Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier: qkpJqsrOcVV3ZblnOjQ3Bm3MXHiW7KI+rV9jQ7hLlN0=
Subject key identifier: 42:C5:3C:BC:92:57:BF:D8:73:B0:9A:2F:43:2D:BA:20:ED:1E:B0:8F
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 01974666DDF1DF51CACBD90407EB9D01BECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number: 30
Signing time: Fri 06 Jun 2025 18:00:35 +0000
Manifest this update: Fri 06 Jun 2025 18:00:35 +0000
Manifest next update: Sat 07 Jun 2025 18:00:35 +0000
Files and hashes: 1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=)
2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: aqVVl0VWqzP9BYMI+ZTOBNw0A3o64Gumngj+0fd2WcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:dd:f1:df:51:ca:cb:d9:04:07:eb:9d:01:be:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Jun 6 18:00:35 2025 GMT
Not After : Jun 7 18:00:35 2025 GMT
Subject: CN=42c53cbc9257bfd873b09a2f432dba20ed1eb08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:ca:6b:2c:26:08:70:40:47:44:f6:b3:7c:
e7:89:e1:d1:af:9e:e4:93:01:30:6b:3a:a1:1f:0f:
37:1b:d9:eb:8f:2c:a3:44:42:45:28:58:dd:f5:e0:
32:de:47:3d:19:f0:f0:02:85:11:26:fd:b7:d7:a3:
c1:52:22:ea:97:31:29:e6:69:4e:d8:34:d6:3b:b7:
e8:ee:ae:f2:6f:52:8f:e4:66:0b:46:26:73:04:6f:
79:dd:7d:e6:ef:00:55:c1:d0:36:79:df:d6:83:6e:
90:91:63:40:3b:bf:ef:28:dc:98:cf:3e:d0:ca:31:
e4:87:22:31:41:74:a6:17:d1:13:5c:c0:fa:dc:33:
a1:56:84:eb:40:56:bd:40:78:27:48:4d:a2:48:cd:
e4:41:6b:79:8b:6c:8e:87:6e:7f:fd:e1:64:1d:e4:
4d:ec:33:47:b9:af:17:c9:11:7a:2b:30:1c:9d:1a:
f9:62:b4:df:cd:b0:a4:41:c5:6f:6f:a6:6f:21:32:
3f:a0:1c:e4:d1:1b:fa:9c:3a:79:14:44:06:b3:16:
d8:ac:9e:f4:47:30:b3:4d:e8:9b:87:0b:c4:1a:b1:
e4:ac:37:17:e8:55:20:73:fd:8d:7f:ad:49:6b:02:
41:e7:5c:7b:ed:43:00:eb:47:58:25:0a:54:0a:a1:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:3C:BC:92:57:BF:D8:73:B0:9A:2F:43:2D:BA:20:ED:1E:B0:8F
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:88:a0:e8:4c:a1:15:30:8c:0b:1e:e0:90:ea:26:13:42:f2:
80:0f:a8:d2:be:ea:e8:23:7a:0e:61:02:c7:3d:df:a2:2d:a3:
b8:b6:3e:1f:eb:60:25:24:3e:10:94:b8:70:0b:34:9e:be:f5:
3c:17:7f:4c:56:fc:1f:06:93:df:16:90:d4:d5:06:49:ec:db:
7a:91:24:0d:96:a0:49:b9:72:04:7a:49:da:72:1d:2f:12:ba:
e6:81:7f:aa:78:54:77:b0:0c:1c:eb:b7:b9:b0:d4:4a:95:51:
88:18:97:09:36:31:a7:7f:e9:38:a4:df:bd:4f:01:1c:36:53:
36:37:d0:e0:34:b1:d4:21:0d:b0:97:8c:27:21:e9:26:ab:3c:
5a:2d:54:12:33:48:83:e8:f0:97:37:56:ae:2f:54:42:8f:88:
29:01:1f:38:7c:fd:64:c2:82:b0:c5:6c:53:0b:2d:4e:90:da:
04:ed:4e:47:71:a0:8c:1e:11:c6:e9:88:a0:ba:41:7f:eb:29:
db:c8:a2:51:86:de:88:a1:50:b7:cc:8f:61:ac:15:df:ac:82:
13:78:e5:62:61:0c:ea:fd:25:80:11:f8:14:e4:71:56:74:0e:
32:da:e1:22:4d:8c:75:9b:d8:01:c6:c5:dc:ef:78:32:7a:1b:
9b:ed:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:34:04 2025 by rpki-client