Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: 16leD1tpqEj92hVgypc1T73kiwgu4x7Y/8anawHuMAY=
Subject key identifier: AD:16:41:5F:59:EF:4A:2E:8D:F2:8E:D8:61:EE:77:D3:4C:2B:81:B4
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 01974B1F6DCB4E6FEFEE4939218350E4285B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 1480
Signing time: Sat 07 Jun 2025 16:00:40 +0000
Manifest this update: Sat 07 Jun 2025 16:00:40 +0000
Manifest next update: Sun 08 Jun 2025 16:00:40 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: YVJCBRwM/oVmqp3XiZggqMFIYi0qskjI4h4wTEBz5/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:6d:cb:4e:6f:ef:ee:49:39:21:83:50:e4:28:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Jun 7 16:00:40 2025 GMT
Not After : Jun 8 16:00:40 2025 GMT
Subject: CN=ad16415f59ef4a2e8df28ed861ee77d34c2b81b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:88:76:f5:1f:d7:48:fd:92:23:1c:d7:b0:
91:c3:0a:77:a0:26:80:e9:c2:96:cf:c6:46:77:3a:
f8:78:5b:50:9a:72:48:39:da:76:02:7e:39:76:7b:
84:95:e6:4d:a9:69:bd:75:2b:92:87:86:73:11:a5:
53:ed:4c:a5:98:38:ae:8c:7c:9b:74:65:84:4f:e4:
2a:43:df:8c:fa:9c:f9:b4:49:6e:55:d0:95:93:ae:
3b:e8:57:41:14:f5:11:02:de:e9:2e:4f:7c:81:7b:
aa:cf:d6:0b:85:b3:8e:da:7a:59:42:68:80:45:d7:
84:db:ad:bf:2b:f8:e9:4c:e9:a6:9f:15:9d:c8:ee:
73:4c:68:e0:83:42:71:a2:53:2f:a9:9e:51:ae:a5:
1a:ab:a0:b0:6d:21:11:72:2d:90:db:95:37:f4:93:
f0:5b:0e:e6:4e:72:b3:f6:02:ea:44:31:fb:d8:23:
25:32:ce:6c:4e:76:6e:55:83:cc:0c:94:67:ea:4e:
d2:7e:cd:e7:08:5b:0f:0c:8b:cf:69:49:c6:db:c5:
3f:09:dc:4c:96:34:d8:94:ed:e6:69:e3:e0:d0:c2:
fb:29:88:67:ef:90:e4:30:f2:35:04:83:95:a2:e7:
1a:78:5b:df:b5:97:c6:f4:09:3f:c3:83:b2:22:90:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:16:41:5F:59:EF:4A:2E:8D:F2:8E:D8:61:EE:77:D3:4C:2B:81:B4
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0f:3e:c4:0f:ce:74:42:80:49:94:81:c0:d4:b9:95:a2:34:
72:df:53:08:5e:ea:b0:1a:7f:77:b8:5c:ef:b9:1f:aa:81:d6:
71:5b:4e:7b:e5:5a:b2:23:36:d0:a7:7a:a2:7f:e6:59:30:cc:
ef:e6:fb:3c:85:b4:a2:8c:05:54:3b:6b:b6:08:c5:f1:26:a0:
e1:81:84:15:70:8a:aa:e4:81:bd:d4:47:0f:7e:8b:e7:dd:f4:
9d:0d:e5:68:9d:57:a3:73:47:af:5c:a4:11:43:38:1d:32:49:
6c:7d:09:f9:9a:64:5a:a4:23:f6:c1:b7:f8:72:3c:88:82:97:
74:90:a0:66:18:8a:60:e5:ee:d0:47:d9:6f:e6:ab:8f:25:57:
27:97:eb:9a:f5:97:62:54:6c:58:fa:dc:7a:cd:e4:cd:e3:c6:
8c:b6:d7:2b:9d:c4:98:bb:e2:28:61:52:d6:ae:83:39:d1:56:
3d:9b:d9:49:31:06:eb:18:6e:f3:c8:09:ff:f8:d0:7e:da:8c:
69:de:0f:aa:9d:17:06:39:a5:86:6b:09:f3:64:53:a7:66:11:
05:80:9d:3e:f8:1c:a2:14:be:dc:b6:ac:27:04:04:92:8b:a4:
99:70:42:58:3a:1b:a3:d8:e5:fe:78:c5:58:fe:e8:15:03:2d:
c7:b9:78:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:15:33 2025 by rpki-client