Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
File: OXh5r_LENp0GxPEZpv16WhPbhpc.mft (raw, json)
Hash identifier: GqPgW5gQZgfuSBEtQRMzdHiAhJWcVX5nE9ndRP8lUIo=
Subject key identifier: 9B:A2:F6:11:34:D8:EF:0F:88:42:B7:A0:81:9C:F3:B1:B5:13:44:33
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 01975233F75F3D8E67F23ECB0466F1C60400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 01:00:26 +0000
Manifest this update: Mon 09 Jun 2025 01:00:26 +0000
Manifest next update: Tue 10 Jun 2025 01:00:26 +0000
Files and hashes: 1: OXh5r_LENp0GxPEZpv16WhPbhpc.crl (hash: JrbsWklL5+ywiT/eDA/dyPDfGNgE4RG69SBESwoLQgA=)
2: WSWkyM6MFxA1ZA-zAVUSwdgeJWI.roa (hash: 5tkFh2eMBLLpaXb8k6oCA+R1YYUjz+3ZjunAdpKVKWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:33:f7:5f:3d:8e:67:f2:3e:cb:04:66:f1:c6:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: Jun 9 01:00:26 2025 GMT
Not After : Jun 10 01:00:26 2025 GMT
Subject: CN=9ba2f61134d8ef0f8842b7a0819cf3b1b5134433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:b0:45:71:f4:d4:3c:30:48:73:39:ca:22:
f0:22:a1:64:68:0f:d5:aa:19:2d:ae:f6:e2:c3:64:
53:1a:13:e5:da:33:a2:9d:d7:a3:15:22:47:1e:72:
28:25:36:a6:ea:5a:42:e0:dc:34:7e:b4:12:fa:c2:
6a:4b:8f:67:52:20:2f:c3:52:2c:c1:25:65:bf:46:
4a:6d:81:4d:42:5b:89:68:7c:6a:bc:d1:f1:0b:1f:
25:1f:87:de:5b:9c:5e:70:0f:f5:44:3e:4d:38:9a:
d1:a3:67:ee:88:51:8d:4b:96:23:7b:9f:f6:2a:ed:
d7:12:53:e9:f0:9c:e0:e4:f7:da:40:18:7e:75:4c:
cd:6a:ee:9b:55:57:b4:0b:c6:cd:86:02:90:a9:0a:
92:70:26:31:ba:7e:55:2b:23:ac:19:17:77:db:27:
14:bb:f9:d2:d2:74:05:cb:e2:24:9c:1a:bc:38:a9:
a4:ef:97:3b:c8:a0:d7:8e:41:86:15:11:0a:0d:a0:
c4:da:db:df:fd:63:c8:59:dd:a5:31:bd:cb:af:30:
57:d8:b4:83:35:49:79:89:53:b1:15:4f:35:fb:24:
1a:18:3b:12:a9:91:62:cb:94:f7:4a:79:c2:ae:99:
10:45:19:2c:f1:0e:59:be:b5:ab:eb:3f:57:13:dc:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A2:F6:11:34:D8:EF:0F:88:42:B7:A0:81:9C:F3:B1:B5:13:44:33
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8c:c5:73:ae:89:e9:00:2d:fe:f6:51:a6:cd:9d:61:6a:2b:
76:27:a4:a7:f9:ba:4a:74:e8:10:dd:de:70:af:e9:b4:10:66:
d7:8c:02:05:d4:11:3e:c6:39:54:6f:b9:b7:95:36:f7:a0:52:
a3:50:01:8d:d3:e5:be:9a:e3:04:1f:6b:43:ed:d5:e3:5c:fa:
76:1f:68:ba:0c:d7:d8:89:b2:81:79:29:e5:89:2a:0e:0e:e5:
56:ff:a6:32:49:19:52:6d:b5:35:8b:e5:53:e1:c3:da:3b:d5:
3b:d2:61:86:93:cc:39:01:a2:c9:d5:9e:41:74:07:f7:58:d0:
33:e8:7e:20:6f:b3:17:12:db:45:5c:7e:b9:b9:f6:46:91:ff:
18:2c:2d:41:96:80:27:ee:d8:6d:d4:1f:35:14:6e:7b:27:7c:
3a:a4:9c:ba:55:bb:67:74:76:ce:53:8b:3a:6f:b1:26:87:2d:
00:cd:78:9f:9f:14:2c:eb:91:96:9e:f6:2f:0f:ae:1f:13:ae:
29:08:15:b9:22:46:2c:6c:aa:6e:62:68:6c:66:77:64:61:eb:
7d:e9:66:22:34:38:74:be:b6:63:44:ad:70:2b:e8:60:95:78:
49:41:26:85:6e:e0:87:68:c6:c7:f7:f2:4d:22:4a:73:d8:05:
3b:18:33:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:38:15 2025 by rpki-client