Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: jLxAgAXTozyeKXIfEjzp8e80jzADMdGB5lvdymA5HPQ=
Subject key identifier: 09:35:E6:67:A1:C6:F2:9B:FA:1D:A5:73:72:36:58:0D:66:41:C6:BC
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 01974B8DC3569A3D008334EB8343F3821CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 12BE
Signing time: Sat 07 Jun 2025 18:01:11 +0000
Manifest this update: Sat 07 Jun 2025 18:01:11 +0000
Manifest next update: Sun 08 Jun 2025 18:01:11 +0000
Files and hashes: 1: 1qXoS3ZyJIxcOWhfODj10DLjQ_U.roa (hash: GFEaUvVwjsTkY2CZy9se0kItacxeC4v59hUMVKrNWa8=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: oKudA2hCpJ/vQR7Ezpy8j4iGL6+CF/ZHEsC+DauwlHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:c3:56:9a:3d:00:83:34:eb:83:43:f3:82:1c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Jun 7 18:01:11 2025 GMT
Not After : Jun 8 18:01:11 2025 GMT
Subject: CN=0935e667a1c6f29bfa1da5737236580d6641c6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:7e:c1:17:bd:2a:aa:e8:24:0b:50:58:66:
7b:84:0f:bc:40:87:ee:42:d5:fb:6e:2a:40:d4:22:
a1:b4:ae:df:76:57:d3:0b:6f:0e:3b:c2:15:26:2d:
fb:ed:5d:e9:20:db:07:2d:7c:25:46:49:c7:ee:37:
df:61:bd:cd:15:63:ee:d2:66:37:46:82:06:d4:bf:
66:a5:c5:5e:dd:66:f0:25:17:d3:b5:46:85:53:df:
c5:ef:bf:36:74:42:23:9f:3d:d0:ec:1d:9d:3d:b0:
58:6b:1f:2b:12:56:eb:b0:5f:b4:b9:d0:f6:89:b0:
fc:e5:43:cf:19:25:09:85:7f:62:06:89:0d:fe:e2:
d1:e4:b4:21:83:a9:7c:6e:8d:bf:fd:ab:08:af:14:
d7:a4:73:22:c1:1a:48:ae:2d:de:b4:1e:74:93:21:
c4:ee:0f:06:8b:20:05:bb:29:27:25:29:88:0d:b6:
55:a2:65:e7:70:26:24:c0:c0:c2:a9:af:cf:72:09:
a5:d2:15:47:cc:da:78:43:52:09:4f:e2:fb:ae:7a:
a9:d2:0d:7f:02:46:74:72:64:63:ed:bd:85:81:84:
00:dc:73:ad:2d:64:fc:47:8b:f2:0b:aa:9f:e4:0d:
6a:f9:79:44:d2:7a:3b:30:0d:53:fb:b3:de:13:26:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:35:E6:67:A1:C6:F2:9B:FA:1D:A5:73:72:36:58:0D:66:41:C6:BC
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:19:98:68:b1:fe:b3:12:3c:e4:dc:ca:59:c1:47:18:8b:31:
94:f9:f6:0e:d6:f6:52:05:7f:65:8a:8a:ec:99:32:68:7c:85:
a3:38:cd:c1:aa:7f:22:cf:da:b7:c7:58:2b:f9:ad:1c:bb:61:
61:70:30:d1:51:e8:90:9c:90:bc:59:6a:3c:10:24:0f:72:5b:
d3:58:38:21:87:3d:a5:0b:f1:44:51:af:4e:c4:55:25:19:b2:
10:c9:0f:8e:b7:b1:0d:4e:d3:87:d5:51:e9:18:6c:21:47:4c:
f3:fd:f3:17:ea:e0:4c:48:b1:eb:43:56:0d:2f:b7:9c:79:ca:
ef:76:cb:fb:35:8f:f9:e1:63:6c:c0:5d:f0:37:27:c1:50:92:
f5:aa:fc:33:43:05:ed:a3:30:ee:b5:fc:51:a4:2e:1a:6b:02:
4c:19:dc:52:3e:05:00:c3:cb:e8:68:12:e1:e9:11:de:2a:7e:
8b:ae:18:81:32:c3:2f:2e:ae:ae:9a:1b:98:5c:76:41:a5:be:
e5:2b:68:59:85:d2:28:ef:e9:14:ad:50:03:04:1f:79:e9:e4:
c8:f7:fc:04:43:0a:fe:3f:ca:e3:58:86:d5:58:4f:9a:fd:30:
44:79:a3:e7:6c:f8:0a:c2:16:c1:d6:de:93:d6:77:b4:fe:a5:
0b:5d:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:59:41 2025 by rpki-client