Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: DoqyxfW0clihUzKLHdVqtKia4P9HZEJsn8y+qN6L/04=
Subject key identifier: A7:B8:3E:29:38:2C:CC:2C:29:A6:B2:49:7B:FA:8D:2D:48:34:EC:AE
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 019748C2F40616F0709BBB2E81AE6B135E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 05:00:25 +0000
Manifest this update: Sat 07 Jun 2025 05:00:25 +0000
Manifest next update: Sun 08 Jun 2025 05:00:25 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: 4RlNShl/uYyw4wlzLMqQF3iTBkCDpC4GVAQ+YNTAI7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:f4:06:16:f0:70:9b:bb:2e:81:ae:6b:13:5e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Jun 7 05:00:25 2025 GMT
Not After : Jun 8 05:00:25 2025 GMT
Subject: CN=a7b83e29382ccc2c29a6b2497bfa8d2d4834ecae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:41:c8:c8:e6:5a:e0:cc:1b:8a:ca:71:27:
cd:15:3e:51:f8:10:b2:17:d3:ad:3b:0b:e4:53:22:
2e:83:f0:15:cf:8b:7b:a7:d4:9d:24:ba:79:d4:0b:
44:30:f0:e8:68:1a:ab:1c:4b:eb:bd:0d:3e:15:5a:
e9:af:d7:2b:7e:e5:52:86:b5:22:0b:36:c0:ba:01:
7e:39:f6:8d:b4:47:6b:e3:0a:5b:c7:81:41:99:d3:
f6:e3:68:bb:b7:69:5a:ca:bc:f1:74:1c:e2:3e:19:
03:a5:41:9e:2f:ef:9f:8a:75:ab:ff:56:2a:ea:85:
8f:91:3b:31:0c:12:b1:e2:10:1a:fd:06:d9:a8:48:
d3:af:f4:77:40:e4:ba:69:b9:e7:39:31:51:d9:58:
1e:99:83:01:ab:ca:88:76:80:61:c0:69:e2:03:f5:
a1:31:84:ed:1a:c4:7a:1e:85:03:18:fd:1c:a0:e7:
ce:76:21:3b:71:19:cd:c2:0e:f4:16:1d:ba:fe:24:
6f:7e:3c:be:51:8d:ae:48:e2:de:ca:31:a0:5a:97:
a9:19:f3:17:1b:0a:3c:98:4b:b8:f0:f0:0e:a2:38:
1b:d7:c5:4b:5b:43:18:f3:c5:43:a0:41:68:ba:66:
4c:75:c7:ae:2b:be:d2:35:4f:0c:7b:dd:48:bf:d2:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B8:3E:29:38:2C:CC:2C:29:A6:B2:49:7B:FA:8D:2D:48:34:EC:AE
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1f:e4:8c:76:fd:26:b8:3c:16:53:cf:2b:35:98:f8:fb:f7:
77:87:2f:bd:e5:c5:a1:99:92:da:05:61:e8:6e:93:4d:33:af:
f0:18:e8:f2:ac:24:5d:27:37:d8:01:84:9d:c2:39:9a:15:3b:
8a:91:05:de:a6:c4:83:c0:e9:e9:15:74:b3:5b:4f:0f:52:d5:
ad:17:90:47:a3:a8:b1:1b:f6:87:15:cc:1a:27:9b:31:0d:53:
24:fb:d5:ae:32:19:ff:41:9e:d8:7d:9b:59:d9:5e:e8:cd:e6:
97:13:0f:d3:c7:48:88:d9:5c:86:ed:87:18:7a:87:95:37:d5:
0b:17:34:1e:f6:48:8b:d4:f3:4b:82:67:a5:f3:f5:53:db:81:
d5:83:2c:77:cc:11:39:7a:bb:64:5c:16:19:1f:6a:b4:3f:79:
32:e1:d4:0c:b0:fa:13:b1:cf:fd:f1:bb:50:ab:b1:4f:d0:94:
bc:f4:29:23:c6:0f:d3:dc:98:b1:b2:e7:7b:e1:3a:52:e4:38:
4d:70:18:fd:18:0d:43:d3:56:b5:c4:9d:43:62:15:be:ad:13:
cf:fe:c8:a1:bd:9d:0a:8e:9d:32:3f:7c:9b:41:56:3c:dd:73:
a5:64:ef:3d:3c:75:20:db:03:64:1e:18:5e:ad:52:b2:bd:03:
e1:cb:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:10:20 2025 by rpki-client