Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
File: OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft (raw, json)
Hash identifier: 1+hGt2Jjb4Vh8AMP6bIgmMOpphd7z/Yz+nMGFPsE5D0=
Subject key identifier: 84:BE:68:5D:C5:F0:C9:10:F4:5E:32:41:3F:02:23:9D:0A:4E:A9:97
Authority key identifier: 38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
Certificate issuer: /CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Certificate serial: 0197488C26693C89FDCE3646F8573ACD4F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
Manifest number: 05F3
Signing time: Sat 07 Jun 2025 04:00:33 +0000
Manifest this update: Sat 07 Jun 2025 04:00:33 +0000
Manifest next update: Sun 08 Jun 2025 04:00:33 +0000
Files and hashes: 1: 96NgLEHRtKxUiimE9cBg6xhscpQ.roa (hash: mk1oEXhjeJbAg6bVncPiZm7XaZ/iA+I0QEGuQUH1ZeM=)
2: OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl (hash: 2dvK5/Zy1oYBtFKSYl4t83X0rBsueHnLFTZugmA3SPc=)
3: auApMcvT0ghtABN_47-F8XLxrNw.roa (hash: XofAinsDeuW+LGI1qiG7UWKXoZIw8N+n+gNQOT5w3Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:26:69:3c:89:fd:ce:36:46:f8:57:3a:cd:4f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Validity
Not Before: Jun 7 04:00:33 2025 GMT
Not After : Jun 8 04:00:33 2025 GMT
Subject: CN=84be685dc5f0c910f45e32413f02239d0a4ea997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:52:3c:26:b7:80:64:b4:ba:6c:49:16:c2:
27:b7:18:b6:75:df:1b:db:9b:04:21:b5:2c:be:5f:
4a:c4:5b:70:0c:d2:cd:a3:28:0e:b8:35:6f:87:90:
94:2c:45:f9:5a:5b:39:82:e1:2f:5d:a4:d0:0a:af:
04:c0:2f:de:91:0d:86:4e:6e:f5:f2:53:e6:41:3e:
a2:91:9a:6e:cf:c5:10:63:13:1a:6e:86:32:4d:5f:
de:4d:65:ba:5f:f9:4f:90:44:71:bf:bc:a7:e0:6d:
e5:0a:ee:d5:ba:f4:81:53:fb:bb:2c:20:b1:e0:10:
a2:d9:f2:ab:29:b0:d5:75:2d:08:8e:98:cf:8b:91:
b0:4a:9a:67:8c:ce:14:25:61:d9:4e:fc:ea:7e:04:
3b:8e:7d:02:e2:80:ed:1a:7d:50:ed:6a:4c:82:9b:
1c:c0:af:88:0b:84:81:9d:8c:4b:0c:6b:e0:d4:d7:
15:c0:f4:9b:9b:b3:5e:2e:08:07:25:de:0d:89:79:
8a:12:36:48:3c:02:be:e9:89:98:88:14:19:46:7e:
7b:b7:65:5f:55:50:c0:e5:f3:0a:ed:67:e9:8d:b6:
06:0f:26:ef:18:3f:4c:15:a3:d9:b9:19:43:6c:63:
82:7e:48:b8:e9:29:cd:12:bd:11:68:2c:3c:26:f0:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:68:5D:C5:F0:C9:10:F4:5E:32:41:3F:02:23:9D:0A:4E:A9:97
X509v3 Authority Key Identifier:
keyid:38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2d:48:28:a9:a3:f2:8a:44:bd:13:bc:37:f3:93:33:b8:a7:
71:e1:0e:72:66:57:df:0f:23:17:02:e4:47:c3:d2:f7:fb:1d:
dc:77:5b:06:37:7c:07:67:ba:a6:f8:56:d1:69:2e:03:92:e1:
9b:fd:f1:f3:25:eb:ed:c9:06:bf:07:14:2f:14:19:89:e4:48:
95:24:97:73:5c:a1:eb:b3:c1:2b:a4:24:4a:de:02:16:ea:fc:
2b:3c:21:85:15:3b:0b:91:48:ea:19:2e:da:40:6f:8d:9c:9a:
83:96:fa:2f:cc:6a:e2:73:68:5a:05:62:82:0c:e7:a8:10:51:
e3:03:71:5a:c9:57:fb:be:30:63:c3:57:7d:d7:7a:ae:9f:d7:
a2:50:cb:fd:57:98:81:19:4c:f0:bc:4a:b4:a0:b4:20:83:2a:
de:10:d3:64:0c:71:e4:fb:82:0f:e3:da:d7:ac:e2:18:1a:33:
7c:ad:14:00:b3:e5:90:01:22:3b:7c:b4:a4:14:b3:0a:4f:61:
5f:45:c2:f3:23:d3:3a:ee:d0:09:6d:25:2b:d5:7b:82:91:a5:
3e:c0:84:d0:c6:a5:d1:af:65:1c:39:e2:24:b8:98:7c:c6:9d:
0f:10:b3:34:95:29:ed:81:3e:58:fc:68:22:ae:3e:0e:3d:28:
70:7a:f0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:54 2025 by rpki-client