Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
File: OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json)
Hash identifier: WZdfZvIBGPzSle0aITXhyHtb2B+URAwgpMT5H435okU=
Subject key identifier: 21:7A:59:F8:0E:D0:84:EA:4D:3D:C7:45:3E:FC:4E:59:50:90:1F:DD
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 01974D4520AD3A8A7E31981B05D6191A663E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
Manifest number: 0B6C
Signing time: Sun 08 Jun 2025 02:01:05 +0000
Manifest this update: Sun 08 Jun 2025 02:01:05 +0000
Manifest next update: Mon 09 Jun 2025 02:01:05 +0000
Files and hashes: 1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: TiBzMm8e4Tjoo9JqlWqTVTHs85gZiAK9jHWtegPJVvk=)
2: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (hash: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:20:ad:3a:8a:7e:31:98:1b:05:d6:19:1a:66:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: Jun 8 02:01:05 2025 GMT
Not After : Jun 9 02:01:05 2025 GMT
Subject: CN=217a59f80ed084ea4d3dc7453efc4e5950901fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:31:e2:27:95:dc:62:53:57:07:b1:79:9e:
b2:59:75:8b:f7:5b:17:4a:1f:8e:77:28:bb:95:68:
5e:42:dd:dc:db:e6:1c:40:a7:37:37:82:8e:69:69:
5a:aa:62:d5:39:d5:0e:e5:e6:3b:0e:2d:a0:69:88:
ed:69:e3:db:a9:0a:5e:1e:0a:8d:15:4e:c4:b4:9f:
f9:34:1d:ad:cd:b0:36:3f:b0:e2:6d:77:9e:f4:4b:
b7:04:d0:5d:a7:5b:d2:14:48:3c:fc:6e:bb:bb:57:
b0:2b:6d:46:6d:38:68:b7:a1:5c:d6:13:57:e0:73:
40:7b:01:8a:dd:7f:5c:ea:d8:56:7e:fb:4c:c9:61:
cd:59:35:14:ff:2c:7e:29:fb:b5:39:b0:ae:db:34:
28:a7:e0:ce:8e:c8:bd:b6:d1:12:fe:d3:e6:3a:95:
35:ed:30:d4:f5:88:82:2d:aa:9a:d7:4f:ce:cb:c3:
6e:1d:0b:ab:3a:0a:b4:69:d5:f4:3e:52:82:93:f2:
89:04:84:40:b3:7c:85:46:cf:cb:f4:9f:f0:7f:40:
da:39:d0:4c:4f:b5:fc:28:f3:f4:ae:36:ce:89:6b:
cd:a3:1a:54:ae:eb:7c:70:e3:bc:f1:e2:81:6b:47:
1c:f7:dc:d8:4a:0b:03:62:1b:92:08:11:05:01:38:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:59:F8:0E:D0:84:EA:4D:3D:C7:45:3E:FC:4E:59:50:90:1F:DD
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5a:cf:b1:7f:59:2e:50:47:c8:7b:1f:86:02:d3:e1:f8:e4:
83:d4:bb:9c:ca:d1:65:ac:24:6c:b0:79:bb:3d:42:f1:d8:7e:
18:55:d7:15:2e:8e:b0:e5:44:8e:95:bc:4d:0f:4e:37:d4:c6:
85:41:3c:9c:d6:c1:ba:ae:44:74:8f:49:55:1a:c3:c4:d9:0e:
4f:f2:7a:96:43:37:9d:b8:3c:98:5a:bd:36:6c:f1:24:7a:81:
77:de:ae:35:3e:63:8f:e1:0f:8a:3f:33:f8:43:73:13:12:1d:
57:2a:9a:45:46:6c:76:bf:26:9b:c5:c5:0a:66:dc:40:85:6d:
fa:19:b7:aa:5e:a8:35:f0:0d:8b:71:40:bd:d5:0f:ed:c1:7f:
6b:b6:9e:dc:6b:5e:04:ed:32:dd:81:25:5a:c9:98:c2:e9:39:
86:0c:2f:01:31:0c:12:87:3d:65:18:41:08:00:06:6e:71:b2:
0d:50:56:4e:92:b4:e7:36:67:50:b6:6b:64:4c:dd:29:78:f1:
bc:b7:9a:0d:55:29:ca:7a:64:12:82:3c:8b:e3:8b:98:7f:3c:
8b:14:8a:25:31:fb:d6:d6:99:ef:f3:12:58:3b:80:1d:13:da:
ef:c2:d1:28:8e:07:4a:1e:de:e7:93:07:c4:2d:91:30:e0:ff:
da:fc:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:38 2025 by rpki-client