Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: rckGPgGCCk86K9bSYpnuTbMihJOM3zObUXMyCSFA8ag=
Subject key identifier: 09:81:50:9D:CA:9E:D0:1F:47:1E:94:55:B8:A6:4B:C4:AE:AE:46:8A
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 01974A0CA8459475BDB641478D253E183974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 1589
Signing time: Sat 07 Jun 2025 11:00:32 +0000
Manifest this update: Sat 07 Jun 2025 11:00:32 +0000
Manifest next update: Sun 08 Jun 2025 11:00:32 +0000
Files and hashes: 1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: tnHhiO5CbUri2pSHc+pN7AZL1liYliwDLyndKf0lTqs=)
3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:a8:45:94:75:bd:b6:41:47:8d:25:3e:18:39:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Jun 7 11:00:32 2025 GMT
Not After : Jun 8 11:00:32 2025 GMT
Subject: CN=0981509dca9ed01f471e9455b8a64bc4aeae468a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:3b:7c:f5:9a:06:cb:12:1f:1f:7b:14:8f:
cb:f5:b5:34:21:21:83:2d:f3:7e:b5:fd:4f:65:e9:
1d:0f:87:22:28:9a:d6:66:5e:06:38:08:6c:5c:d4:
b2:28:08:ca:71:02:12:e4:17:f3:da:0b:6b:f7:ed:
84:02:ae:5c:7f:41:99:b9:aa:57:85:1c:f4:48:5b:
88:c3:30:57:3b:e8:8b:54:8e:e0:2b:cb:00:81:57:
03:43:ba:70:3a:6a:ad:be:3c:3f:66:05:21:ee:be:
b1:92:9c:ab:4c:f0:0d:25:a1:35:e9:e8:c5:1d:37:
83:43:cf:28:80:c8:62:95:43:e1:87:01:6a:17:37:
74:92:eb:d3:e8:4a:d5:04:09:a9:a7:79:e4:dc:d0:
57:3d:a9:b7:fd:c9:1c:e8:4b:ba:63:a6:be:ac:b3:
bf:0a:d9:a4:ee:28:28:55:51:05:c8:20:56:c0:7e:
c3:39:bf:23:86:84:bd:88:69:e4:12:68:aa:0c:b9:
35:af:7f:8d:3b:70:84:70:ea:b6:80:4d:c5:68:11:
08:7d:08:85:74:02:e4:51:f4:ca:18:c0:51:8e:64:
ab:93:fc:43:83:2f:5e:67:15:ea:15:3b:ee:10:19:
07:a2:7e:4e:df:09:a5:f9:db:c4:2a:6e:c4:3b:17:
52:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:81:50:9D:CA:9E:D0:1F:47:1E:94:55:B8:A6:4B:C4:AE:AE:46:8A
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ff:b3:0d:7b:33:9a:4e:01:2c:1f:32:16:fc:99:cc:56:4a:
d1:35:d4:da:17:43:6e:61:66:b7:d6:4d:d7:52:6b:ff:d3:5c:
1e:73:ee:02:65:c3:27:2a:e3:b8:87:0c:f2:b5:d5:7a:ab:75:
e1:c5:c2:99:ad:6c:ee:48:0a:5a:1f:92:38:1d:46:00:62:7d:
34:f5:46:1e:51:3c:2b:8f:9a:51:72:80:7c:6a:45:1c:6e:7c:
04:9c:d4:bf:4c:5c:ca:36:4c:30:c7:60:df:30:4f:76:84:2a:
9d:8f:bd:18:3a:d6:6b:45:e4:9e:dc:6c:55:41:2f:8f:52:58:
73:13:47:56:2b:4c:53:b0:f8:76:dd:b3:13:56:7b:94:fd:c2:
55:d9:9b:c6:2a:9f:d4:90:0a:b1:10:53:6d:a5:26:93:eb:33:
7b:35:99:ab:e2:5b:c9:58:2d:ed:57:b6:46:9e:f1:5b:6a:f7:
ce:a1:06:a1:07:ff:4a:a9:ae:be:ef:43:5c:86:b8:05:5d:19:
18:57:d5:c2:da:7a:2b:64:cb:7b:66:ed:40:34:b8:a4:61:3b:
77:66:34:e3:8c:d6:71:43:10:d2:c8:c8:bb:96:2e:96:6a:5d:
30:86:4a:24:e9:e6:a6:2f:76:85:f4:c2:50:ca:4f:33:8a:28:
dc:9e:c1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:50 2025 by rpki-client