Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: SqW2OMW203jYCJVgF0IQ9BhW1KvPaQhPuBr+tHHaiB0=
Subject key identifier: 09:71:5F:8C:E4:4E:E2:29:A8:D8:90:5C:7A:FE:C8:E0:32:41:29:84
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 01974CD6FC4A835C1F7DDE06B8137B0F042D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0AC4
Signing time: Sun 08 Jun 2025 00:00:47 +0000
Manifest this update: Sun 08 Jun 2025 00:00:47 +0000
Manifest next update: Mon 09 Jun 2025 00:00:47 +0000
Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=)
2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: 4CT2T6Yvh1JEBddpH4CcBuKZZ+0zXGYAG8TbBp/ffsk=)
3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:fc:4a:83:5c:1f:7d:de:06:b8:13:7b:0f:04:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Jun 8 00:00:47 2025 GMT
Not After : Jun 9 00:00:47 2025 GMT
Subject: CN=09715f8ce44ee229a8d8905c7afec8e032412984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:c6:60:cf:fe:15:1b:77:b2:66:8f:0b:af:
e5:82:c4:b7:90:10:27:1b:48:61:c8:2a:48:1b:0e:
65:5f:a0:9c:f5:56:76:40:51:63:dc:25:60:21:2e:
ef:87:93:0a:f4:72:5c:61:ba:43:95:a7:97:fb:23:
92:a1:f8:ee:8b:ac:f1:73:6a:ce:e6:f1:68:c0:f3:
c2:5b:c8:c9:dd:e7:69:ef:f3:86:d1:dd:1f:20:45:
b7:77:a9:55:3c:85:15:39:11:45:9a:d7:10:8b:02:
c2:c6:0f:01:42:f9:ae:94:79:71:ec:8d:93:ff:be:
7d:a9:cd:fe:af:bc:21:96:ec:47:ee:10:a9:36:e4:
0a:c1:bb:e0:7f:fc:aa:82:39:ee:e6:c9:70:e4:cc:
74:6f:35:e2:bf:05:8f:f5:f5:be:4a:e4:39:52:31:
07:69:44:b6:ae:c9:bf:b1:bb:69:63:16:d4:91:05:
76:fb:c6:cc:ae:05:9a:a7:f2:1d:bf:26:e7:5f:2b:
36:b0:c2:ec:ca:4b:89:c9:44:6e:23:83:9a:70:a0:
ad:3b:21:52:17:17:f7:43:e3:ba:e3:29:01:c2:01:
38:1a:dd:10:84:60:95:a2:4e:ff:8a:fc:3a:c8:c3:
ee:4e:a7:e0:54:13:49:72:4b:b5:3a:8d:d6:12:f1:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:5F:8C:E4:4E:E2:29:A8:D8:90:5C:7A:FE:C8:E0:32:41:29:84
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b4:3f:93:97:4c:c0:a2:5e:5b:ee:1f:4b:0a:4f:6e:b1:4c:
be:a5:e9:ea:c2:d0:ee:52:bb:1b:68:5b:0a:04:07:b5:8a:fd:
10:e2:65:28:d8:5f:02:d9:fb:47:fb:12:35:e7:cf:ca:5f:ae:
7c:8d:ed:7f:35:f9:c2:a8:dd:7b:a2:14:28:ae:7a:5b:03:94:
a0:77:97:eb:e5:a8:d6:71:50:89:1a:b5:3b:21:26:55:28:0f:
ce:9c:f9:73:ba:1f:b6:a9:62:af:f7:ac:2c:8f:1a:93:6a:95:
1b:82:30:12:86:ca:b2:2c:00:ca:8f:8d:3e:97:3f:9a:23:b7:
24:4b:52:93:c9:2a:82:04:c9:dd:a9:e7:95:15:0f:ae:1e:3d:
98:5f:42:25:6f:13:b4:62:4a:7b:48:6d:07:14:40:41:38:5f:
b0:4e:73:3c:29:5c:bb:45:cc:4b:5e:13:75:03:86:fe:af:08:
eb:66:ed:b3:4e:39:06:b4:26:cc:57:c3:87:1c:3f:62:42:c4:
cb:cb:ff:6d:6a:05:81:28:b6:ba:bf:95:13:de:d6:62:12:7b:
a8:79:bc:fc:36:3b:5e:31:21:41:73:67:79:df:15:d8:40:e9:
1f:cd:6e:d2:4d:8a:49:fc:05:d1:72:36:26:ad:04:bb:cc:36:
27:ea:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:17 2025 by rpki-client