Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: 6UBzAZSairgJqN3wubBJytI3sqNvscnTBWbq4XvEsIY=
Subject key identifier: A3:27:44:5D:12:3A:09:54:01:8E:FC:8A:FD:37:77:38:BB:2C:F8:EA
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 01974F6A27C844E6AFBE919703314E389D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 1474
Signing time: Sun 08 Jun 2025 12:00:46 +0000
Manifest this update: Sun 08 Jun 2025 12:00:46 +0000
Manifest next update: Mon 09 Jun 2025 12:00:46 +0000
Files and hashes: 1: 8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa (hash: 6ZZJ4QGkpbcq3hIOVhgvm79JeONPbl5ojVu1zQKUgnU=)
2: LiZI8DHKt2cl3ZGAwMQs7hzSWLY.roa (hash: YZv7B4YQ18wMpKvjotc88oKaw7AFVr3K3Ln8F9meSnc=)
3: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: AnWSNRaFibuhf3brKMkvgivmFo38Pa+LgcyK04mksYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:27:c8:44:e6:af:be:91:97:03:31:4e:38:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Jun 8 12:00:46 2025 GMT
Not After : Jun 9 12:00:46 2025 GMT
Subject: CN=a327445d123a0954018efc8afd377738bb2cf8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:dd:28:85:08:91:02:48:55:39:ce:aa:18:
c0:a2:ab:22:4d:7d:2a:96:a9:db:52:21:4a:7f:62:
11:b6:61:30:59:d5:c7:e7:04:01:b0:b5:ff:70:1d:
42:70:f5:d0:e9:ac:ff:b6:29:8a:9f:71:72:9f:4d:
a2:12:66:4e:a1:43:ca:86:10:6a:5e:e9:7b:6b:cf:
52:f7:1b:a3:31:39:cc:fc:a6:48:74:65:2d:52:a0:
22:ba:78:14:d6:5f:71:f3:a9:76:d7:bd:9d:13:f8:
f0:f5:7d:52:18:af:4a:1e:9a:27:1a:06:61:5c:00:
05:91:79:99:1f:54:dc:80:a7:bc:80:65:4d:2d:04:
e9:b1:9b:3e:91:b8:37:99:a6:f8:57:d0:7d:13:59:
16:5f:2d:92:54:fe:27:27:ff:34:ff:6e:26:49:ba:
55:88:d3:c9:2f:06:8b:87:48:2e:ed:8e:d8:c7:e0:
6e:cc:b6:be:40:ed:bc:7b:91:df:bc:6b:50:b9:e6:
3d:e9:05:f1:e5:7e:ad:1e:d1:8f:1f:b9:93:6a:4e:
69:e2:5c:53:fd:3d:ea:41:12:af:80:aa:2c:81:9a:
90:45:b6:6c:f7:d3:87:17:f0:fa:cb:1c:51:fb:e3:
b6:34:e2:06:17:e1:7a:8d:ac:f7:b4:23:5a:4b:d4:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:27:44:5D:12:3A:09:54:01:8E:FC:8A:FD:37:77:38:BB:2C:F8:EA
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:37:07:f6:97:b8:38:6c:56:6a:df:55:03:e3:0a:41:97:71:
f6:cc:66:3f:00:97:f8:7c:4b:45:6f:3c:93:0b:65:c6:f7:95:
5c:a7:41:91:cc:23:f7:c0:ec:c5:b6:a9:e9:67:ae:47:98:be:
3e:5b:db:21:aa:09:56:9d:e4:d3:6a:be:03:0f:d8:f3:23:1c:
8a:a2:64:78:56:53:d9:6b:3d:87:d4:86:61:9c:5d:34:d9:74:
af:ac:df:07:1e:de:2a:7a:d9:77:67:df:3b:ce:cf:4a:df:cf:
3b:cc:ce:7a:80:93:24:86:f5:2e:36:be:d1:0a:a1:71:e1:d1:
5c:59:ba:52:ec:5d:f6:5b:e2:54:35:ff:e5:31:be:91:4f:ee:
bf:07:61:2f:bf:08:ae:7f:c4:6b:0f:25:b6:84:45:86:5e:bc:
5e:a6:db:2f:9a:40:38:50:b1:1c:33:be:cb:8c:7a:77:c8:ff:
b8:e7:af:fa:64:b3:af:d6:f9:67:7f:75:99:3d:ca:c0:39:08:
09:74:9a:17:f3:23:bc:24:84:8a:c6:ac:6e:70:12:f4:05:a9:
a4:46:5e:a9:96:44:00:3d:12:71:f5:8b:2e:9e:69:80:c3:47:
b6:e1:a9:fb:04:ef:8b:ae:a2:e7:0b:38:80:7c:13:25:8b:2a:
93:8a:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:29:59 2025 by rpki-client