Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: Sx8/Y+6LbW+z5EcGxv5Yj6utfnycLeT0rwWv8+zsw5U=
Subject key identifier: D3:F9:8B:C4:CB:32:92:76:60:E9:BA:DA:BE:44:47:F0:90:63:AF:24
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019769CEC10D90BBD491B31191E70D27CAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0C3C
Signing time: Fri 13 Jun 2025 15:00:46 +0000
Manifest this update: Fri 13 Jun 2025 15:00:46 +0000
Manifest next update: Sat 14 Jun 2025 15:00:46 +0000
Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: ak/FBiNptNaS9mZ8+kdQYGQRepUcgIyB206cpnfhqQU=)
3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:c1:0d:90:bb:d4:91:b3:11:91:e7:0d:27:ca:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Jun 13 15:00:46 2025 GMT
Not After : Jun 14 15:00:46 2025 GMT
Subject: CN=d3f98bc4cb32927660e9badabe4447f09063af24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:26:b6:7e:df:39:a3:54:94:fb:bf:92:51:bf:
86:ea:1a:4d:a3:a3:e3:e8:c7:1a:79:91:2a:35:ee:
46:88:a4:17:db:4c:5a:b1:ea:e1:65:a9:74:0b:2b:
f4:c0:44:50:b5:9e:cf:b1:62:21:83:e3:e9:fc:b5:
f3:31:03:07:67:fe:8f:67:8e:55:5a:b2:36:bb:fa:
c0:8a:0e:39:45:b4:70:4e:64:2d:f1:38:87:c8:a8:
a9:05:4d:03:b4:ba:ec:15:a6:ef:08:12:f3:ee:c8:
82:24:1a:3b:a2:9c:21:40:f3:d7:8e:41:37:dc:79:
ad:e3:5e:15:69:22:44:db:bb:ad:52:68:cd:bf:d9:
b6:4d:9f:0b:a4:d2:35:43:f6:b9:45:e8:a1:ff:d2:
51:fa:09:1c:49:ec:45:ca:50:37:b6:df:27:2b:c6:
79:6d:b6:55:5b:c4:d6:29:80:a3:51:31:5d:ea:94:
97:4d:d3:ed:8b:d4:76:a9:3e:fd:3e:f8:45:0d:37:
84:5c:a2:08:05:f2:de:49:ee:65:0b:b5:05:6c:4c:
56:20:50:9a:fe:49:2b:9d:22:b0:8a:df:45:a3:b0:
95:76:ab:6f:58:ad:63:ab:6a:da:b1:6f:14:9e:52:
4a:36:2e:3f:d3:90:6c:01:89:e5:9a:96:4b:cd:6e:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:8B:C4:CB:32:92:76:60:E9:BA:DA:BE:44:47:F0:90:63:AF:24
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c9:0d:9a:94:38:25:ed:e4:90:28:7e:8a:cf:af:07:db:ac:
4b:b8:44:6c:b9:6e:ae:2e:50:73:f8:1e:9f:4c:16:be:e7:2d:
c5:97:48:77:39:e5:ee:97:6a:4e:13:09:b7:35:20:fc:34:cb:
16:b5:75:24:24:08:cb:58:57:84:91:c8:da:c8:16:7f:f4:e5:
20:f5:5e:52:6d:af:38:41:cb:6a:82:a7:7f:93:0a:90:c9:03:
68:24:39:91:95:2a:08:42:bd:63:7b:88:a9:d5:f5:05:01:33:
2f:28:28:ae:ac:62:49:7b:12:28:f4:e7:9b:70:2a:14:aa:ef:
90:4a:78:db:d6:9a:ea:3c:7f:3f:cb:49:8a:74:69:5d:7d:4b:
e4:2c:a5:be:8a:01:c0:84:79:67:4d:fb:94:cd:64:e7:2d:be:
27:9d:60:a7:82:bf:bc:30:f1:7d:20:f7:01:a3:b9:c3:8c:fc:
f1:fd:45:b0:d5:8f:57:01:1a:c2:99:b4:e5:de:1d:1d:06:dd:
0e:00:e5:c4:1d:1e:a8:0e:99:9d:f7:22:bb:6a:a5:bc:87:2a:
45:dc:60:43:e1:32:81:48:5a:10:09:90:9f:e7:4c:9c:a7:12:
37:c8:d9:ec:f5:56:71:81:82:14:64:92:b1:39:cd:4a:a6:17:
8e:dd:41:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:21:40 2025 by rpki-client