Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: tYMumnYtuTahYbyEchzXKUT+4hk3vkRIBFgVgdQNLN4=
Subject key identifier: BA:AA:98:9B:6A:BF:18:2D:EF:1F:F0:11:FC:93:9B:B3:8E:EA:68:58
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019749D5BD5714DA7DD763AA8F9B5047A7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:33 +0000
Manifest this update: Sat 07 Jun 2025 10:00:33 +0000
Manifest next update: Sun 08 Jun 2025 10:00:33 +0000
Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=)
2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: Wp8/35/9fzq0g0MW9FqNnKbAIeHi0yHl6XRXr4X1zU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:bd:57:14:da:7d:d7:63:aa:8f:9b:50:47:a7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jun 7 10:00:33 2025 GMT
Not After : Jun 8 10:00:33 2025 GMT
Subject: CN=baaa989b6abf182def1ff011fc939bb38eea6858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:68:c0:52:e6:89:d4:57:fc:b4:65:6f:bf:fd:
aa:e7:1e:9e:ca:0f:90:a4:41:d0:42:a8:1f:62:89:
08:39:13:fa:43:24:a7:51:09:73:62:39:96:cd:29:
06:b9:71:44:65:f9:56:d5:9a:1f:9d:53:ce:3b:f2:
5f:d1:48:60:9f:51:4c:e0:34:01:a1:28:44:57:3f:
f2:8c:e8:bc:82:bd:89:42:21:79:1d:98:5f:62:87:
d4:84:10:16:77:1f:d3:de:a8:a0:e7:60:5e:54:cd:
e8:3e:0b:01:99:a2:c0:a8:b8:57:70:a0:22:39:dc:
20:ed:18:be:99:c6:42:78:95:ee:5e:87:60:82:40:
83:9a:f7:de:01:0b:5c:76:bd:ec:74:7d:25:7d:bd:
6b:99:9b:eb:03:7c:33:05:6c:c7:14:07:23:46:3a:
ca:4e:fe:2e:67:63:8d:a1:f6:c4:35:4c:b0:e8:81:
7f:16:12:c6:05:66:b7:39:32:65:dc:31:2b:d9:0c:
fc:86:c7:4f:4e:34:0c:f7:cf:98:d4:ef:73:72:73:
95:ec:b0:09:32:49:0e:a5:c2:f2:1b:0b:49:73:8b:
05:00:4c:bf:4b:ee:6b:d4:09:49:54:6d:b5:12:33:
02:27:08:c8:c4:0f:06:11:e0:7b:30:1d:86:fa:26:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:98:9B:6A:BF:18:2D:EF:1F:F0:11:FC:93:9B:B3:8E:EA:68:58
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f2:70:25:25:ba:00:46:d9:59:33:64:d4:7b:60:75:8b:bf:
f7:ff:08:5a:7e:a7:5e:c1:a0:77:0a:20:af:8c:b9:98:c1:c1:
45:37:2b:b4:cf:50:22:60:88:ed:3b:51:a1:d5:c3:fe:fd:ac:
0d:f5:d4:f1:c5:ee:de:96:32:3d:72:8b:61:a2:39:a9:85:37:
a3:27:b0:c1:17:bb:11:e4:78:df:91:0b:3b:eb:9f:31:71:93:
e2:ea:9f:36:b4:bc:4b:11:18:17:1b:f4:1a:26:c8:3d:04:99:
0d:c9:c3:95:b9:55:99:9e:a1:ae:ec:80:a3:43:ff:ac:86:db:
9b:a5:92:9d:48:3b:e4:32:bf:8b:4b:64:86:b2:5c:48:da:20:
39:ba:4f:ee:db:a1:b4:82:a5:cb:b3:f5:d6:f8:70:11:bf:e5:
42:3a:1f:a2:0d:28:a9:de:2e:b8:db:de:04:5c:1a:d2:e6:d2:
91:4d:92:1e:3d:38:fe:96:ea:7e:9c:82:b3:ea:86:62:82:91:
83:f9:9c:67:69:b9:a8:74:de:62:e0:36:86:5b:0c:89:02:77:
fd:64:15:c7:85:fd:6b:18:e7:7a:fa:3b:74:c4:7b:d5:f7:bf:
57:4e:71:63:f0:96:72:f9:64:50:e4:07:f0:b2:ac:bd:de:20:
ea:e9:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:55:07 2025 by rpki-client