Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
File: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft (raw, json)
Hash identifier: yXAiGMxknbXoHPi98qxVp+twil3Xm02/WMbkIlOgipg=
Subject key identifier: AA:F0:68:A2:E2:D2:96:9C:5B:C8:3C:C7:5E:78:07:0C:89:CF:21:39
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Certificate issuer: /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial: 01974A7AAFD3A1C4EAB048B4194D43FBCCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:00:43 +0000
Manifest this update: Sat 07 Jun 2025 13:00:43 +0000
Manifest next update: Sun 08 Jun 2025 13:00:43 +0000
Files and hashes: 1: KfvqJ792oMd34Pp7PugqoZjhvkw.roa (hash: S302iUZeOLpzdWoDN+iw2GhCZ0Q0jKKUkWWXOnKtMnU=)
2: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl (hash: hh3kQ/iciOZaOK5h0M0Uj1mXhrFoiyZNCV5thSbuu0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:af:d3:a1:c4:ea:b0:48:b4:19:4d:43:fb:cc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Validity
Not Before: Jun 7 13:00:43 2025 GMT
Not After : Jun 8 13:00:43 2025 GMT
Subject: CN=aaf068a2e2d2969c5bc83cc75e78070c89cf2139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:e9:3f:eb:11:a9:02:1f:3b:c4:1a:2f:53:
04:25:a1:6e:1e:8d:c4:8b:be:60:11:a7:ae:69:b0:
d2:a3:a2:82:26:84:e4:ad:81:a8:a0:9c:9d:3c:a9:
48:c4:90:67:e5:fa:c4:3d:22:38:71:86:31:51:30:
30:59:97:60:7d:41:a4:26:91:27:07:91:b7:f0:fc:
1c:f3:54:6e:2e:f4:88:60:26:df:44:c1:db:f6:83:
4a:f7:83:ce:dd:3b:32:40:98:3d:4a:80:79:1d:6d:
d5:a3:ea:49:e5:f8:db:51:e5:5b:b2:6d:74:37:b7:
e6:f1:c8:bc:03:2a:b2:6d:22:a4:bc:d3:f6:46:90:
4a:bf:50:72:c9:7a:e0:90:03:38:81:a8:72:ae:44:
d3:9e:5a:d4:e3:39:16:fc:31:c7:e7:42:6b:c0:a6:
98:ab:cd:85:d3:73:05:72:f1:0b:17:93:67:f1:9b:
b3:89:6b:bd:fa:2f:cf:f1:b9:81:03:14:10:4e:60:
b2:e8:49:1f:4f:f2:d2:69:b5:ff:d5:7e:28:aa:33:
82:25:56:53:18:ab:94:e4:c8:f1:e9:66:2d:ad:69:
f5:a9:9a:b4:aa:77:3c:b1:0f:34:0f:f2:c3:bc:9c:
dc:ab:27:ab:ee:e7:63:8c:a9:0a:c4:0c:d4:56:c9:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F0:68:A2:E2:D2:96:9C:5B:C8:3C:C7:5E:78:07:0C:89:CF:21:39
X509v3 Authority Key Identifier:
keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:51:32:e7:bd:65:f7:43:2a:e0:8b:54:ac:d1:82:3f:f4:48:
45:90:99:4f:6b:88:e5:3a:ef:91:1e:87:70:5e:85:70:f2:99:
00:8b:94:d3:ee:1b:44:de:62:46:59:3c:10:af:8e:f2:ea:1a:
d7:4e:0c:e8:d9:cd:25:21:a5:98:6e:b9:14:d4:20:28:de:6e:
74:17:45:db:36:2a:d1:d8:84:32:7d:48:df:8f:78:9a:bf:cb:
ea:bc:80:e9:22:ec:42:9b:78:41:7d:af:88:63:d6:32:1d:d2:
15:82:b1:ca:a6:29:e5:26:ed:e6:b7:d4:9d:dd:f6:c1:8c:8e:
98:88:a9:ad:3e:bb:2a:4b:ce:4e:ae:f5:c1:fc:bc:f1:5e:e7:
e7:69:19:3c:d7:79:9d:81:93:48:c5:cb:5a:5f:a5:c8:a1:2f:
40:59:5a:c6:92:73:6f:30:ce:2f:57:65:c7:b3:50:9c:51:a2:
f4:fd:94:6b:bd:a1:af:ea:e9:7c:c9:01:2f:02:8b:42:b2:f0:
9a:1c:59:37:58:71:79:68:87:a5:33:53:f8:0b:48:7d:41:70:
b7:e0:2d:f6:69:76:57:fb:a7:8e:20:12:6c:e5:10:6a:3c:16:
08:81:74:a4:ce:63:7e:93:22:34:84:d6:d8:cb:d5:d2:99:f0:
b1:d7:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:08:47 2025 by rpki-client