Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: ZVO9zLaOmFO/ijB/1Ixlsx8zqyV0S6kRa9dXuNvWMC4=
Subject key identifier: 0C:5D:F3:5C:FC:C7:2E:FD:44:23:ED:1E:14:EB:B7:3C:87:DC:4F:FD
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 01974D446E18C538C0C4072D40843C125759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 133D
Signing time: Sun 08 Jun 2025 02:00:19 +0000
Manifest this update: Sun 08 Jun 2025 02:00:19 +0000
Manifest next update: Mon 09 Jun 2025 02:00:19 +0000
Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: Sveit8cHspRfynpLB/7HLnYvXVJMQyUG2KHOQHIx4Dc=)
3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:6e:18:c5:38:c0:c4:07:2d:40:84:3c:12:57:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Jun 8 02:00:19 2025 GMT
Not After : Jun 9 02:00:19 2025 GMT
Subject: CN=0c5df35cfcc72efd4423ed1e14ebb73c87dc4ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:29:56:1e:22:70:8d:d3:c3:a8:4a:1f:6c:cc:
d7:30:c4:14:00:2b:20:8f:c2:a8:f4:8e:44:c0:45:
a3:11:da:a0:b9:73:13:93:8c:7f:a1:e2:e9:07:0e:
10:46:66:3d:ad:f0:8c:86:df:12:06:13:da:c6:6d:
e4:57:d8:b6:ff:3f:51:01:7c:17:5a:ef:72:2d:ae:
a1:ec:33:75:91:68:b5:69:f8:f5:54:4f:03:7a:d8:
6d:18:c0:fd:1f:d8:fa:68:1a:47:b6:50:05:76:98:
25:5a:ed:d8:9a:1b:b7:5e:be:ff:80:af:f2:fa:c2:
b5:e7:86:b7:95:e3:97:0e:73:66:f0:ef:a4:12:25:
7b:36:b5:e6:9e:8f:66:55:97:45:d7:e2:0b:5d:ce:
83:49:c6:55:b2:2e:00:bf:ea:02:d5:46:c1:b2:93:
f0:66:c7:56:6d:4d:54:ad:bf:17:5b:a7:20:4f:03:
af:9a:09:32:fc:4a:20:c9:11:4c:d5:4b:8a:a9:27:
80:ff:c7:13:01:e6:24:91:15:3a:6a:37:50:1f:61:
d7:56:35:48:ef:51:1a:a8:ef:2a:2a:6e:01:6b:7d:
c1:67:ce:0f:9b:1c:36:90:c7:af:39:b2:93:6e:a6:
9b:39:b8:11:81:35:97:a6:26:51:aa:f6:dc:55:7c:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5D:F3:5C:FC:C7:2E:FD:44:23:ED:1E:14:EB:B7:3C:87:DC:4F:FD
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e9:7d:0f:ac:33:2a:5d:47:c0:c5:b7:1d:25:4b:3d:77:43:
12:82:d0:c7:10:8c:aa:df:c3:2f:87:d1:9b:e2:ba:2c:db:5a:
a3:e2:f3:24:a3:86:1e:3c:43:d6:02:6a:9b:7e:5a:a8:07:8d:
e3:5c:66:cc:29:b8:c1:1b:70:5c:d2:a6:bd:27:22:4b:70:2e:
56:a4:c2:3b:2d:55:0f:42:dc:02:04:b7:ba:3c:7e:53:e3:09:
66:4c:8f:6e:61:e9:0c:3e:92:21:a1:a1:62:b6:61:bf:fb:24:
1b:91:7c:34:b6:e0:5c:f4:bf:80:d6:e8:b4:9e:e3:c2:65:e1:
ba:2a:b7:e6:99:3a:c3:96:7d:7f:cb:f8:54:87:40:f7:6e:ad:
ac:d7:24:ff:09:1f:da:a7:ee:76:55:76:a0:c4:6f:ed:65:f8:
73:9a:a8:30:bb:fc:ed:08:2d:a6:0e:0a:d6:49:f3:01:49:0d:
69:65:53:1c:0e:a2:d6:2c:97:d7:07:65:05:96:31:9e:42:5b:
3a:cc:a8:03:9d:1a:59:d4:02:f4:88:9d:9f:de:b0:98:95:1d:
1f:03:e1:d3:33:ce:c7:a9:15:ba:eb:7d:1f:28:30:64:ed:02:
32:51:61:71:68:25:41:da:ed:bc:69:b0:0a:94:2d:48:e7:7a:
92:6b:34:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:55:25 2025 by rpki-client