Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: 3lFnUafX7eILBVl1W/wQkFxcU5uFC/v2/IWMHEXuDKY=
Subject key identifier: 93:3F:A0:BC:B5:8E:ED:DB:6B:FD:DD:8A:5B:E4:61:26:08:28:BB:66
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 0197530F97C466B8D68E1BC33CB06796B7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 1164
Signing time: Mon 09 Jun 2025 05:00:20 +0000
Manifest this update: Mon 09 Jun 2025 05:00:20 +0000
Manifest next update: Tue 10 Jun 2025 05:00:20 +0000
Files and hashes: 1: 3oKx6h0eBr3yZ2nfockvN65K1_o.roa (hash: geWao+6sgTP3cLFpfRuFIKY1lyLCLqYJA9Pcg4p46Gs=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: WTTIFffgwBASj+9DfA2avdboa300Y5ieuu5qArtu4qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:97:c4:66:b8:d6:8e:1b:c3:3c:b0:67:96:b7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Jun 9 05:00:20 2025 GMT
Not After : Jun 10 05:00:20 2025 GMT
Subject: CN=933fa0bcb58eeddb6bfddd8a5be461260828bb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:94:14:d1:0b:2f:8f:ce:1b:1d:1c:6e:93:
71:4d:01:1e:b3:b8:74:9b:7c:4c:98:1e:f4:3a:1d:
89:97:3b:bf:ef:7e:42:e0:f6:56:34:30:ff:c2:a3:
46:fe:33:4e:4e:bc:6a:d2:c9:aa:52:c5:81:3c:c0:
db:bc:7e:9d:75:64:b6:e9:af:d8:59:8f:a4:34:bb:
25:00:72:a0:13:32:24:5b:8d:9b:2a:b0:7f:6d:1d:
59:d0:d4:9d:78:65:4c:3e:01:c3:9f:0c:18:94:21:
bd:62:31:94:fb:59:02:b6:44:17:89:38:2d:64:e8:
40:7b:20:a4:b1:cb:01:e0:5f:5e:ea:7d:37:fa:da:
78:8b:4f:84:fa:a6:51:88:2e:e2:f5:56:93:0b:c7:
b6:26:5e:61:e8:be:db:37:47:7f:cd:60:67:7b:09:
87:d1:5b:aa:b3:61:d9:29:5d:f3:01:59:92:c2:58:
17:49:24:8e:43:a4:2d:67:5c:c0:8e:1a:42:7d:2a:
95:b2:fc:95:74:38:0a:d9:b5:f3:e5:2c:63:75:73:
bf:4f:91:9a:67:51:04:80:7e:3f:0d:54:30:12:8a:
b3:10:0d:a7:89:88:5d:40:98:ff:1a:63:d5:a1:3c:
96:49:b2:85:fa:47:3c:d9:42:db:20:f8:9d:c4:3b:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3F:A0:BC:B5:8E:ED:DB:6B:FD:DD:8A:5B:E4:61:26:08:28:BB:66
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:39:d6:2d:9d:0e:07:f1:da:4e:2a:2b:ae:0a:2d:46:94:ff:
b0:0e:a2:68:32:e6:87:ec:b2:4a:de:38:9f:06:6f:2f:62:29:
96:ee:17:ee:e3:c3:c1:24:03:d1:65:13:7b:ed:8e:a0:30:28:
53:ed:3a:9f:72:d4:6a:be:ed:df:dc:35:5e:3a:55:06:fb:02:
82:05:3b:21:52:a5:c6:21:6b:39:95:26:fd:c6:90:1e:65:51:
a5:2b:f7:0a:2b:c1:88:e6:d2:37:09:3f:3d:82:a7:78:72:0d:
74:be:eb:30:6d:8e:36:a2:bf:1a:4b:ea:17:e6:56:dd:fb:4b:
1f:0a:63:88:b7:ad:85:f9:47:a8:7f:4c:86:c1:30:2f:3e:55:
76:7f:bb:f7:cb:b1:58:6c:f6:0f:c2:ed:28:d2:37:f0:72:f7:
70:40:95:bd:62:7e:c4:d8:ff:00:38:2f:66:11:34:aa:3d:a3:
1d:d1:d4:52:36:ae:39:4d:33:50:8b:62:04:dc:3e:eb:2a:f1:
2a:48:38:7b:70:75:bf:17:9e:24:d8:d2:fa:9f:5d:60:20:ac:
e0:c9:6f:74:e0:42:96:e9:89:dc:42:c2:bd:c5:0f:9f:d6:57:
78:18:92:bb:21:92:bc:63:1e:e9:37:4c:6e:72:5a:10:c6:83:
72:d5:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:57:46 2025 by rpki-client