Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: 7QD3XeaK8bBZ0wK3tB/Or7B8CfGZLxzq4Y04vGLi+XQ=
Subject key identifier: 01:05:1E:08:E2:4C:8A:B2:0B:4A:35:2E:4D:51:34:04:E7:3D:84:F2
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 019763960379511FEB0392BECC1EDFECD160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 0528
Signing time: Thu 12 Jun 2025 10:01:05 +0000
Manifest this update: Thu 12 Jun 2025 10:01:05 +0000
Manifest next update: Fri 13 Jun 2025 10:01:05 +0000
Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: ptzUTKtuq5rJm1jBcBT9+CPoYs9jaakA3yu3TTkCxJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:03:79:51:1f:eb:03:92:be:cc:1e:df:ec:d1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Jun 12 10:01:05 2025 GMT
Not After : Jun 13 10:01:05 2025 GMT
Subject: CN=01051e08e24c8ab20b4a352e4d513404e73d84f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:b4:30:d0:23:dd:a4:86:02:ae:c2:95:17:
59:96:44:0a:2e:76:2e:b5:80:cb:f7:39:28:bd:ef:
1c:6b:11:26:66:21:51:56:3c:65:4e:7f:1b:bb:8d:
58:92:c8:59:9d:b3:cf:d0:f3:1f:b9:c7:f1:0c:2b:
be:c4:9c:1c:bb:85:8c:2b:e4:4b:0e:e7:81:39:5f:
89:60:3c:94:00:27:df:14:b3:c9:2e:26:d9:80:d1:
25:fa:91:ad:b1:fb:08:28:c1:e0:8d:c0:27:ba:54:
7c:27:a0:28:7e:73:5d:88:9e:92:d4:56:be:99:ce:
57:c6:cb:92:e6:75:b8:2f:9e:28:c5:11:95:44:7a:
7e:60:84:56:89:f6:eb:13:ec:84:43:71:ad:22:a4:
b8:7a:0b:88:33:ac:56:54:ba:dd:60:2c:b0:24:ca:
7b:88:59:33:91:b6:50:c4:25:20:8a:bf:19:43:81:
52:81:3a:ee:f6:4d:d4:8a:f6:ac:ef:80:93:db:e5:
e5:91:39:af:24:9d:d1:b3:b8:18:b4:5e:35:07:07:
27:ad:83:f6:06:18:fd:03:89:ed:64:e5:77:24:e6:
f3:50:39:c0:eb:8d:4d:73:5d:ee:d4:4a:fe:9c:6f:
50:f1:b3:6f:d3:77:57:40:3e:bf:cb:6c:72:49:d7:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:05:1E:08:E2:4C:8A:B2:0B:4A:35:2E:4D:51:34:04:E7:3D:84:F2
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:97:27:6d:c5:45:8e:80:ad:5c:3e:4f:4b:67:4d:26:0b:2c:
da:54:db:88:71:f0:99:9b:97:50:1b:22:4a:1f:ca:f0:e3:44:
94:a3:29:d6:01:79:6a:09:f7:c1:b2:d1:97:60:44:6a:f9:50:
dc:9f:94:25:e2:f2:22:ce:9a:c6:c5:1d:5f:d8:67:1e:aa:3f:
a0:5c:73:8e:c9:4f:e2:55:2c:51:4b:82:9b:b8:fb:9f:5e:2f:
70:ee:07:42:ed:70:45:0a:cc:8c:09:c9:79:f5:5e:ad:e9:4e:
e3:c7:78:64:61:32:87:c3:b3:3e:6d:ea:d4:47:ed:90:cd:73:
4a:85:d8:35:0e:21:52:44:d5:dc:8a:36:16:fb:84:c6:ae:01:
50:ab:52:49:5e:3c:59:c8:f7:f2:b8:c6:e8:28:d1:0a:b8:cd:
c1:53:2a:d0:d4:35:a6:01:5c:2e:1c:7c:d6:b5:4b:ce:17:2f:
99:85:84:64:c6:fd:48:6e:56:5e:9d:1e:76:50:93:69:4c:33:
32:92:66:6a:63:3c:89:70:84:de:80:03:75:de:20:bd:ab:21:
ee:92:bf:e8:1c:87:8a:b2:80:a6:d8:16:05:98:33:cf:64:ae:
29:10:8d:ec:c5:da:2c:a5:37:96:99:e3:0b:20:fa:3f:56:7e:
fb:0e:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:05:37 2025 by rpki-client