Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: iP1mT31Mws7P2184VHPACWSopaGiPOXa413OyJrM0d8=
Subject key identifier: 3B:A4:AC:CC:4D:15:4A:24:1A:08:85:8E:60:BC:4B:1E:20:DC:EC:A0
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 0197458AFC01F41CCAE4121B04E8C6B1AA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0C67
Signing time: Fri 06 Jun 2025 14:00:25 +0000
Manifest this update: Fri 06 Jun 2025 14:00:25 +0000
Manifest next update: Sat 07 Jun 2025 14:00:25 +0000
Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: bLp1w/Y2dUd4cy3QwaVOzU3qZQTZvi4hgMGjO1db81M=)
2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8a:fc:01:f4:1c:ca:e4:12:1b:04:e8:c6:b1:aa:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Jun 6 14:00:25 2025 GMT
Not After : Jun 7 14:00:25 2025 GMT
Subject: CN=3ba4accc4d154a241a08858e60bc4b1e20dceca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:cd:83:df:d8:b1:84:74:d2:ac:70:ac:cc:
ba:dc:83:53:ef:33:bc:11:ef:e1:93:cc:10:a3:3a:
be:0f:05:f7:14:b8:f0:2b:64:df:f2:a7:ec:15:3d:
54:d7:59:13:46:51:66:5e:3f:0e:ae:c9:9b:1a:42:
38:5c:35:dc:6e:48:00:a7:6c:91:89:8e:ec:ca:57:
10:82:91:2f:54:5b:2f:aa:f5:9b:6a:8d:5f:fd:09:
b0:a1:43:ec:07:c8:2f:f8:41:ed:92:b7:ab:7d:a3:
16:4c:bb:6b:ab:15:37:f7:cc:2e:18:2d:54:10:0f:
df:13:a4:e7:20:d7:07:55:d5:47:7e:78:36:11:29:
33:54:47:03:52:0d:13:b8:60:18:c6:a6:ea:97:6d:
ec:de:47:e5:3d:c4:b2:52:69:7f:68:68:b0:c8:80:
f6:0c:51:3f:6d:52:fb:5e:c8:63:19:fd:8d:b5:40:
80:71:24:b1:83:55:f5:36:c0:00:ad:27:a8:d6:75:
06:81:4e:62:6d:c9:4c:f1:8d:83:bc:41:1b:57:54:
88:69:07:89:4b:76:18:93:32:b5:06:7d:63:90:d6:
1d:c4:6e:d9:e9:ca:63:d1:c8:ac:4b:06:e3:b1:86:
42:7c:f9:45:1e:26:e9:15:a3:81:87:ff:1d:82:f3:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A4:AC:CC:4D:15:4A:24:1A:08:85:8E:60:BC:4B:1E:20:DC:EC:A0
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:60:62:b9:50:09:44:b3:15:fd:b3:ce:78:f0:50:af:53:87:
62:00:23:c2:6f:bf:a6:1c:c8:cc:f7:f4:cb:82:b7:1f:cb:6f:
43:ac:5e:86:9d:6f:46:9b:6b:ad:78:c0:8f:69:74:1c:ac:3d:
5f:63:75:eb:d2:92:36:8f:b0:01:4e:5e:29:83:6b:8b:cc:a1:
21:fb:ed:16:08:bb:18:bd:a8:b5:93:db:20:43:a0:d2:56:a3:
e0:57:22:b7:bb:d4:32:ce:48:50:d5:ea:70:d0:dc:cb:f6:5c:
88:23:12:d8:23:c3:ce:bb:e9:ca:f9:03:68:eb:d5:2a:86:05:
82:2c:8d:51:cf:f3:bc:d2:b5:43:9c:e2:12:66:37:8d:6e:af:
f2:55:17:7b:10:d2:8f:62:0d:ca:ff:f9:b6:cc:19:2a:f0:61:
18:2c:0f:89:da:00:22:94:c7:94:7d:90:ff:4b:16:54:1e:30:
e7:e3:b1:97:18:9b:69:ec:96:89:df:bb:08:fb:43:9c:28:69:
06:72:3f:66:55:32:01:1d:0d:6a:49:8b:84:1b:e4:fd:14:db:
1d:42:fa:26:ea:a2:d1:dc:72:4d:86:d3:44:da:a7:0b:59:e6:
09:37:ff:83:28:d1:6d:1f:4c:24:dd:4d:9b:46:33:3d:49:e2:
b7:1d:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:08 2025 by rpki-client