Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: I3bNWvLBWzw92V7ueS+/W8x9PZePcdFb0BaaqKQioxw=
Subject key identifier: 46:C6:FA:EC:23:A2:73:DC:A8:A2:25:BE:7B:58:5D:38:23:B7:30:55
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 0197545971BB5E379812133643AEB9C536E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 11:00:37 +0000
Manifest this update: Mon 09 Jun 2025 11:00:37 +0000
Manifest next update: Tue 10 Jun 2025 11:00:37 +0000
Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=)
2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: m/o80WRRInB9aji4KUmuWcHnBWH5qA4OYVaG1y8wVR0=)
4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:71:bb:5e:37:98:12:13:36:43:ae:b9:c5:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Jun 9 11:00:37 2025 GMT
Not After : Jun 10 11:00:37 2025 GMT
Subject: CN=46c6faec23a273dca8a225be7b585d3823b73055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:61:2d:bd:76:fb:0e:ed:cd:4d:cb:05:20:
2b:7d:01:cd:9c:6f:91:a9:85:51:2b:ee:6f:2e:37:
c9:e6:2c:bf:6f:70:2e:b4:ac:bb:38:9c:2e:1f:29:
f5:c8:b3:59:c2:4d:80:d8:2b:4b:df:95:4c:dc:e7:
df:d0:a1:ea:ec:f2:17:6d:ae:20:f4:e3:1f:c7:d6:
51:b2:6e:e9:ab:81:d2:13:3d:11:eb:4c:58:50:22:
d5:cf:28:5c:50:73:0d:5c:bc:77:71:6c:79:6b:41:
70:8e:e5:c5:e0:77:e5:03:8e:fc:5e:5b:18:e9:9f:
6a:82:33:3c:8d:be:c4:d6:e2:62:d2:99:12:1e:91:
31:dd:47:a3:3c:f9:5c:11:52:98:ec:ac:05:1d:10:
67:e6:a9:df:55:3f:9f:75:97:55:e2:63:e1:83:17:
92:22:c4:7d:c3:50:6b:12:8f:ff:c4:d8:52:54:d5:
6c:26:b8:4b:af:19:07:d4:92:cf:19:0c:83:fd:2d:
9f:76:ee:51:20:ab:d7:5e:b7:30:c1:0a:7d:f3:3e:
21:48:1f:d1:ca:7b:bc:28:2f:c8:a8:9b:d3:89:c5:
32:a0:88:28:23:a8:21:42:d0:72:e6:c4:63:e6:c7:
de:6c:64:f4:b7:67:22:23:66:39:69:9c:9e:41:6f:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C6:FA:EC:23:A2:73:DC:A8:A2:25:BE:7B:58:5D:38:23:B7:30:55
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f2:d0:f1:35:b8:03:4d:be:5b:fe:87:40:bd:52:dd:3f:9f:
23:d1:10:d9:ce:a2:ed:61:43:ed:77:e7:db:6e:01:74:b5:4e:
66:cb:44:08:d8:05:9b:bc:f1:e2:29:bb:1c:1d:76:2e:3f:39:
30:58:45:63:e7:f8:d2:6c:2e:1b:22:f7:4c:61:8f:06:86:d7:
c4:3f:9e:01:61:1f:d9:8c:4c:cf:84:90:27:89:1c:ba:71:3d:
79:d4:47:83:fa:e4:4f:ab:1c:e4:35:9c:ae:5d:91:4c:6f:27:
10:2f:bc:84:c8:2e:d5:66:4e:cb:89:ef:f3:7c:a8:18:07:bc:
5b:5e:9b:0b:9d:4b:28:3c:48:d0:d9:54:7f:b2:01:01:99:dc:
57:a9:1d:95:79:8b:4e:f0:9e:21:62:d7:0f:48:99:81:6a:c0:
0f:0c:94:59:c0:a4:47:62:1b:77:cb:9b:36:29:fe:7b:ec:15:
65:7d:8b:92:39:6a:88:62:52:7c:c5:f9:48:84:5c:97:5a:ba:
f5:60:f8:90:47:e2:33:fd:60:5a:c6:9e:94:5b:04:24:50:77:
fe:d1:ec:2e:7b:96:ca:fb:00:c4:a5:dd:4c:68:f3:48:4d:81:
43:72:fe:b1:b9:12:9a:3e:d9:e7:a6:47:e8:08:75:31:fe:4b:
34:36:d6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:38:51 2025 by rpki-client