Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier: 2FBPoWmav12l9Y2CydpD8w56zwqDn8BAA7Vg4n3Iops=
Subject key identifier: FC:27:6A:F9:DC:23:CD:52:86:D6:6F:9A:B3:C0:F4:E7:A3:F6:AC:CC
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 0197474263FB230897264A27898E249E750A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 22:00:22 +0000
Manifest this update: Fri 06 Jun 2025 22:00:22 +0000
Manifest next update: Sat 07 Jun 2025 22:00:22 +0000
Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: h+hVptv6MkKYed6AOZuysfIt+I5env3G4YzD688mG/A=)
2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:63:fb:23:08:97:26:4a:27:89:8e:24:9e:75:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Jun 6 22:00:22 2025 GMT
Not After : Jun 7 22:00:22 2025 GMT
Subject: CN=fc276af9dc23cd5286d66f9ab3c0f4e7a3f6accc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:9b:9a:43:e1:88:0e:5a:51:7c:b8:fc:df:
90:95:66:b8:5b:27:b2:69:ae:70:a1:82:44:de:c6:
5c:6a:dc:ec:32:50:09:99:e5:e5:6c:4a:7f:bc:43:
e3:82:ed:be:34:79:66:13:6f:fa:ac:89:28:3a:de:
48:99:36:c0:d7:66:ef:1f:fc:3b:c5:0c:e1:e9:eb:
9e:94:7a:77:bb:cf:3e:0c:34:63:b7:e8:83:ed:01:
f3:bf:08:16:1c:a5:b3:13:45:2c:f2:5d:5a:47:8c:
aa:f7:43:ea:fc:3a:51:56:aa:e0:bc:7f:f8:d2:7d:
cb:1e:fb:84:e7:29:ec:3b:c6:40:0f:e1:5a:1b:88:
cc:8c:00:06:73:9c:14:11:99:49:61:77:c0:9d:bd:
44:71:62:46:6f:1e:ea:bd:cb:47:c5:67:2c:62:6a:
5b:07:02:e0:88:3c:d9:d4:7c:1a:b8:a7:2e:97:8e:
a6:8b:5d:e8:c0:61:0f:28:39:3c:2d:7b:b7:40:b1:
59:e9:2e:72:57:81:f8:d0:87:5f:24:83:b4:2a:a6:
17:1d:a5:4b:2a:78:08:51:e2:22:85:a5:be:e9:35:
0c:69:52:69:c4:7d:2f:29:b9:c1:c1:c1:27:d4:f2:
ae:7c:0d:04:54:4c:26:4a:83:1b:af:a9:94:d8:27:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:27:6A:F9:DC:23:CD:52:86:D6:6F:9A:B3:C0:F4:E7:A3:F6:AC:CC
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:79:02:6d:bb:8d:01:ce:d4:d4:79:e4:a6:ae:52:8e:3b:53:
90:53:2c:09:b4:49:fa:90:9d:a6:78:4e:b8:eb:13:cf:24:d8:
c3:4c:05:f2:5d:4f:4c:99:05:c4:e1:02:6b:2f:6e:44:06:04:
4a:7d:82:90:ca:69:3e:f4:f6:4f:cf:45:87:5b:17:73:73:1e:
a6:bf:7f:d6:73:b0:3b:88:2f:e7:a5:1b:93:c2:5d:f1:92:50:
99:21:a6:c4:0c:b9:a5:35:fd:43:0b:da:1a:96:45:e4:1e:4f:
76:32:67:3b:20:cb:bc:e1:b0:39:a6:f7:28:b9:a0:dc:f4:91:
7d:8c:62:06:89:a2:b9:0b:68:d8:bd:c9:82:e2:33:22:c9:dc:
25:53:8a:88:a2:e3:92:70:2c:22:9b:60:bc:00:a8:45:13:42:
2d:cc:74:f6:3a:f3:dd:57:d5:3d:bb:a1:7c:56:a2:32:d2:38:
67:8e:b9:66:bb:64:b5:44:1f:02:8b:03:0e:2c:0d:0d:9f:34:
e5:be:a4:57:13:76:b9:38:f6:a5:2b:59:2a:ae:0a:46:3d:82:
34:fb:00:ad:4e:fa:51:e5:bd:7d:e5:41:4c:b3:8f:f0:83:02:
4a:29:08:de:49:e4:e0:19:17:d9:a3:19:85:89:d0:78:e9:31:
f3:1c:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:25 2025 by rpki-client