Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: DhAn8m2P/4yFRe9AHBKGX5O7rxKOXlKUBViaUcjiB0k=
Subject key identifier: F7:C6:38:04:07:6C:4C:01:7C:83:9F:32:2A:A0:0A:61:74:CE:75:9C
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 0197586DCB9EE5F7E9D31AD8F50023A8AC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0DF0
Signing time: Tue 10 Jun 2025 06:01:19 +0000
Manifest this update: Tue 10 Jun 2025 06:01:19 +0000
Manifest next update: Wed 11 Jun 2025 06:01:19 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: 5R/+M+8IPhqa7HckKKFgjYvWJTlpcTdbRnM7tufWi2M=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:cb:9e:e5:f7:e9:d3:1a:d8:f5:00:23:a8:ac:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jun 10 06:01:19 2025 GMT
Not After : Jun 11 06:01:19 2025 GMT
Subject: CN=f7c63804076c4c017c839f322aa00a6174ce759c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:6d:22:fd:3a:a6:6b:d2:46:45:07:e1:1c:
ba:05:2c:e3:ac:53:98:9e:86:dd:38:19:05:79:55:
a7:b6:5b:0b:4c:a8:01:84:a0:8c:06:1f:e0:ee:b1:
0b:ed:a7:31:9a:0d:e3:20:45:55:13:8e:12:b4:04:
fb:0e:2c:46:15:9e:62:59:17:1a:33:92:e9:5a:a3:
d7:4b:77:20:ee:bc:d4:87:32:b4:27:70:f3:8c:f7:
79:82:a4:9f:02:04:d0:8e:85:a0:f3:81:a9:c8:e3:
9f:49:80:22:44:79:75:aa:d4:ad:d2:3e:39:29:8b:
2f:e0:85:6d:61:53:a9:97:a7:df:47:24:46:20:80:
5f:4a:e2:65:8e:6e:e3:c9:53:89:f0:f3:50:79:bf:
20:7e:13:c1:39:38:26:73:00:3c:1b:a3:56:81:1c:
05:1d:73:c2:98:b3:78:18:ee:17:21:31:1a:dd:a4:
2a:9b:f3:a0:d4:33:68:fc:57:85:71:ec:d8:db:51:
56:ce:95:4c:38:b6:08:45:42:ef:6e:0f:74:82:eb:
34:44:c8:29:4d:c5:1b:db:24:22:2d:54:37:3d:50:
f2:6f:49:27:7b:2c:f3:87:70:fb:6f:19:24:38:3e:
23:2b:aa:7b:68:a8:94:dd:b2:a9:75:53:86:b1:45:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C6:38:04:07:6C:4C:01:7C:83:9F:32:2A:A0:0A:61:74:CE:75:9C
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:57:90:a6:7d:51:34:10:e8:45:9d:e3:d1:2b:61:0e:f3:ee:
87:91:d7:5d:55:94:0e:1d:21:c7:1f:33:ed:14:b2:a8:61:e0:
ba:cf:51:1e:a6:1b:b7:30:94:a9:93:ff:2d:db:b4:0e:63:0f:
08:31:f5:1f:29:7c:d9:10:c7:e4:c8:20:5a:fc:30:a2:cc:63:
06:ea:8a:d5:bc:2e:58:a3:01:6c:5b:25:1e:ec:8b:00:d7:c3:
20:7f:a9:18:95:03:74:70:2d:58:5c:2d:cd:9b:7e:17:8f:a4:
3c:eb:f6:ab:72:6e:7d:cf:ba:1d:8b:61:6d:db:fa:39:9a:0a:
f3:e6:e6:96:2c:28:78:83:ab:0b:b6:45:04:74:ee:77:c4:28:
55:d9:7e:f2:99:2f:9f:53:1c:df:03:e3:6e:ea:4b:71:5c:77:
4f:19:08:ff:4e:33:ab:60:3d:27:80:5b:52:b3:28:3d:6e:d6:
f2:a0:40:aa:fb:3f:83:4f:f4:d1:86:90:bc:2c:20:a1:b7:1b:
02:8e:e6:12:89:11:14:f7:14:c7:7f:df:d9:01:7c:8a:e3:43:
89:44:47:8a:60:3b:7b:a1:46:cf:69:80:0c:41:f3:c0:1a:6d:
fa:77:17:a5:c5:3f:1b:78:fd:32:fc:1e:9b:05:9b:8e:6a:dd:
b8:4c:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:07:03 2025 by rpki-client