Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: 8+V1OsOXvNP4cL4WLQ7cOTBYRw5NBqQMsOZN3k4ExDc=
Subject key identifier: C4:86:CE:F3:8B:A7:63:7C:F6:1E:4A:77:F2:86:64:FD:95:2B:11:2A
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 019746303B6F629CB06BA61ABFBFF35258F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0DA9
Signing time: Fri 06 Jun 2025 17:00:55 +0000
Manifest this update: Fri 06 Jun 2025 17:00:55 +0000
Manifest next update: Sat 07 Jun 2025 17:00:55 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: xvQr3jPAT9RhVGY1zzqkKC5KqwwlXtOvry3F22tueLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:3b:6f:62:9c:b0:6b:a6:1a:bf:bf:f3:52:58:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Jun 6 17:00:55 2025 GMT
Not After : Jun 7 17:00:55 2025 GMT
Subject: CN=c486cef38ba7637cf61e4a77f28664fd952b112a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7d:a1:4b:a2:a8:c5:61:07:99:3e:f8:f8:68:
62:92:a4:32:aa:40:ba:f7:1f:e7:3d:fc:25:54:6b:
53:cf:9a:27:31:1f:b3:70:f1:04:5e:76:4d:b1:b1:
97:ab:03:0c:81:7b:d5:1c:15:c9:a1:4a:f6:9e:4e:
34:3e:c5:8d:72:0d:7b:b3:b2:07:ff:8b:7a:0a:73:
23:e9:e0:c6:e8:b0:f3:b3:c2:91:b0:d3:8d:e0:c0:
3c:47:97:fa:42:af:c5:03:fe:21:c2:7a:77:b0:03:
d3:6e:e2:04:39:b8:43:27:4d:bb:7b:8a:c5:19:af:
5e:ef:e5:97:d6:30:d1:96:eb:6a:9c:b2:38:36:67:
a6:2c:0f:c3:6e:24:47:b5:10:dc:9a:6b:26:b6:4e:
69:4e:ce:28:33:e8:a9:71:63:33:17:50:96:92:db:
3f:20:9c:85:3a:6f:5a:8c:03:02:69:f3:1a:47:4e:
f3:e5:c7:aa:4d:53:f2:18:74:5f:61:78:d0:0a:78:
e2:37:51:b0:18:18:25:ba:bd:9b:c2:71:7e:69:e3:
6f:00:d8:4c:b6:56:f3:8e:0f:65:1a:76:c1:75:01:
16:f2:4a:04:86:4c:73:04:5f:6c:b6:e7:06:81:da:
8f:37:77:8a:04:7c:f1:3f:54:3f:d8:a0:54:e1:8b:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:CE:F3:8B:A7:63:7C:F6:1E:4A:77:F2:86:64:FD:95:2B:11:2A
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:84:49:25:cd:13:01:3b:87:15:2e:c8:ca:a2:14:dd:18:34:
3b:a0:64:fc:25:0c:eb:c2:de:ab:7b:6d:b9:f5:21:c5:a8:bc:
29:22:05:41:0c:2b:57:a9:7e:24:a9:a1:05:de:01:16:ef:a7:
39:5b:fc:9b:70:cd:45:5e:e8:ba:5c:83:d3:ce:72:c0:e9:e8:
cd:40:c2:46:da:33:dc:c0:56:52:7e:6a:17:03:cd:7d:08:18:
8e:6d:4d:ea:b5:0a:a3:30:61:0e:60:2d:3f:56:51:66:34:b2:
e8:e1:26:57:30:6f:36:2a:d1:ec:80:4b:8a:9a:c6:2c:f9:ac:
4d:ce:b1:3c:19:5b:e1:48:57:6b:f8:7e:8c:80:d8:57:db:bc:
13:23:68:04:46:78:93:62:ea:68:e2:5c:be:86:38:0b:14:6f:
23:3f:46:3c:4d:b6:db:2b:50:51:a4:f6:d5:ae:68:de:1b:05:
3a:43:8b:b4:7e:80:1d:d3:a1:94:c3:07:cb:cd:6a:0e:42:b3:
a1:c5:a4:68:50:02:21:08:73:9c:85:d3:fa:17:ee:37:8a:dd:
b3:24:68:64:c8:8a:e7:36:44:ea:a2:d1:28:92:5d:40:fe:4e:
f5:f3:70:83:c3:6b:25:1e:7a:fd:49:ca:6a:c4:fc:50:9d:5f:
4e:44:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:53:44 2025 by rpki-client