Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: asu/IH7NVZWaYORP2A3IkoGce04IUxcDw08TSUwf5ag=
Subject key identifier: 98:96:6D:6D:DF:F5:24:D6:73:AE:1D:10:DB:74:CC:77:23:FF:CE:B5
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 01974A7A6C256424FC76AAD60597EAD17A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 1283
Signing time: Sat 07 Jun 2025 13:00:26 +0000
Manifest this update: Sat 07 Jun 2025 13:00:26 +0000
Manifest next update: Sun 08 Jun 2025 13:00:26 +0000
Files and hashes: 1: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: DSYrXf0hhmyuyaOyozm4Y1F04WElTiy46P05UadaXHY=)
2: bXuLlzwCurMedfx4RUMXi7r1h0M.roa (hash: sXVX+GwCrEzWh3/PYurD7SBft7awlkJnghtSxD3UtHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:6c:25:64:24:fc:76:aa:d6:05:97:ea:d1:7a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Jun 7 13:00:26 2025 GMT
Not After : Jun 8 13:00:26 2025 GMT
Subject: CN=98966d6ddff524d673ae1d10db74cc7723ffceb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:61:10:10:9d:a4:bf:a8:e6:b8:92:9d:bb:
a8:9b:d7:82:9b:2b:e7:20:ae:60:99:70:fd:9b:3a:
61:90:ea:c6:d3:3d:1d:0f:19:58:47:02:f5:5e:1f:
39:5b:c0:16:e5:2a:9b:9d:f4:78:2b:65:6e:97:48:
11:1f:86:c0:b9:53:15:ea:06:df:7b:f4:76:fe:b5:
32:46:6f:1b:ef:2c:51:24:de:03:9a:52:4d:d7:d3:
63:9f:5a:a0:73:b1:ba:3b:36:eb:ed:66:5c:0b:73:
27:41:4d:77:56:8f:2e:b7:7f:ad:1a:e3:75:fa:49:
b5:8f:ff:1e:3d:d3:a3:6e:23:a4:10:c0:21:e8:75:
3c:e0:1d:8e:da:a7:64:05:35:c0:7b:67:6e:cc:d3:
98:b5:0c:81:7e:34:b3:f8:91:3b:b7:27:50:7e:83:
39:c6:47:19:9c:7a:9a:b2:47:f5:02:43:2b:3b:b4:
e7:67:e3:ef:a6:95:c8:70:ce:0c:ed:f1:2a:43:cc:
7f:22:b2:53:9a:0c:93:19:f3:8d:73:83:81:71:dd:
09:92:0e:16:9c:a7:47:01:ac:26:7b:9e:f5:c7:81:
f1:7c:9e:f8:fd:22:59:e6:76:1c:21:16:7e:17:8b:
a4:06:3f:74:64:d6:87:17:93:91:f0:a8:0f:28:59:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:96:6D:6D:DF:F5:24:D6:73:AE:1D:10:DB:74:CC:77:23:FF:CE:B5
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:02:a2:da:9a:04:35:7f:10:26:69:35:67:6a:6e:25:ee:5e:
70:06:4b:15:a4:ce:c5:d1:9c:84:a1:db:e6:79:20:71:55:a3:
b8:9f:47:82:46:51:ab:95:0e:5e:45:c9:e0:71:7b:75:ed:12:
e8:8d:eb:20:fa:bf:63:96:b4:02:88:2a:50:de:9e:e1:58:f2:
2f:33:90:e4:f3:d0:36:90:6c:b6:89:71:f7:01:6a:2a:92:4b:
37:5d:92:f9:5c:01:86:dc:ae:33:61:3a:51:ea:1c:c3:76:e4:
16:e0:55:68:da:c1:3e:ad:9a:32:7b:e9:02:96:25:4f:92:aa:
c7:27:39:34:f6:e7:b9:83:18:2f:12:6f:47:16:a2:97:73:92:
83:69:91:ed:04:17:05:67:d6:43:1e:84:a0:52:a9:ed:42:56:
2b:df:20:89:4a:c5:03:4a:ac:a6:dc:5c:a4:ca:c8:38:19:0a:
52:0f:a9:18:df:4e:df:75:50:02:9b:a8:47:7d:d5:a4:c3:fd:
8f:a5:43:53:68:24:db:6d:fe:04:0b:a3:c0:37:f9:5c:26:d3:
a4:a2:35:9f:4d:4a:2f:2a:a9:03:e5:7f:c3:a2:ee:09:18:b4:
7b:34:b2:d8:b6:8b:b7:f5:0b:90:db:12:fd:d3:c4:7e:61:c5:
7c:1b:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:10 2025 by rpki-client