Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: hEkdMoZgc+gsTGNoqf4gynKmjMLQD5GZptaonRgq6qE=
Subject key identifier: 0E:51:06:59:AF:57:76:6A:38:D8:7C:B1:B2:33:22:D3:79:28:A1:C1
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 019748C3121E667AB1F96DBD21D15611FEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 05:00:32 +0000
Manifest this update: Sat 07 Jun 2025 05:00:32 +0000
Manifest next update: Sun 08 Jun 2025 05:00:32 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: QST5xOPK76CZHkjonzldBibvl4/YxeB7v7Yfq/x/M2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:12:1e:66:7a:b1:f9:6d:bd:21:d1:56:11:fe:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Jun 7 05:00:32 2025 GMT
Not After : Jun 8 05:00:32 2025 GMT
Subject: CN=0e510659af57766a38d87cb1b23322d37928a1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:15:bc:b2:c0:c6:03:80:28:60:03:f7:bb:
ef:60:ae:8b:2e:6e:f7:3a:9f:39:bd:55:94:df:37:
ce:ff:ea:d2:19:81:6f:99:4d:9c:94:03:5d:cd:f5:
ee:1e:83:91:fd:3f:d0:a0:51:e1:e2:74:dd:d9:63:
0b:33:1e:c5:ae:1d:33:05:33:1f:62:35:c9:20:5b:
d2:77:ca:8d:10:b2:64:e4:83:69:c9:8b:5b:36:3c:
83:c0:c5:d1:62:17:bb:7f:89:21:fd:fb:da:44:c0:
90:e9:c4:c0:aa:bb:1c:f0:2f:e3:94:c1:5e:86:ca:
6e:de:39:f6:59:25:11:1f:15:4d:34:bc:c5:9f:c7:
59:e7:05:5b:e9:88:d5:ec:d7:ca:5c:b0:42:5e:8c:
ba:dd:3e:8b:e5:d6:bb:fa:98:92:ff:b7:f2:c9:88:
54:c5:13:4f:fa:93:ce:ef:fc:7f:67:08:a5:ba:e2:
86:f6:12:68:a9:47:29:df:96:0a:ec:90:db:c0:0a:
73:0a:ae:cf:94:84:0e:50:f3:3d:00:b1:d7:76:80:
77:59:52:9e:62:b7:f0:aa:a3:ba:9e:dc:21:a9:4d:
88:a3:31:f7:48:46:53:90:7f:08:80:34:6b:53:03:
e6:61:3e:a2:64:eb:b5:c4:b4:c3:cc:0e:09:3b:99:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:51:06:59:AF:57:76:6A:38:D8:7C:B1:B2:33:22:D3:79:28:A1:C1
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c0:66:92:0d:c3:c2:01:c4:b6:d6:e0:e0:c9:95:ad:1a:fd:
3a:37:7c:bf:98:c9:6f:d9:96:22:8c:09:af:2d:79:73:32:cf:
af:97:a9:98:51:99:4d:27:f7:29:46:cc:90:e1:f2:96:35:6f:
e4:25:b4:a9:1e:c4:fb:a7:bc:4f:de:b2:3f:ee:f9:75:70:f3:
3d:d1:f1:3c:64:44:4b:cf:3f:c2:bf:a3:4c:5e:c9:69:31:62:
c9:2c:1f:8d:51:35:86:6f:5c:f1:07:22:06:2b:a9:e3:6d:bf:
03:5d:77:e7:19:84:23:99:f6:df:9d:b4:1b:6b:8d:9a:56:0e:
89:a1:13:90:00:6a:e4:3b:f0:39:4e:de:87:b6:ff:7e:0a:e9:
e0:a5:76:d9:40:25:82:bb:d6:a0:82:31:fa:fa:ea:9c:06:1c:
a0:4c:55:f5:82:74:33:81:47:ad:42:6f:92:94:e1:66:28:02:
38:36:57:19:cd:a1:c2:76:60:1a:74:aa:00:07:96:63:67:fa:
93:f6:91:46:ca:c2:c6:06:25:d6:29:a3:76:88:67:64:ff:45:
6f:82:0f:51:3b:55:de:3f:77:33:8b:58:1d:f5:e2:c5:ad:96:
2d:fa:7f:8b:31:f7:9a:83:90:47:54:bd:eb:e5:94:1a:4e:77:
4d:7c:3f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:42 2025 by rpki-client