Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: jytELZ1X+2uokuCTuyipSLqcYPozSTFeX9D15ygpOAw=
Subject key identifier: CE:3B:B7:23:ED:EB:AC:C0:60:50:FB:A5:68:8E:D3:90:C7:36:F4:18
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019753EB5E732EF1E53E97763BF1347E956E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 096B
Signing time: Mon 09 Jun 2025 09:00:23 +0000
Manifest this update: Mon 09 Jun 2025 09:00:23 +0000
Manifest next update: Tue 10 Jun 2025 09:00:23 +0000
Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: kpBLwTTOQFJxtcTp/PSWODq2BFQJRk7knufKmoTTQNs=)
2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:5e:73:2e:f1:e5:3e:97:76:3b:f1:34:7e:95:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Jun 9 09:00:23 2025 GMT
Not After : Jun 10 09:00:23 2025 GMT
Subject: CN=ce3bb723edebacc06050fba5688ed390c736f418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:03:49:e6:91:cc:a0:6a:af:40:cb:a2:c1:
f1:ff:f7:cc:1e:8d:4f:cf:bd:30:87:3f:c9:16:be:
4d:07:4b:f1:de:32:2a:c9:05:a1:16:85:91:ce:88:
dc:b1:93:e2:2d:be:52:00:0a:07:b4:af:08:56:81:
05:7a:40:1d:b9:a9:bb:fa:2c:d0:12:e3:26:f2:e6:
e2:20:54:cd:cc:e3:bb:89:8e:5f:2a:76:7b:24:d4:
f1:e7:f0:d8:0a:a9:f9:9c:bd:3f:35:ac:47:01:75:
15:4d:bd:f9:2d:4b:8e:e4:0c:90:37:31:84:e4:7b:
90:e0:cb:48:57:df:c7:de:b9:aa:fb:23:35:7e:32:
2a:0f:7d:55:b7:24:90:0f:42:d5:5b:58:1d:1c:8a:
af:b3:2e:7a:5d:54:1e:47:31:29:ed:09:b5:26:00:
29:40:a3:0a:71:41:ff:26:1d:d9:20:74:51:6d:e6:
08:d7:a7:1d:49:d1:bb:64:33:9b:96:50:f3:f3:c3:
23:f2:72:37:bc:fe:29:3b:bf:2b:91:fa:c4:01:52:
c3:4f:bb:5d:95:dc:9a:44:ef:06:ea:fb:1a:35:30:
42:d0:92:99:60:b6:d7:00:e8:36:71:d5:76:38:10:
de:aa:e3:fe:bb:bc:8d:8b:b4:2c:e1:b1:c0:71:cd:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3B:B7:23:ED:EB:AC:C0:60:50:FB:A5:68:8E:D3:90:C7:36:F4:18
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5a:bb:d2:24:76:41:0c:a6:ac:e3:53:c9:ac:e3:c8:9d:62:
2d:27:43:a8:4e:0b:93:4d:13:57:46:7e:bf:40:77:15:1f:9b:
b3:81:e8:a4:72:ae:62:b0:17:b2:48:7d:72:64:89:69:42:71:
bd:58:ee:aa:65:85:af:d9:c4:2b:24:48:b6:59:c3:c5:bc:65:
b2:d8:4c:f4:13:6d:d8:2b:69:06:d1:ca:81:22:12:ed:e0:81:
9b:4b:73:9f:d1:83:a2:0c:b3:92:11:02:59:e1:a7:27:1a:28:
d4:b4:72:4c:f7:7f:e7:d1:2f:d2:30:85:22:c2:9f:84:06:ac:
c1:28:04:2b:19:1f:88:87:ce:fd:a9:fd:78:f0:58:e9:16:81:
87:fd:2f:a6:a7:75:b9:8b:78:74:dd:12:57:6f:d2:ff:ee:ff:
f4:5e:61:e9:32:5a:84:b6:7f:38:a9:f2:78:ad:c8:ca:0e:07:
8b:d8:dd:00:59:6c:03:ae:45:6e:90:ee:56:0a:6a:67:b4:d2:
90:53:bb:09:e2:13:a7:10:5b:26:d2:34:19:52:4d:70:03:10:
9e:4f:d6:3a:3e:27:a1:f0:00:a1:fb:81:f6:62:dd:a9:e8:dc:
37:cc:8e:e5:51:56:f9:38:a8:fb:76:63:c6:f2:c3:28:7d:e0:
ea:ed:e9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:33:13 2025 by rpki-client