Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: xm/pFKMqZ34gMnl1fI378Xzxgo+shNMJcdCiSQNCiac=
Subject key identifier: 6B:04:8D:DA:CE:76:E7:E0:84:2F:FF:C0:4B:FB:38:AC:92:12:81:34
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 019750469C113224C135CC489B15B70B3E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 1022
Signing time: Sun 08 Jun 2025 16:01:34 +0000
Manifest this update: Sun 08 Jun 2025 16:01:34 +0000
Manifest next update: Mon 09 Jun 2025 16:01:34 +0000
Files and hashes: 1: c7xqGqZ0KnoVgSHP1uxqIn-gcow.roa (hash: fgA4jW+G01sd+KIFTnm2o/eJLY8zge2zWEftjWqJRcE=)
2: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: r59kDButffTeA1dsaHd4ZH4myNF8gzLm2w+T/V55zok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:9c:11:32:24:c1:35:cc:48:9b:15:b7:0b:3e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Jun 8 16:01:34 2025 GMT
Not After : Jun 9 16:01:34 2025 GMT
Subject: CN=6b048ddace76e7e0842fffc04bfb38ac92128134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:7b:73:68:08:6d:cc:5c:4d:ee:04:f8:5b:
bb:eb:64:5b:31:4e:dc:b0:14:5b:50:d5:f0:a4:75:
90:c9:85:0d:67:f8:d8:b8:20:ee:a9:e8:32:a9:7d:
e1:48:0d:3e:c4:22:be:2f:9f:dd:e0:d5:44:91:fc:
d5:a8:53:ec:03:f9:94:da:b7:d7:0a:c0:9a:fb:f9:
37:fe:3f:9b:98:cb:a8:94:77:4c:41:fc:d3:5c:02:
85:31:36:c7:36:ae:ab:fc:44:20:47:c5:df:fa:ba:
30:01:4b:9d:da:fe:2d:f7:73:fb:9c:90:61:26:a6:
19:45:66:c8:20:19:c6:ee:72:c1:31:c5:ea:be:1c:
2d:9d:9a:59:47:8f:40:f3:2a:f0:75:6a:17:82:1d:
de:b1:2f:0d:fb:06:80:91:e2:fb:15:1d:2c:88:ab:
17:ee:ed:aa:12:08:63:23:47:4b:2c:20:19:bb:5a:
78:e9:3e:52:39:85:3d:8b:24:81:41:b8:08:2b:7a:
b8:da:b6:0d:2d:2b:68:f5:f8:4e:71:9a:13:70:5e:
2a:6d:50:ce:60:5b:1f:82:d7:79:65:ae:47:1c:c4:
09:6d:22:58:4d:ea:e6:7c:c2:4e:64:07:e6:d9:12:
b2:be:f3:f5:f8:cc:1c:1c:47:18:79:8b:37:76:82:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:04:8D:DA:CE:76:E7:E0:84:2F:FF:C0:4B:FB:38:AC:92:12:81:34
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:06:87:fc:b3:ca:40:05:2f:11:82:0e:23:f7:f2:09:ba:57:
51:a5:36:ee:41:09:9a:96:db:29:6a:f7:3f:a5:a4:8b:68:0d:
7f:5e:2c:38:2a:70:da:5d:b4:9f:a1:32:5e:a6:82:56:95:13:
ba:55:04:5d:77:12:3d:76:e9:80:af:08:3a:8b:5a:1e:9c:a9:
48:95:96:c9:5c:e4:34:de:72:14:a4:ed:65:86:6a:ba:37:b1:
ab:8a:47:f1:0d:e7:24:fa:62:82:2c:c0:b0:21:c6:5c:46:a5:
19:22:47:da:37:4a:da:24:28:a3:9c:32:d7:62:e9:b6:58:5a:
1c:f1:24:a2:f4:34:09:5c:26:09:ba:c5:e4:61:14:98:e6:c9:
fd:d4:f0:1f:dd:38:23:e0:3f:27:05:d7:00:6e:72:00:e3:70:
4b:33:fe:3d:8f:92:eb:ee:cf:2d:7e:67:54:5d:88:6e:00:a0:
ed:93:ec:fd:ab:e4:21:c9:59:7d:23:83:f1:36:55:a5:a6:5c:
04:20:74:08:18:cf:6d:a8:86:4e:7d:39:27:20:c3:15:e3:c7:
b5:13:ea:da:a6:c7:79:85:94:c4:a0:9b:dc:38:81:50:62:f7:
ef:20:ac:4a:1b:c0:9f:b4:cc:fa:32:b0:09:f6:aa:f8:7a:c7:
3a:3f:98:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:59:19 2025 by rpki-client