Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File: oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier: EjzSe+FWTV+WiI7ico3sZpqXZgzTWbqxnStu+YCXWMY=
Subject key identifier: B3:1E:E9:64:57:8F:17:ED:84:6D:76:56:A7:8E:56:C0:95:33:B8:B5
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial: 01974E581EB851D3A00B2EAEBDBC01DB93B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 07:01:27 +0000
Manifest this update: Sun 08 Jun 2025 07:01:27 +0000
Manifest next update: Mon 09 Jun 2025 07:01:27 +0000
Files and hashes: 1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: KysxD7Gdi2O5pnOuOlfhZSjooJwNr6cdoGXS4mjLa6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:1e:b8:51:d3:a0:0b:2e:ae:bd:bc:01:db:93:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
Validity
Not Before: Jun 8 07:01:27 2025 GMT
Not After : Jun 9 07:01:27 2025 GMT
Subject: CN=b31ee964578f17ed846d7656a78e56c09533b8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:d7:d4:06:65:c4:50:59:80:52:ef:89:d3:
05:7d:68:fa:45:cf:db:1d:2c:86:06:c8:31:2f:26:
fd:47:cd:b6:69:0a:20:90:75:ff:44:6d:46:7d:b3:
52:57:07:28:3f:7d:72:ce:17:9b:f8:e9:7a:7e:02:
10:12:fe:18:7b:86:22:70:bc:05:60:45:a2:4a:07:
41:29:0f:b7:30:30:98:a7:f9:39:0a:14:21:d1:ac:
d2:94:73:a5:c2:dd:61:c8:10:95:a6:2b:3d:b1:5a:
d6:cf:75:8d:aa:fc:1b:1a:c9:d5:fe:3b:ce:6f:72:
fe:64:b0:75:0c:7b:a3:51:4a:bb:8d:36:6c:b3:9b:
65:54:37:a8:c2:fd:53:49:a8:83:f6:f0:9c:5a:a0:
90:fa:51:ee:5f:7d:5e:74:75:b1:91:0a:ee:31:10:
d2:bf:23:6e:de:61:14:0d:36:7e:19:ab:86:95:28:
3c:c3:4d:4b:1f:44:84:52:d8:f5:48:a6:be:9f:4e:
d5:ae:6d:19:72:f4:a4:12:26:96:de:64:81:99:3c:
1b:7d:00:fb:40:03:dc:ae:75:b8:7d:f1:27:18:45:
ea:a7:ec:68:dc:d7:29:91:a7:cd:ea:ce:67:05:33:
9b:0d:4e:45:17:10:ae:4f:e2:1c:94:db:51:9c:e3:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1E:E9:64:57:8F:17:ED:84:6D:76:56:A7:8E:56:C0:95:33:B8:B5
X509v3 Authority Key Identifier:
keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:d4:cd:57:42:7e:38:6a:e9:46:08:8e:c5:c5:38:48:7a:70:
f4:f1:26:48:36:76:a6:ff:ea:da:89:de:c5:45:b5:c1:a2:52:
93:27:0b:91:14:36:33:9f:42:09:e9:74:36:fe:16:b5:fc:a8:
41:a7:20:eb:3c:f5:f8:76:c7:cf:c5:2a:33:2e:a0:2d:de:f1:
db:47:41:a7:39:d2:e3:11:18:2a:03:17:08:7f:dd:0a:d6:41:
70:3a:d3:fc:29:d0:5c:7c:7f:ba:7d:9a:a9:ea:69:c2:08:07:
38:a8:40:46:5d:b4:dd:e2:00:a5:79:05:ea:fb:8d:46:15:f2:
69:f9:e0:96:ce:6a:73:1d:38:2c:37:51:c8:af:ed:6b:f1:b3:
bc:b1:db:96:b5:c5:54:ce:c7:e3:b1:1f:94:3e:dc:9e:84:57:
3f:f8:6c:09:4a:92:04:3c:21:b2:5f:9b:48:fc:9d:62:fe:9a:
c8:82:88:b6:1f:ea:45:c3:33:16:0d:ab:f3:90:2e:0d:39:cd:
be:1d:0d:b2:90:9d:f5:4c:e4:04:fd:9e:be:5a:1a:e9:84:05:
5f:f4:49:20:1b:69:92:a8:1c:73:00:f3:19:06:9e:4f:cb:78:
c1:6c:9d:31:21:a1:49:e5:e2:28:9a:a3:90:b1:0f:05:a5:08:
5e:48:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:03:48 2025 by rpki-client