Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
File: oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft (raw, json)
Hash identifier: D7bpLGYIrpob8FS+kHPHNlCi/ERuFOC78VAAc0N/ak0=
Subject key identifier: 0C:DB:E7:57:80:E4:4A:94:3F:33:AE:30:12:CE:9E:6F:A5:C9:68:09
Authority key identifier: A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
Certificate issuer: /CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Certificate serial: 01974E8E5075E96ACC5DBBCB897F2F282864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 08:00:38 +0000
Manifest this update: Sun 08 Jun 2025 08:00:38 +0000
Manifest next update: Mon 09 Jun 2025 08:00:38 +0000
Files and hashes: 1: oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl (hash: PCYLoyhGpCD5AacYgxnEbQvmvmRNBR7coBQ/1J4QFMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:50:75:e9:6a:cc:5d:bb:cb:89:7f:2f:28:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Validity
Not Before: Jun 8 08:00:38 2025 GMT
Not After : Jun 9 08:00:38 2025 GMT
Subject: CN=0cdbe75780e44a943f33ae3012ce9e6fa5c96809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:f8:6a:25:5a:61:95:54:13:03:f6:dc:a9:
31:30:fd:0a:b0:a7:5e:27:98:f5:74:10:3c:c7:0f:
f1:3a:2e:2a:ae:1f:0a:52:ad:c4:8d:17:a6:3f:9f:
82:42:e9:e4:6c:57:f4:fd:2e:16:da:8c:66:ff:0f:
29:ad:36:7e:ec:47:d4:2e:b0:24:d2:de:09:43:7e:
1e:4f:6c:8f:ef:02:53:aa:c1:29:2f:97:e2:a1:7f:
b5:89:15:58:8f:d6:63:5e:1b:08:46:b4:ed:dd:d7:
97:b4:5b:8c:33:ce:93:cd:1f:9a:e2:5c:98:03:c9:
e4:e1:4c:03:ef:cc:61:ce:a6:c5:b8:21:47:5c:01:
6c:96:62:0e:63:8e:a5:40:0e:60:f1:24:91:85:21:
2e:77:c1:ef:ba:ca:b5:ee:97:d6:95:a3:e7:30:1b:
41:90:62:62:0f:f1:a7:48:82:20:8c:4c:73:ab:48:
b7:e8:bb:0a:94:18:72:5c:66:81:16:d8:4d:6c:3b:
a9:20:37:59:0c:3e:0d:36:85:eb:37:f8:48:35:29:
22:b2:d6:7b:68:89:e9:70:8e:14:f0:5c:df:d5:4b:
89:20:7c:7a:17:a4:dc:94:45:6c:16:9d:91:ae:a8:
ab:70:b0:c5:ce:b6:89:4c:d1:27:99:da:b4:ee:e8:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DB:E7:57:80:E4:4A:94:3F:33:AE:30:12:CE:9E:6F:A5:C9:68:09
X509v3 Authority Key Identifier:
keyid:A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ce:02:b6:c2:f8:08:70:b5:f6:35:e8:4d:c4:e6:fc:15:0e:
87:bd:38:bc:fe:1b:44:4b:bf:9e:50:65:c2:6d:b8:6b:6f:81:
4e:ee:33:33:ed:4f:6a:e8:b9:8f:f6:59:d6:99:a9:7c:ab:bc:
2a:42:5c:73:ab:c4:7c:a5:a6:e8:fe:4f:59:c2:24:c6:3c:28:
6f:f3:2d:f0:18:ea:33:e1:b3:40:64:03:63:b4:2c:d2:f9:b4:
29:0c:68:1b:0c:98:49:6d:b0:28:3e:8b:b9:fa:26:d4:54:8d:
94:20:e9:41:2f:ea:7a:44:35:ed:7e:b0:c6:b9:5f:c1:1c:ba:
78:af:48:41:97:41:3e:2a:ec:4b:6a:37:39:2c:70:bf:df:69:
e0:9e:70:96:f7:e3:96:bb:b2:be:87:f7:35:56:33:b3:20:8e:
45:99:43:53:76:ef:93:9f:e6:9a:32:ee:d0:f2:27:d1:81:19:
ef:da:a5:93:0e:05:54:5f:30:45:1c:e8:86:ef:35:10:03:2a:
8c:49:60:67:42:14:40:5a:ab:33:f3:e3:07:f3:77:2b:db:ee:
04:23:44:13:b3:00:36:34:9d:81:d6:4e:2e:68:7b:ab:21:a6:
64:35:a3:39:17:e9:30:1f:00:2d:64:a9:2f:64:00:47:04:df:
07:ed:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:42:28 2025 by rpki-client