Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: i5uMI1jmx1i+97aT6FZmHwGx5drq2loKGpZEPpdVezs=
Subject key identifier: 0D:AD:F3:86:E4:3C:86:7B:2D:2B:1B:64:3A:F6:B4:26:0C:18:84:FD
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 019750B3BE1E10DAC4AB0CA5FA8F926AC60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 18:00:46 +0000
Manifest this update: Sun 08 Jun 2025 18:00:46 +0000
Manifest next update: Mon 09 Jun 2025 18:00:46 +0000
Files and hashes: 1: Jxs0meMKDCLBz_dVByd3J3wLTdc.roa (hash: ZCvr3TtSBPIKAQupwsVmwJ8f7SSejV5g4WH6kmkpM1s=)
2: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: ZOjwddS+Vtg6v6rnbn9P3Wl/ru+KNPRiW9gb0ByWni0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:be:1e:10:da:c4:ab:0c:a5:fa:8f:92:6a:c6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Jun 8 18:00:46 2025 GMT
Not After : Jun 9 18:00:46 2025 GMT
Subject: CN=0dadf386e43c867b2d2b1b643af6b4260c1884fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:c3:38:fe:cd:09:bb:67:ae:a4:01:b9:fe:
23:29:c6:57:2e:6f:ef:b5:71:69:20:9c:ad:87:8a:
91:14:6b:5c:91:d5:f6:cd:31:b8:d7:71:c4:cf:a1:
32:90:53:8a:4b:e9:b1:77:e3:e7:a5:d8:65:08:f8:
b4:33:41:67:17:2c:b6:66:59:ee:1b:58:0c:06:5e:
07:af:02:b4:1f:bf:41:a5:b3:3c:46:2d:b1:f8:8a:
ff:c2:14:78:13:42:95:1d:52:cd:34:d9:db:e1:71:
c6:5c:e0:ac:f2:ec:4a:13:d2:99:1c:ae:e8:15:1b:
94:82:fb:69:5c:27:0a:0f:0a:56:28:d4:fa:4e:4e:
07:71:87:5d:9c:0e:b5:17:6f:74:92:e1:be:a6:19:
04:92:bd:69:10:83:60:1a:35:2d:b8:5c:f2:57:d0:
27:c8:3d:51:e0:71:8e:ae:25:52:75:a2:28:a9:ac:
c6:eb:cc:f2:00:50:3b:b1:58:05:ad:ef:c5:73:b6:
42:32:b9:8f:c2:57:0a:17:08:5a:a0:5d:ea:f0:d2:
4d:d2:e0:15:a2:97:d0:5a:1d:4b:fe:8f:be:3b:8d:
31:c8:d1:f9:0c:e1:65:19:b3:c6:72:da:b1:fc:b8:
e8:d0:2c:0e:e7:97:53:52:e8:1f:50:66:43:69:a5:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AD:F3:86:E4:3C:86:7B:2D:2B:1B:64:3A:F6:B4:26:0C:18:84:FD
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ce:64:2a:4b:ca:6a:c1:da:10:a0:e5:48:62:1e:1b:b0:7d:
17:1f:83:4a:97:00:7b:5d:15:cb:e4:ca:fa:c0:8f:7d:38:93:
1a:60:3c:2b:63:0a:ff:09:7e:63:82:9f:0c:fe:64:f8:ff:c2:
79:ee:5f:58:97:a9:bd:bb:f7:fb:f1:1d:b7:a2:0f:df:6d:7a:
ac:8e:34:72:8a:98:3a:8b:77:7b:62:03:5d:32:50:9c:e2:3a:
62:89:1b:ed:ea:7e:de:a3:44:82:a3:1e:71:9b:91:8e:ae:6c:
ff:25:e2:d7:ad:69:97:06:31:7d:69:77:c9:eb:1e:8d:fa:84:
8d:eb:df:5c:b9:b0:0d:03:c4:3e:62:06:22:27:1c:6c:75:74:
b1:00:69:d3:29:87:e8:a4:09:75:22:d7:c1:da:ad:03:34:ae:
7c:e9:5b:84:c1:10:43:a3:4b:ed:1a:b4:12:b5:bf:c7:48:83:
27:71:83:62:67:9d:61:8b:ad:40:6f:b6:23:1e:25:a1:9d:b9:
2f:81:05:e6:f2:51:5a:39:69:eb:96:17:fb:de:e4:ce:8e:6b:
4a:c5:c7:db:53:b9:c4:0a:43:1d:48:9c:fc:80:f2:5f:f0:65:
d6:36:bc:b4:66:ee:e6:49:a5:61:f9:5c:90:97:5c:e4:25:b3:
8f:04:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:42:32 2025 by rpki-client