Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: C1iaq+7hQTa2XEgKiYxm5hxLTaaI57e1ETW9Jlctv7c=
Subject key identifier: AA:EB:86:91:A1:AB:99:90:6D:1E:A5:DE:43:3F:D1:9C:A8:E3:3B:BF
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 0197470BC3CBDE8AAE020540CAA8FB96C558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 07A8
Signing time: Fri 06 Jun 2025 21:00:42 +0000
Manifest this update: Fri 06 Jun 2025 21:00:42 +0000
Manifest next update: Sat 07 Jun 2025 21:00:42 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: TaDh4YOHldHxPgQi83sxXhfX3KK3NeOW3rkK9rsvopc=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:c3:cb:de:8a:ae:02:05:40:ca:a8:fb:96:c5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Jun 6 21:00:42 2025 GMT
Not After : Jun 7 21:00:42 2025 GMT
Subject: CN=aaeb8691a1ab99906d1ea5de433fd19ca8e33bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:a5:6f:27:33:39:86:0e:68:be:c1:9a:0d:
36:3e:3c:73:aa:e6:6a:88:1f:b0:20:64:a2:fa:0b:
05:0d:c7:67:2c:b4:2b:a6:80:40:a5:12:94:47:3a:
a3:b8:6c:5e:55:4a:01:77:ae:a9:6b:b7:66:ec:90:
3e:37:ea:81:ab:2f:91:dc:43:fd:c2:6e:86:e1:a2:
9f:05:fa:4f:69:61:d8:d8:9a:95:4d:c6:2f:13:1c:
ff:f8:db:44:24:bb:ef:f6:b3:f6:24:85:73:f5:85:
19:57:1b:94:14:3c:83:c3:02:0a:69:c4:f8:17:b4:
8a:bd:45:c1:aa:fa:58:fe:4c:57:69:eb:5d:71:24:
a4:78:96:1d:ae:75:45:06:a7:2f:b0:c2:e2:50:77:
35:9d:e7:e3:8e:5a:a5:fa:e8:22:9c:b7:24:e1:82:
1a:41:8c:3f:5c:5c:6a:08:ac:c5:3e:0d:17:ad:d5:
30:8a:36:a8:4a:d2:23:04:5b:8e:5f:95:2e:9b:65:
d7:d8:2c:53:ec:6e:a4:36:42:6b:3d:42:25:75:14:
60:56:20:8a:9c:98:41:3d:a5:7e:61:c2:a3:9c:9c:
4b:38:f8:d2:0e:6a:15:84:0d:27:bb:e9:f6:54:45:
77:97:16:6e:a6:f0:20:e1:08:62:c3:1d:92:29:ac:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EB:86:91:A1:AB:99:90:6D:1E:A5:DE:43:3F:D1:9C:A8:E3:3B:BF
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c9:42:04:f5:23:db:67:b5:3c:25:fc:3c:ee:a2:59:f0:89:
b9:ed:6d:1c:36:e4:bd:e4:a8:fe:d2:d1:84:a5:97:3c:e8:1f:
f9:eb:89:d7:c8:29:db:83:3c:a1:65:9c:a4:bb:be:2d:59:3f:
07:06:30:9a:6a:16:1d:b1:30:5f:52:47:2d:89:21:dc:fa:dc:
9d:e7:87:1e:da:03:83:a2:22:e0:21:50:e5:70:40:c7:e2:ec:
1e:5f:00:6c:26:bb:48:f5:41:86:bc:6d:f5:15:cd:bc:53:66:
2d:f4:0e:bc:c1:5a:55:cd:35:4a:52:05:f4:7b:02:74:9a:a9:
84:f6:18:29:c5:06:9a:a5:29:52:c1:ab:96:f5:71:cb:09:04:
20:ce:28:ac:e2:d6:b0:c6:83:2c:23:37:0e:66:11:41:36:c8:
10:54:65:22:0e:ac:d2:82:38:83:4e:3d:00:e1:65:e3:72:88:
d8:e7:04:5f:b7:82:21:67:aa:58:7f:0b:85:1a:d9:8f:01:0d:
5f:4c:00:76:1b:e7:73:ce:8b:34:37:e8:fd:2a:a9:5e:fa:f6:
32:89:43:84:d9:d8:3f:e7:d6:68:79:95:23:5b:01:ec:13:75:
f4:5f:c1:bc:48:96:42:aa:66:27:0a:bd:05:31:d2:e5:8b:36:
f6:6f:cd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:57 2025 by rpki-client