Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
File: 0OMaFJwuaumsxynPesFwbePec5s.mft (raw, json)
Hash identifier: jkLcC9NCq6VY1XYX7n5WlxI7j/YcTZg04Na9MI3Zdks=
Subject key identifier: 28:CB:42:98:F7:70:21:CE:8F:69:37:5D:B8:D1:D1:62:B4:68:F0:AE
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 019745C2A5894EE6C7F1E0810CB20F6F7743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
Manifest number: 0CE3
Signing time: Fri 06 Jun 2025 15:01:13 +0000
Manifest this update: Fri 06 Jun 2025 15:01:13 +0000
Manifest next update: Sat 07 Jun 2025 15:01:13 +0000
Files and hashes: 1: 0OMaFJwuaumsxynPesFwbePec5s.crl (hash: w4E5Cw057qswCB1DL9MiypCIeKKPHDSoDnCeEbNc+uQ=)
2: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (hash: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:a5:89:4e:e6:c7:f1:e0:81:0c:b2:0f:6f:77:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: Jun 6 15:01:13 2025 GMT
Not After : Jun 7 15:01:13 2025 GMT
Subject: CN=28cb4298f77021ce8f69375db8d1d162b468f0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:d5:ec:74:01:77:5c:69:df:5d:d4:b2:88:
8a:2d:fd:c7:ff:ec:1e:9d:9a:53:07:2c:a4:49:96:
7d:5d:3d:86:59:35:27:96:37:55:0e:9c:bd:82:d5:
b4:ef:d2:75:34:41:c4:7c:fb:7b:f1:8d:bc:7a:5c:
91:90:a4:21:63:1d:35:b2:e3:f2:0b:ac:e2:56:73:
3d:d8:8b:66:e0:fd:1e:77:71:05:72:8d:09:ec:76:
67:41:21:69:2c:9f:b3:e8:16:a5:36:c6:56:19:fc:
67:7d:56:d7:ee:3f:04:f8:05:b6:9a:51:e6:7d:b5:
76:46:2e:0f:81:43:56:e4:05:34:54:96:c7:45:4b:
a2:11:c8:ae:76:b5:40:92:bf:3f:35:00:ff:d5:f7:
dc:c0:e3:74:35:16:8a:ad:e8:3b:b1:60:f2:12:a5:
f9:ca:af:c5:7b:70:57:8b:8c:b2:72:75:5e:9f:8b:
b2:ef:cf:fd:8f:6d:b3:a6:c2:85:6d:2a:1d:47:14:
d4:37:59:37:05:3a:43:07:46:9e:67:8e:19:e1:0c:
d5:40:06:fd:2b:5f:e2:a9:9b:37:01:72:1b:d7:db:
da:42:47:59:e4:a7:ef:ee:b7:61:3b:a6:9a:ad:df:
46:b7:36:22:dd:f4:20:d8:bf:5f:ac:7c:7f:03:46:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CB:42:98:F7:70:21:CE:8F:69:37:5D:B8:D1:D1:62:B4:68:F0:AE
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d3:e6:1e:89:e0:83:2e:0b:8f:5a:a4:26:59:bc:7c:34:da:
3d:56:a7:5d:95:7e:6e:24:8e:81:5a:b2:14:4b:e3:f8:6f:48:
0a:dd:55:2f:ca:01:d1:9e:28:d3:cf:43:91:41:c7:06:a7:a4:
fd:6e:cd:86:c7:e5:fc:1e:5a:55:4f:b2:6d:7f:29:a9:a5:b1:
04:4d:bd:e9:44:fc:e5:f7:18:c1:0d:5f:d1:ac:1f:ce:f1:72:
27:aa:f7:af:6e:73:42:c5:af:dd:d7:24:ba:04:8e:08:3f:18:
e6:d1:68:c5:d4:29:f2:cb:d6:4d:70:ce:71:2e:bb:c9:e9:e2:
25:61:31:85:85:f9:b2:c9:ba:66:4f:79:dc:a7:75:fe:b0:50:
83:d4:9e:34:79:1a:c5:e0:3f:7d:26:c7:5e:9a:6f:ff:fd:be:
bb:c3:6a:7a:81:6d:66:3f:6a:77:84:47:f0:9d:b7:ac:a7:b5:
a4:70:5c:56:44:22:10:5b:ce:33:19:b8:10:42:2e:25:de:da:
07:23:78:e7:33:ff:76:14:d3:ff:af:00:d3:f5:86:28:1d:f6:
7c:6d:c7:74:a3:60:9e:e8:b0:35:b8:f8:b3:c9:ee:42:56:2b:
d3:49:a6:10:9b:e1:47:23:7a:6d:a4:59:41:6d:f3:0e:77:4e:
d0:cc:dd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:55 2025 by rpki-client