Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: 0GSmRHUumdk+H/0WhUWZCn55nqecDfo64E4vut95Rlw=
Subject key identifier: E0:96:26:EB:CA:42:C8:6D:D8:89:F6:98:7B:7C:E8:90:EC:4E:F0:72
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 01974A7B6272AA14EB9DF7E99CAC8698D4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 158E
Signing time: Sat 07 Jun 2025 13:01:29 +0000
Manifest this update: Sat 07 Jun 2025 13:01:29 +0000
Manifest next update: Sun 08 Jun 2025 13:01:29 +0000
Files and hashes: 1: D3uFNp_uUSHt1YSi-2IaHiDrRag.roa (hash: s8c53hlFJRAlFwJlOpAFaiZbwpviv1EIugwd2PuQcZA=)
2: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: 0I87Az+EgH+BsqQrJc3XnmV4bNHiXtlISbdCamCLfE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:62:72:aa:14:eb:9d:f7:e9:9c:ac:86:98:d4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jun 7 13:01:29 2025 GMT
Not After : Jun 8 13:01:29 2025 GMT
Subject: CN=e09626ebca42c86dd889f6987b7ce890ec4ef072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:3e:18:2f:53:f7:1a:15:35:d2:1f:d4:fd:
9d:e4:b0:41:6a:4b:70:fc:37:2d:67:b7:77:f4:9c:
f3:f5:1e:ba:06:fa:04:d1:ad:df:ed:f8:5a:b4:8a:
52:9c:0a:c9:41:5f:cf:2e:b2:9c:d8:98:75:27:ec:
1d:4a:41:7f:7d:af:8f:b7:7d:e4:fd:f3:57:6c:c0:
e4:62:92:c3:28:4b:fc:57:81:5a:2f:71:f0:a1:6b:
22:8f:f5:39:b4:35:b8:5a:de:9c:72:17:55:52:e7:
e0:6e:13:d7:44:24:8b:14:54:1d:2e:73:16:92:4c:
2f:40:dc:09:ce:12:f7:54:11:2d:22:93:9e:9c:4d:
47:31:d4:76:ec:fe:b6:ef:70:66:72:42:30:26:88:
d0:26:c9:68:d8:26:a2:49:b3:16:80:41:e1:9b:00:
47:e5:63:f3:19:aa:b5:60:8b:c9:7c:31:4a:6f:f9:
a5:0a:b5:a4:2e:e4:6a:ff:10:ae:27:36:d9:bb:90:
63:ea:01:e0:34:b9:69:ae:fb:f2:57:1e:b2:8b:22:
3b:bb:02:57:02:ab:b8:f6:30:26:6d:f6:f9:ea:d2:
7d:dd:ae:8d:11:f9:80:b4:96:eb:66:d8:e7:dc:38:
76:47:03:df:36:55:3d:28:82:c4:01:34:22:2c:a9:
f4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:96:26:EB:CA:42:C8:6D:D8:89:F6:98:7B:7C:E8:90:EC:4E:F0:72
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:58:a4:09:db:25:4a:fe:db:b1:99:8e:e1:cf:b4:34:6b:72:
53:0b:87:10:a3:d3:b1:48:56:d8:01:56:fc:5f:31:58:63:0d:
a8:8f:35:51:d4:ea:40:4a:c5:6f:cd:fb:fc:90:ae:b1:80:0e:
07:e1:c2:1b:a8:8f:30:8d:50:c2:02:ef:54:6f:2b:6b:af:a2:
10:43:97:6a:48:cf:a0:86:c6:1c:6c:96:a8:36:d2:09:c3:3b:
45:d3:d7:44:8b:71:78:dd:a0:a3:bd:ae:39:a7:3a:93:c8:c4:
3c:fc:eb:a5:88:b2:03:43:ee:b5:85:61:18:31:60:55:18:ec:
65:8f:cd:83:0e:02:55:d0:6d:6a:f6:cc:0d:cf:5a:a8:1d:2a:
76:2d:2b:a1:86:64:1a:1f:78:76:a7:06:9e:89:0b:8c:53:2d:
b6:88:85:04:91:4f:63:63:c5:93:cd:c9:2d:b2:13:0a:ec:7a:
83:17:ab:b0:88:cf:03:9d:3e:06:cf:81:8e:5e:03:c0:ca:0d:
2e:7f:6f:f1:c8:28:77:fe:3e:98:7a:78:c8:ee:f9:05:29:d1:
64:02:3e:92:5c:6d:29:45:21:f8:c9:c2:03:6d:f5:50:72:c8:
4f:c1:92:47:df:8a:64:97:98:01:cc:84:49:7b:24:f0:bd:4a:
5b:89:6c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:02:58 2025 by rpki-client