Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: 0xqH3ZVvQckzuhDxA/bO2riYhbMFPGTzvjbo62bWNto=
Subject key identifier: 32:5A:DC:48:77:FB:59:84:91:0E:A9:00:E9:A7:58:93:EB:5C:7F:3B
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 01976102832302550A0AD662F0455803B983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 01A7
Signing time: Wed 11 Jun 2025 22:00:43 +0000
Manifest this update: Wed 11 Jun 2025 22:00:43 +0000
Manifest next update: Thu 12 Jun 2025 22:00:43 +0000
Files and hashes: 1: GHoYC29SdZ8JHtSYpKsW5kablNc.roa (hash: Ggk2bB2uCoFFVfvkzavwaobQUbDhv+a9KTxQ1jDSQZ0=)
2: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: sgEUalZiKJNQRbZVM580WymuxPVYy/Hh6NLK87BikMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:83:23:02:55:0a:0a:d6:62:f0:45:58:03:b9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Jun 11 22:00:43 2025 GMT
Not After : Jun 12 22:00:43 2025 GMT
Subject: CN=325adc4877fb5984910ea900e9a75893eb5c7f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:63:6f:11:1f:09:3e:59:b5:ec:e4:4c:26:
23:90:09:5b:16:60:60:44:43:1a:d6:b9:32:e2:69:
53:46:92:19:aa:b5:79:9e:3c:54:89:93:83:3e:be:
bc:f4:11:a5:5f:59:48:5a:1f:05:13:75:d3:c9:f2:
c3:cd:20:fe:64:44:ce:57:06:57:c2:ec:93:29:d1:
e8:c8:a5:19:83:03:e2:28:c0:a2:c2:a8:5e:30:a1:
ac:9c:a9:df:7f:56:fe:8b:92:9c:89:cc:9f:b5:49:
1c:2f:0e:3f:4f:79:46:10:3f:1b:33:d0:8e:51:7a:
74:c4:1d:ae:32:68:67:49:93:0b:15:85:1f:e2:9a:
c8:49:1b:88:ca:cf:9d:4b:c9:d4:9f:99:60:67:de:
08:33:37:4c:a7:af:3b:57:63:30:43:51:d2:b2:ec:
00:ef:df:d9:61:00:71:75:f9:37:da:21:c5:18:b1:
6c:67:62:dd:c6:bb:d3:85:18:d4:86:e8:00:d7:33:
0e:a0:3a:32:7c:2d:25:e5:c0:44:90:16:a5:f1:c7:
07:3d:3e:43:0c:a4:dd:2d:43:51:25:55:fe:b5:f5:
03:ac:4f:8d:e5:6d:f5:fb:49:da:31:cd:94:e0:99:
76:16:84:ac:c0:fb:50:f8:ba:31:0b:7c:4d:ae:e7:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5A:DC:48:77:FB:59:84:91:0E:A9:00:E9:A7:58:93:EB:5C:7F:3B
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c8:d2:59:b4:a2:4a:00:f7:f8:85:67:7b:43:a1:f4:8e:07:
fa:42:f4:a4:94:67:25:d9:34:91:70:b5:5b:74:44:aa:34:56:
b3:fe:de:9a:8d:af:34:98:39:2b:81:9a:c5:87:ec:8c:24:97:
40:9b:e8:e9:36:57:a4:a5:3f:d8:24:9f:48:0f:6b:15:4c:f8:
91:cd:0a:ea:6b:2f:f6:a9:82:15:2a:3f:4a:ac:79:40:a7:09:
d3:e2:f7:0d:99:05:9f:70:42:cf:cf:05:04:a8:45:5a:1f:27:
ca:ca:52:03:6b:d9:4b:83:7e:43:77:f0:23:e5:ef:1d:13:aa:
4d:ae:9c:93:1b:ee:79:89:ad:7d:d4:aa:ff:19:86:b3:39:05:
f0:46:ba:ac:e9:c5:9e:1e:d7:ca:08:bb:4e:50:fe:32:7c:6f:
cc:bf:e0:26:27:18:38:62:9e:06:c4:15:92:e6:08:00:e1:0d:
66:32:a4:c2:79:25:56:c7:1e:c9:6a:2a:0d:88:8a:78:6d:f1:
74:69:ee:5b:bd:62:19:be:8e:0a:87:c3:2d:5f:a6:da:fe:34:
1f:02:d4:d3:f4:f6:cc:5b:59:0d:0a:f2:01:14:01:be:9b:8d:
70:66:2d:47:11:0d:24:b1:61:d2:7e:12:5d:34:60:3b:ba:f4:
0b:47:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:16:12 2025 by rpki-client