Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: 6pkXDnXj7Kf5X9yDhk5NXq73pX+cdxnbP8aKeXkiHQw=
Subject key identifier: F3:E3:7B:00:3E:75:E7:B7:60:BB:45:F4:98:8A:55:1A:44:64:E3:1B
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 01974666C8424021FFCB7A71BF1478F5C1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 150D
Signing time: Fri 06 Jun 2025 18:00:30 +0000
Manifest this update: Fri 06 Jun 2025 18:00:30 +0000
Manifest next update: Sat 07 Jun 2025 18:00:30 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: fQFA1yVnUsIBCti854N0xKD4r3hJYlUJKwlaUYosDmM=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:c8:42:40:21:ff:cb:7a:71:bf:14:78:f5:c1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Jun 6 18:00:30 2025 GMT
Not After : Jun 7 18:00:30 2025 GMT
Subject: CN=f3e37b003e75e7b760bb45f4988a551a4464e31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:72:92:ac:3f:fe:f6:9f:7b:a8:88:5b:0b:
31:a6:72:92:06:07:86:dd:d4:99:83:0b:f1:30:f0:
ed:c0:9f:2c:bc:3e:cd:0e:21:1b:27:2a:f6:2b:41:
4d:5b:bb:e4:b9:ed:f1:07:f7:ad:f7:d3:f2:b7:42:
14:8a:2b:d2:ca:55:1a:9a:ba:4e:9d:07:06:af:5d:
8d:bf:63:df:40:7e:1e:1b:2e:d6:da:06:b9:3e:1b:
25:6a:ae:d4:95:10:a5:c8:ce:30:68:db:0b:a2:09:
a3:dc:e2:09:f7:63:18:ba:c0:1e:76:d7:6a:d8:11:
df:59:29:05:94:22:11:4e:cf:9e:26:a9:4b:91:26:
77:34:38:a5:23:a3:27:13:0b:5d:44:90:99:0c:99:
a5:7f:c0:79:6e:aa:a7:c5:8c:c6:a2:f8:61:e5:12:
94:f8:6f:fa:b9:cc:d3:42:5a:fc:f1:a1:8e:50:16:
22:3d:af:c6:09:75:cc:39:af:23:ff:f4:fa:38:ad:
a7:9b:1a:13:68:18:a7:d5:36:ac:69:ea:73:32:2e:
12:9c:12:86:ee:5a:f9:25:98:e2:03:7d:32:71:1d:
d1:58:9d:e6:1c:53:02:64:9e:97:ad:2d:5b:6e:d8:
da:9e:7d:74:fc:31:8c:de:2c:4c:65:23:7f:4f:68:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:7B:00:3E:75:E7:B7:60:BB:45:F4:98:8A:55:1A:44:64:E3:1B
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d1:d2:13:fe:01:ae:7c:cb:88:0d:3d:29:15:7a:9d:ac:76:
81:b3:e8:5a:b9:4d:71:d2:9a:cc:a3:39:bc:53:0d:c0:b7:0f:
00:25:33:58:57:d9:5e:1c:1d:7a:1e:43:97:05:85:82:db:b3:
96:7a:82:bf:e2:7c:18:de:30:a9:aa:fb:87:e9:7d:5e:e1:49:
a0:8e:4f:ba:63:62:53:1f:e7:3d:65:df:9f:a9:38:77:9a:78:
24:96:06:99:27:32:de:f6:fb:6d:d8:c6:cf:02:44:ce:b5:ac:
6e:69:9a:36:66:7a:68:19:85:81:8c:04:a3:b5:75:ec:51:7e:
a3:ea:79:0a:c5:81:74:1c:fc:6d:3e:be:f8:92:4b:b0:6b:59:
1e:87:72:2c:23:5d:53:97:3b:e8:a4:2b:68:0f:ec:49:e5:7e:
04:9c:c7:b1:d9:b3:38:12:fb:f1:fb:aa:0b:87:1b:b7:e1:c5:
59:0b:d8:22:c9:5a:ab:77:9d:71:8e:61:33:a1:4a:74:f5:35:
52:c5:c7:06:f7:1f:1b:bc:4e:07:2c:53:66:09:30:6d:01:f6:
ca:b3:79:64:34:6e:7f:1d:f7:c4:71:e3:d6:7e:9d:e7:ee:00:
e5:fc:15:dd:be:a7:fa:e8:b3:be:d8:e3:ff:d7:e3:b7:01:0d:
21:b9:fe:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:21:41 2025 by rpki-client