Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: sDO95TOgQON5saYBkK87LAct5/Y0Be7anuc1V/bwapU=
Subject key identifier: E4:C0:1A:FF:59:01:A7:31:AA:65:B1:EB:FF:CA:84:1D:6F:1B:A8:20
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 0197602764319ECDD765BE1C8557FC74515E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0DF4
Signing time: Wed 11 Jun 2025 18:01:23 +0000
Manifest this update: Wed 11 Jun 2025 18:01:23 +0000
Manifest next update: Thu 12 Jun 2025 18:01:23 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: cv2w4UzZJMkdiP6bAoUknEKk7ImnF3n11szhk/El6Oc=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:27:64:31:9e:cd:d7:65:be:1c:85:57:fc:74:51:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jun 11 18:01:23 2025 GMT
Not After : Jun 12 18:01:23 2025 GMT
Subject: CN=e4c01aff5901a731aa65b1ebffca841d6f1ba820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:61:29:55:b7:39:6a:3f:a1:33:db:fa:a5:
2e:e0:77:5a:1a:15:0f:46:db:3c:c7:e4:1a:43:64:
a6:11:9c:e7:74:44:fe:40:34:d1:ac:32:7f:f6:3d:
22:24:d6:a9:a7:f8:89:52:46:7b:ee:84:5e:95:39:
11:f3:1b:74:01:5a:12:54:76:b8:d4:e6:42:92:a7:
0c:77:4c:ca:05:b8:9b:26:60:82:05:12:4e:7c:65:
61:39:c4:d6:1d:43:8f:33:5f:07:b1:57:ad:e3:13:
3c:da:25:1a:3b:b0:24:a6:aa:21:3a:dd:01:68:23:
99:36:a6:00:ba:a4:4e:b6:ed:ce:88:7c:ed:62:3f:
48:7f:cb:5a:a2:9c:bb:b7:98:21:66:c7:4e:89:fa:
ff:01:3e:74:cf:99:b8:dc:cb:1c:19:c9:fb:9c:b7:
2a:69:ba:e1:70:95:8c:f8:96:bc:1a:89:7f:14:98:
31:b9:b2:b0:25:e1:0a:78:12:70:65:82:4c:32:05:
5b:d1:e3:83:e1:20:e0:29:17:64:e4:dc:33:ca:6e:
c9:f7:70:04:5f:df:e1:56:41:b9:4c:ab:aa:99:e3:
b2:9d:38:73:cb:34:f9:a9:78:53:5d:47:0e:56:08:
75:86:ab:12:58:8f:8c:c7:28:82:13:f8:e3:9c:37:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C0:1A:FF:59:01:A7:31:AA:65:B1:EB:FF:CA:84:1D:6F:1B:A8:20
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1a:88:10:9a:d7:40:61:9a:e0:3c:64:18:6f:01:c6:aa:35:
e9:13:53:18:5d:b6:e6:6d:32:8e:1f:c1:a4:6a:4e:e4:b3:a3:
ab:b8:8e:ec:f3:61:43:dc:e1:fd:c9:0b:2f:96:21:f8:90:77:
9c:83:81:17:14:bf:9f:41:eb:a9:02:36:dc:e6:ec:39:da:b0:
ef:bc:25:cf:93:9d:cb:d5:6a:51:b9:1f:43:72:95:4d:0f:be:
1c:65:4c:96:43:29:89:1f:a1:a9:39:63:41:5d:64:77:be:4a:
62:7c:06:88:17:83:43:ac:49:98:03:36:1e:b9:50:d1:8a:1c:
4f:01:8b:49:c3:83:e2:b5:6a:70:1c:f6:87:88:89:55:03:b8:
2c:37:29:d1:10:8c:92:ba:aa:56:05:8b:20:ae:aa:d3:1a:bc:
39:60:32:16:e9:00:fc:38:f9:5c:e2:33:af:9c:f1:60:f9:0b:
95:f1:bd:80:6e:42:3a:c2:a2:9c:f5:bc:c5:26:38:a0:f8:69:
0d:16:7e:62:59:05:b2:33:59:ab:4b:c3:f0:fd:52:73:b1:16:
20:f0:71:2a:85:89:78:d5:6d:f5:09:03:fd:bb:aa:51:c3:93:
ae:89:ae:71:64:28:d5:46:70:73:0e:a6:91:9c:d1:e9:1f:85:
25:b2:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:53:13 2025 by rpki-client