Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File: oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier: cBhFj+PGc4vMcrMs82bJfhc9fSjLblMDGkG7SMh/0ng=
Subject key identifier: 3B:52:27:F1:F4:6A:3A:B4:AD:C5:A7:86:CC:CE:F5:8D:80:72:C4:0A
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial: 0197470B971A5FAAFCF095B67F5A134DF861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 21:00:31 +0000
Manifest this update: Fri 06 Jun 2025 21:00:31 +0000
Manifest next update: Sat 07 Jun 2025 21:00:31 +0000
Files and hashes: 1: _C22KYJjbT7k9Y0F086sSatuYjQ.roa (hash: sGeEeSXLg1Z6VuPUdF3Kx1VfqYaLdwKkzR5hHIgdTMo=)
2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: x7df4Q3sEIlou+J6Ml88nMdpM11BZEACnu9x3j09ez4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:97:1a:5f:aa:fc:f0:95:b6:7f:5a:13:4d:f8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Validity
Not Before: Jun 6 21:00:31 2025 GMT
Not After : Jun 7 21:00:31 2025 GMT
Subject: CN=3b5227f1f46a3ab4adc5a786cccef58d8072c40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:13:90:f9:93:25:bc:c8:04:ca:06:8a:65:
83:6e:f8:1e:c7:6f:34:54:f2:56:d8:94:34:86:a9:
f5:0f:0a:27:b9:38:d4:1e:78:de:38:f4:bc:70:83:
a9:f4:12:96:dd:91:21:8e:f9:3c:77:1b:27:11:a4:
24:15:aa:5c:9c:d4:26:44:ea:f8:aa:fd:c5:e2:2d:
b2:08:ff:03:40:4b:c9:d9:4b:e9:4a:3b:5b:6a:70:
d4:c1:d6:2c:e9:b0:78:7a:9a:f3:8d:fd:47:91:81:
52:fc:7c:d6:4f:12:69:7a:db:bd:40:a8:e5:ed:ca:
f0:7f:59:bf:a7:a7:54:20:c6:76:e1:f2:72:a6:c6:
e0:65:e9:ed:dc:57:10:7a:43:71:d9:8a:da:5b:16:
4e:20:ea:ef:19:17:74:79:00:16:f3:b4:74:ad:87:
ec:96:e2:28:a6:cc:62:50:33:4e:a5:6d:74:2b:e7:
7f:52:50:9e:32:a1:59:9c:d9:4b:be:b4:44:b4:c4:
b0:69:fe:6e:4f:aa:20:67:48:ab:63:0b:85:4c:80:
50:af:21:08:6f:72:cd:b6:b3:b5:44:c4:31:7a:12:
d4:7f:8a:7b:bd:00:c2:ff:46:67:56:96:87:02:49:
02:5c:cf:ed:d1:ca:d3:b1:60:49:90:75:f8:77:a5:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:52:27:F1:F4:6A:3A:B4:AD:C5:A7:86:CC:CE:F5:8D:80:72:C4:0A
X509v3 Authority Key Identifier:
keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:00:23:65:69:55:2d:ed:1e:8d:68:a7:36:02:88:88:32:30:
3f:5a:7b:8a:93:8d:93:5e:dd:98:64:20:ba:a2:c6:32:a4:4a:
6a:8a:ba:36:f4:3d:02:be:e2:1f:d7:3c:ea:21:91:a2:24:bb:
55:6e:ed:52:a7:a8:21:e2:d2:24:b7:3f:ff:50:ba:66:c2:90:
c1:d0:9b:6a:37:af:b6:5b:9a:e4:b5:d3:1e:6b:a9:21:c8:5d:
1a:d8:7c:f3:47:53:d3:05:51:ff:f4:19:c7:b9:c2:8f:98:74:
e2:d8:bb:da:19:5b:58:65:9b:f8:7a:c1:b2:af:58:ca:94:3b:
fa:d0:b6:08:44:27:63:57:e7:f5:ae:69:48:4b:93:0b:2f:85:
96:e0:e9:0c:ec:0f:0e:9a:ee:1a:78:e2:d3:c1:7e:04:ce:48:
3c:4e:46:28:51:d5:94:23:b3:15:33:78:70:c7:93:58:39:61:
b1:c0:81:c9:84:06:6c:75:79:ef:20:1c:b5:ef:30:41:7e:48:
f5:d3:74:d2:df:5d:5d:e7:61:71:19:ea:51:1b:fd:e0:d1:14:
ce:0a:e0:db:1c:9b:3f:b4:51:d2:b2:b4:34:95:0a:f2:4e:83:
a8:f9:9e:d1:d9:e9:fa:33:ba:23:89:f2:a1:59:85:81:a0:55:
98:13:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:53 2025 by rpki-client