Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: +Ivudj3HXDYH+ozkhfK+BlTOXtfxKT43VgJkrRZvpU0=
Subject key identifier: 04:DF:DB:0D:55:1D:52:D0:FA:8C:43:3D:83:44:20:82:19:5F:9A:5B
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 01975948B2B2952AEB3AD2576D69D7A1E28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 0EEA
Signing time: Tue 10 Jun 2025 10:00:25 +0000
Manifest this update: Tue 10 Jun 2025 10:00:25 +0000
Manifest next update: Wed 11 Jun 2025 10:00:25 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: tRJKxPSYR/XkCOH9rp3dL/JsnH0F/51Qun6FNjYvBzc=)
2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:48:b2:b2:95:2a:eb:3a:d2:57:6d:69:d7:a1:e2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Jun 10 10:00:25 2025 GMT
Not After : Jun 11 10:00:25 2025 GMT
Subject: CN=04dfdb0d551d52d0fa8c433d83442082195f9a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:74:ab:1a:ca:99:6a:2d:0e:fa:9a:76:2a:
88:49:60:7c:15:90:3f:c8:e4:91:02:18:37:0c:94:
f0:38:8f:99:e4:bc:99:99:62:f4:30:13:74:6d:78:
e1:dc:8c:db:f6:47:8e:fe:f6:46:d7:2d:92:5a:0e:
65:c6:29:bc:63:4f:92:70:e2:52:f4:6c:fd:55:bd:
f6:b4:6e:9c:da:56:3c:21:7e:6a:6f:b8:12:99:eb:
f9:6a:b4:20:bd:74:5f:b3:75:cb:60:66:cd:01:0d:
56:cb:69:b2:bd:3a:24:b1:8e:f9:1e:f7:d1:96:eb:
fc:52:bd:d8:0e:26:c4:ca:4d:e8:80:79:6f:41:9c:
58:64:b1:c2:f5:bd:a4:e2:43:02:3d:05:81:71:70:
6f:35:84:96:87:fe:e3:8c:59:42:97:25:22:79:c5:
21:6e:05:05:6c:96:1f:aa:83:44:88:dc:7f:fd:2d:
66:0a:5b:c4:c5:05:27:91:2d:68:f2:de:7f:49:13:
56:7f:84:bb:a2:b3:c9:ab:36:54:35:9d:cf:76:60:
0d:e3:af:4f:5e:02:94:89:9f:a9:21:7a:ca:81:4c:
0e:77:69:e0:c5:21:cb:46:b5:6e:9b:94:80:f7:6e:
be:37:22:dd:57:3f:9e:11:ac:58:ec:dc:1e:9f:43:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DF:DB:0D:55:1D:52:D0:FA:8C:43:3D:83:44:20:82:19:5F:9A:5B
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:06:ba:6e:d2:e9:f5:66:63:f9:35:61:07:63:34:3e:bd:
35:2c:f7:83:8a:bf:44:36:e2:9e:44:1c:68:69:1e:d9:7d:c2:
18:87:d5:ef:8a:1e:bf:59:22:c5:0a:f5:7f:37:a5:ce:48:98:
5b:84:e1:d4:ee:9c:45:9b:f4:d6:95:28:60:9a:d1:3d:dc:98:
fd:70:d7:75:55:7d:54:bf:f8:c3:11:ec:fc:2b:41:4b:2e:48:
38:c8:87:38:a6:3f:62:e6:b6:67:7f:a3:ff:fc:07:46:82:e7:
1a:10:7e:3c:2e:3e:a6:55:e1:75:92:7e:77:d6:a5:09:ce:b9:
db:85:9e:32:dc:93:e0:e1:51:72:53:11:01:9c:48:dd:2a:be:
d4:a3:56:f4:a5:53:16:ec:ea:97:ea:c9:0a:05:ee:14:9b:72:
77:b0:0a:0e:73:f0:1b:d6:8a:f3:c8:fb:0b:6c:7d:ba:9d:b0:
49:a7:2f:50:10:e7:6f:57:ff:a3:61:de:ad:ef:09:9c:45:f7:
ad:a9:5b:02:a3:08:5d:9d:3a:31:e2:c6:8a:b8:67:dc:27:8b:
cd:aa:37:79:ee:ff:27:bc:1b:d5:55:da:37:2c:8a:76:82:bc:
e5:5d:1e:2e:5d:7c:af:c7:45:fb:cd:75:a8:df:33:98:61:a9:
a6:e0:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:23:32 2025 by rpki-client