Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: 0sGRVDnYq501qWkVLmbQpOCQwR29nJatCwrAWB9YAZs=
Subject key identifier: 5A:16:56:01:3D:07:8E:98:E0:BF:5B:03:47:57:3D:C6:8D:E5:9D:12
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 01976BBCD7E96FECF0B55E4302D7E4742C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 11B5
Signing time: Sat 14 Jun 2025 00:00:27 +0000
Manifest this update: Sat 14 Jun 2025 00:00:27 +0000
Manifest next update: Sun 15 Jun 2025 00:00:27 +0000
Files and hashes: 1: O1jkn25qs1-TFBQOkUuo7PUo1bk.roa (hash: G22nJhAbgQNfU91NNPvYIMRUfjCUOYeEUbZcxQsmP2o=)
2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: fqxx3KKGdI+7tCJkdveyjWQh6/nE5KXDNmwW4mbYk0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 18:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:d7:e9:6f:ec:f0:b5:5e:43:02:d7:e4:74:2c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Jun 14 00:00:27 2025 GMT
Not After : Jun 15 00:00:27 2025 GMT
Subject: CN=5a1656013d078e98e0bf5b0347573dc68de59d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:9d:9e:d9:a7:5a:d6:b1:72:99:b9:0d:1f:
99:e8:b7:a4:58:eb:61:70:e0:c0:b2:67:ec:16:8a:
c5:e9:12:24:db:e1:22:63:93:03:f5:90:b2:e4:dd:
d3:af:ec:26:82:84:59:44:18:50:26:3f:bd:33:f7:
b0:86:92:56:e2:32:b9:29:70:0e:8c:f0:be:f1:e0:
e6:31:9a:6d:23:12:0c:2b:be:12:ae:d1:67:09:73:
b7:41:04:67:26:12:5a:90:fb:28:13:de:a6:6d:a4:
ae:51:e9:39:23:27:db:9a:69:ea:60:2e:9c:a1:79:
d0:a7:9e:8a:24:c5:7f:31:f8:0f:f7:f3:e0:35:21:
a3:da:ba:c5:82:ae:3c:5c:b2:09:ce:4f:61:6e:fe:
d0:78:82:76:7e:65:20:06:e7:24:05:10:e9:d0:69:
8a:82:28:26:8b:1e:34:66:17:fd:f3:3f:2f:02:f5:
aa:76:60:30:cb:71:ed:0a:f5:55:59:9b:03:4c:ae:
3d:36:ce:98:bf:b9:e1:cb:63:01:38:67:ae:09:39:
08:dd:9c:38:ae:03:ab:e4:2b:02:9a:0d:f1:6a:a2:
30:77:98:c4:4a:fa:5a:2e:36:2c:80:df:be:fe:6f:
e9:c5:3b:54:13:cc:f5:59:ae:c6:58:b7:cc:e8:97:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:56:01:3D:07:8E:98:E0:BF:5B:03:47:57:3D:C6:8D:E5:9D:12
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:27:c7:f5:84:c1:5b:63:70:ab:84:9b:ba:32:5c:b3:3f:12:
3d:1b:dc:94:51:a4:55:fe:cd:f4:90:ab:cd:54:31:40:42:24:
42:00:b4:70:3d:14:42:d1:a3:49:db:c4:c7:6a:b3:d2:f8:ad:
19:c1:5c:41:b1:16:0e:0f:08:7d:c8:d9:0c:dc:46:da:a3:bf:
86:24:2b:47:6c:88:c3:a8:70:55:ad:16:67:f9:d6:32:3e:b9:
45:5c:d9:53:58:d1:0b:7a:8c:d9:cc:d9:ec:64:70:db:08:4d:
09:47:6b:4a:ea:6c:6d:f8:c7:af:26:58:13:56:43:cd:bb:8c:
5b:7f:19:ad:44:9b:7e:27:4b:52:c4:4c:0b:6a:42:93:28:30:
c4:bc:b9:98:b3:59:97:98:da:1a:af:08:07:b9:ae:34:40:f6:
da:af:c5:11:54:65:39:e5:b4:d2:8c:51:78:25:4e:48:16:74:
d1:2b:70:35:7c:62:71:35:79:bf:a6:67:b6:7d:03:2c:f7:da:
b9:3c:10:81:b4:19:00:9c:9e:88:51:c6:d4:e1:7d:02:51:96:
eb:e7:99:fd:b4:4c:0b:40:5c:a2:1d:56:b1:41:c1:9a:07:37:
17:71:62:17:8a:52:0a:48:1d:8b:38:d4:d6:a3:83:25:f0:03:
43:2c:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:54:09 2025 by rpki-client