Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: r8fYf7Tov5IjqJB02pFTmCNb32YwrEyHmh+OreuD0P0=
Subject key identifier: 34:2D:2C:5C:83:5B:A8:D2:DC:81:05:86:ED:50:42:12:94:86:29:76
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 019746D4E031ADC5C80384DA7F48913670A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 0D64
Signing time: Fri 06 Jun 2025 20:00:45 +0000
Manifest this update: Fri 06 Jun 2025 20:00:45 +0000
Manifest next update: Sat 07 Jun 2025 20:00:45 +0000
Files and hashes: 1: LVniV-fBUsD2XHyiKXh59lNaKck.roa (hash: e7ROoJyN3pM39RDR+x9hRmjX8OTAnl8OOTQ8mCyFwtU=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: UT/gfZN1EVX/XsGrZ9Jm/8E3xfvk6+fKYoGIXScYcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:e0:31:ad:c5:c8:03:84:da:7f:48:91:36:70:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Jun 6 20:00:45 2025 GMT
Not After : Jun 7 20:00:45 2025 GMT
Subject: CN=342d2c5c835ba8d2dc810586ed50421294862976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:33:be:a3:43:e1:a3:ce:fc:ea:b6:25:22:
c3:1f:9d:5c:66:a2:fd:a2:72:6a:6b:94:2c:0b:c9:
3c:58:8b:99:c4:63:75:18:6b:94:37:d6:d0:9c:ce:
8a:ed:f7:75:9e:84:6b:21:5f:b5:3e:a8:96:c2:a7:
d2:b7:1a:50:0d:72:ed:f4:66:26:c9:16:b9:2c:44:
56:42:f9:6f:53:66:83:4f:16:3b:a7:89:66:ca:1c:
33:97:20:bc:d0:f0:4b:25:b1:6f:ee:6e:b6:5f:6a:
2d:9a:b8:21:62:09:b5:a9:f5:0f:cc:d5:ef:58:2a:
7a:fa:27:9d:7f:8d:cb:73:f4:ea:30:b4:1b:8c:b1:
f3:7a:84:5f:7e:d9:cf:f8:c1:72:57:82:2b:d9:27:
70:eb:d3:a9:f1:7d:8f:2e:02:57:de:c3:9c:e5:30:
34:05:17:1b:8c:ba:d5:ba:08:2e:67:10:19:08:28:
29:59:bf:60:7c:31:d8:f0:c0:74:17:4b:a0:3c:7c:
3a:48:17:dc:15:c1:08:62:c2:92:d9:ff:30:03:1f:
c9:31:59:b8:83:4b:37:ab:62:5d:53:ed:3d:9d:52:
b9:ee:4e:7f:ba:1e:71:47:77:62:01:00:1d:d2:b5:
47:ab:d6:c6:15:ab:a6:e5:ce:82:5f:94:4d:95:b6:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:2C:5C:83:5B:A8:D2:DC:81:05:86:ED:50:42:12:94:86:29:76
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ff:35:58:ad:aa:3e:d4:12:75:d6:25:e9:2f:06:2a:69:06:
fe:50:58:57:d5:e9:7d:50:1b:d0:59:e3:4c:22:85:f3:f4:fd:
f2:31:8c:c9:ff:6b:0c:4c:d6:e6:8a:7f:57:f5:d7:23:29:7a:
93:c9:f5:05:7c:3c:e1:bd:e9:88:6b:61:24:e1:18:e9:67:9d:
5c:ab:c6:d4:6e:2a:bd:42:4b:fe:f7:be:98:ef:16:38:9a:2f:
10:f2:29:49:2c:ae:0f:eb:85:74:d8:30:34:e0:d7:37:d9:42:
c2:d3:f3:cc:85:f9:f6:a7:aa:15:fe:90:ea:c4:8a:d8:e7:69:
db:e3:94:d4:c9:6e:c9:11:c5:2f:cf:cd:74:e5:d0:07:37:95:
b3:73:70:e7:d5:ff:3d:1d:45:b6:a3:6e:97:c7:ad:4b:34:62:
db:e9:85:13:80:6a:c6:14:6f:00:17:35:f7:a5:74:6e:98:11:
e7:1e:e8:83:9d:44:51:b4:65:2f:d0:b7:c7:79:f0:1e:ca:ac:
0f:6c:20:2b:d7:08:43:72:e3:32:ee:63:a6:57:02:16:1d:af:
ab:25:5d:e1:f5:36:a5:0c:59:41:dd:0e:7c:4e:d2:ff:eb:6d:
d1:df:cb:b3:3a:58:4f:da:14:10:c0:05:48:7c:cd:e7:01:e8:
1b:0a:70:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:34 2025 by rpki-client