Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: iPbZi4zMFw6eD/Z8jn7kOMoDs4bluvzCMn8RCXl4bXo=
Subject key identifier: 47:C0:15:A7:22:0B:6A:0C:1E:76:E2:9F:5C:E9:85:25:4C:92:39:11
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 0197391A3BD34CF44B07D5EB3A0A8F6B498D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 0224
Signing time: Wed 04 Jun 2025 04:01:49 +0000
Manifest this update: Wed 04 Jun 2025 04:01:49 +0000
Manifest next update: Thu 05 Jun 2025 04:01:49 +0000
Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: szQTpw7KyxD3zrKCTvuleyBxjnXWOan3aiWZVU9rkS0=)
2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:1a:3b:d3:4c:f4:4b:07:d5:eb:3a:0a:8f:6b:49:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Jun 4 04:01:49 2025 GMT
Not After : Jun 5 04:01:49 2025 GMT
Subject: CN=47c015a7220b6a0c1e76e29f5ce985254c923911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:e8:83:f7:fe:fb:99:2e:8d:86:55:25:61:
7f:6d:67:d6:57:4a:8c:ef:31:be:aa:a1:e3:74:5d:
c5:3c:ca:8e:49:2a:d2:1c:4c:c8:0b:cf:ca:25:ed:
9e:95:c0:28:61:91:49:7c:0f:30:be:1f:12:78:6e:
76:c9:90:4d:35:a2:15:be:35:7a:d3:3d:5d:4f:91:
d6:4f:99:38:1f:f7:c3:43:a7:ea:ed:59:48:a1:ea:
5a:09:2c:48:7c:0a:92:26:b9:b8:de:a2:27:98:f3:
95:4d:82:4e:c9:e0:14:01:e8:06:0f:b7:23:68:99:
3d:0e:b4:02:12:61:5b:10:02:30:82:73:25:9e:ec:
06:3a:b1:82:0c:35:7b:76:a3:1a:1c:be:00:11:69:
16:47:04:a6:0d:a7:b0:3a:98:7b:36:cd:a4:9e:45:
ce:94:01:b1:af:68:c5:37:ad:e0:ae:0e:f6:fc:4c:
e4:0d:7e:2b:d3:4e:8e:d9:32:24:c1:29:af:7f:63:
37:b9:71:8a:5f:de:72:6e:9b:d1:bd:52:ca:9f:bc:
c2:f4:e9:6f:08:1c:bc:d3:fc:42:8b:42:be:4e:d0:
eb:f2:f5:46:5f:b9:fd:56:02:a3:7b:ab:f0:65:db:
9c:ae:19:86:57:b2:f1:18:8f:87:6c:e3:d7:b6:b1:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C0:15:A7:22:0B:6A:0C:1E:76:E2:9F:5C:E9:85:25:4C:92:39:11
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ff:1e:e2:58:4c:af:bf:47:d6:51:e0:d1:22:f4:c8:bd:9f:
91:31:cd:dd:52:87:0a:30:d4:93:62:3d:82:7b:78:c2:5c:a1:
6d:be:72:a5:83:64:1b:58:53:05:bb:eb:8a:ce:01:2b:c2:3a:
19:96:d6:af:d6:c9:45:a6:56:bc:ca:f5:00:8d:ae:11:cd:90:
5b:59:bc:2a:38:44:d6:73:8c:1b:7c:46:e0:e6:a6:6e:b4:46:
ac:cf:87:24:d2:84:31:c5:aa:70:08:7e:a5:03:9c:ad:fa:35:
14:fa:4e:db:cf:7a:5c:e7:cc:87:58:ac:04:b2:95:01:4b:b9:
18:20:a8:85:7b:ca:f1:1c:bf:69:78:cf:1e:65:64:52:ee:b8:
40:d1:57:0b:c4:dc:42:1e:53:4f:88:a6:04:80:3a:67:82:95:
4a:40:43:2a:7d:4b:f0:4e:ea:f1:9c:b2:7e:df:61:d2:75:72:
61:4d:96:56:78:d8:06:a7:f6:91:db:dd:de:76:34:b0:49:04:
af:0e:ef:f9:95:41:31:00:d9:17:26:68:f2:56:bf:6c:21:e1:
80:b0:13:49:38:6f:43:b1:dd:8c:49:7a:df:0b:7c:50:76:3b:
bf:d4:56:a0:6d:07:d6:22:83:67:0e:c4:2f:46:d0:14:80:04:
07:e8:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:59:11 2025 by rpki-client