBnC85s8MuDWZUEEg8pbbqKXV6n3DN/9gC8PEY54=
Subject key identifier: 99:40:51:56:D4:D2:94:C1:E4:14:75:74:13:51:43:64:B8:51:3B:72
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019748FAC42C37684D1999C53BDF880A6066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 0D6B
Signing time: Sat 07 Jun 2025 06:01:23 +0000
Manifest this update: Sat 07 Jun 2025 06:01:23 +0000
Manifest next update: Sun 08 Jun 2025 06:01:23 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: 5h/2JxT3YIhxlrXKv2UPVICS+yNl/C6G5WOym7VnGL0=)
2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:c4:2c:37:68:4d:19:99:c5:3b:df:88:0a:60:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Jun 7 06:01:23 2025 GMT
Not After : Jun 8 06:01:23 2025 GMT
Subject: CN=99405156d4d294c1e414757413514364b8513b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:1e:18:30:5c:5d:13:d8:0e:73:66:e2:a9:
6b:2a:ef:31:ba:7a:62:20:97:f6:3a:7e:df:6e:a2:
ad:50:cb:ef:de:2a:8d:32:a6:62:69:e9:c4:41:46:
82:76:79:68:ae:7a:58:96:8e:17:a4:28:6d:f8:72:
00:73:d3:2d:63:75:1b:39:38:07:d2:0d:6e:65:51:
c0:b8:25:86:7a:2b:1b:cc:fa:0f:9c:86:46:f9:0c:
8c:0d:d9:65:2a:8c:09:fb:54:5d:67:86:47:c5:68:
4f:20:51:cf:40:4d:b5:b6:c8:ab:27:f5:40:1f:47:
c1:f5:0b:92:28:1a:d8:c4:ea:42:f2:82:d7:10:ec:
7b:3c:34:ae:b4:86:33:81:d1:44:1b:fa:7d:3a:4e:
b0:63:60:ff:e1:d7:79:49:48:b6:b2:fe:ed:57:ed:
13:97:2c:b7:a7:50:34:3e:16:e1:30:75:14:5c:57:
ba:3e:ac:d4:3e:31:99:c9:17:4a:b0:e0:90:65:9d:
dd:a4:cc:fc:47:d7:eb:f2:26:9e:54:9a:1a:28:e2:
cf:7b:02:09:92:59:98:f4:68:13:c9:a1:0f:ef:1f:
0e:83:c8:9e:4c:e4:9f:90:da:94:e2:de:9c:5b:d3:
81:1a:db:ac:a7:cc:8a:d3:57:30:87:41:e6:8b:7e:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:40:51:56:D4:D2:94:C1:E4:14:75:74:13:51:43:64:B8:51:3B:72
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:f3:f1:76:07:25:c8:d6:e9:04:09:1f:6b:00:52:0a:11:da:
1c:8e:25:67:1b:2d:70:56:4b:de:fc:db:5c:31:8e:4d:6b:aa:
a0:c6:9c:31:02:36:db:db:a4:3b:fd:3a:52:5f:98:46:01:a0:
b4:fc:6f:8c:59:d5:af:b5:82:06:cc:b2:cd:e3:d2:f5:73:82:
e3:36:31:cf:30:f3:10:fe:f2:08:0f:10:cf:d4:57:a1:5d:e5:
b6:bb:c9:3a:42:42:44:7c:5f:2f:97:64:f9:a3:5a:28:18:60:
2e:fe:b5:d1:85:87:d3:e3:ad:cb:e0:71:3f:f3:22:93:0b:1c:
21:7a:6c:21:97:26:a7:b7:71:37:22:20:30:80:76:0e:94:c4:
1b:1f:96:68:9c:8a:e7:06:a5:7c:ca:34:f2:81:e7:50:98:4d:
82:11:2e:84:d3:a4:75:23:2d:a2:3a:22:73:11:eb:2f:2b:88:
66:7f:6d:34:22:75:9c:1a:32:ee:c5:8f:97:e3:db:38:c7:2e:
88:45:4b:e3:9a:1d:7f:2a:85:b1:e7:8c:20:29:69:3c:bd:36:
0e:e1:ce:5f:c2:ae:36:59:f4:eb:8b:5a:ee:c1:b7:ed:aa:00:
37:ee:41:69:d3:83:54:67:a9:c0:44:e6:46:dd:0d:e6:e2:c7:
80:6e:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:43 2025 by rpki-client