Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: 5Z3X/smpShq9IDs5ZeQzRY9m1TciVkjBtozryVpTuUA=
Subject key identifier: 8F:03:87:65:48:C5:45:94:54:2C:CF:39:36:A4:5D:A5:15:DF:70:7A
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 0197488BF8632D86B39B5D8EB124C6049471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 046E
Signing time: Sat 07 Jun 2025 04:00:22 +0000
Manifest this update: Sat 07 Jun 2025 04:00:22 +0000
Manifest next update: Sun 08 Jun 2025 04:00:22 +0000
Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: 6R6wNPpuMYwlOfyP9NzXH0DVe3rWu8hLKEBpd7eCbao=)
2: iCi2fS7ETh308D0HxV49gSj_2Oc.roa (hash: 8Z0U9uTAtysIVIgEvm+zkP+R4k0ov21EhkUk/LCqI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:f8:63:2d:86:b3:9b:5d:8e:b1:24:c6:04:94:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Jun 7 04:00:22 2025 GMT
Not After : Jun 8 04:00:22 2025 GMT
Subject: CN=8f03876548c54594542ccf3936a45da515df707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:5d:fa:7b:43:a4:32:95:1b:9c:20:a4:b8:
b7:b4:f4:bb:d9:28:5a:77:3f:ed:38:41:36:26:1a:
97:aa:7d:04:98:3f:6a:4e:ad:a6:98:3c:40:d3:f2:
c7:77:19:cd:8b:12:c8:8d:c2:bd:64:ac:66:3a:a1:
af:22:92:e7:0a:42:25:8e:ce:cf:4c:0b:ff:67:29:
89:3a:07:4d:c6:4d:68:9b:c2:e2:31:a0:14:44:9a:
ce:80:1d:fb:de:11:ad:9a:53:7a:86:46:20:7a:11:
ff:e3:dc:e1:27:29:3b:2a:c4:3d:17:b3:5b:f2:4c:
aa:4d:c5:e3:89:67:61:7c:94:d1:08:b7:71:4d:90:
95:bb:c5:1c:14:55:e0:4b:5a:55:82:e2:ee:44:50:
bb:f5:7f:99:f7:a0:55:5f:96:0a:1c:7f:80:d7:96:
70:2f:e0:6a:71:fc:1c:7b:6e:1c:50:39:1d:47:42:
ff:4c:25:34:b8:b7:11:f1:76:de:9b:0e:f1:19:a7:
b4:af:8f:00:8a:ad:65:fd:53:17:e4:48:fa:4e:d6:
17:a9:98:23:57:f9:f5:b4:ca:33:e9:d7:0e:e7:3f:
5b:d0:0d:c1:1f:27:2f:27:3d:54:e4:8e:e9:49:3b:
d6:de:45:a2:9b:0a:f1:f2:7d:68:15:7b:0f:05:da:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:03:87:65:48:C5:45:94:54:2C:CF:39:36:A4:5D:A5:15:DF:70:7A
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:88:ac:f2:7e:e6:fb:b0:4f:a7:e0:33:c1:b5:38:d8:18:f2:
71:1f:6c:08:f9:20:7c:f4:5d:26:b0:65:0d:78:47:83:f2:93:
39:67:6d:b2:5e:0a:d5:68:c8:63:f4:42:f7:5b:30:6f:2e:8d:
ef:59:dd:bb:29:eb:bd:cf:c0:0e:a0:6f:aa:76:c6:3b:2b:93:
37:df:e7:b4:04:14:7a:19:f1:bf:61:55:11:66:56:40:c8:41:
80:7b:06:49:cc:dd:fb:26:75:21:ef:91:25:9b:3f:eb:27:20:
e9:96:e9:22:cc:3a:18:01:ec:c1:b7:87:03:45:b8:fd:77:28:
7c:74:ff:67:3c:74:e9:d5:65:56:d3:49:6e:79:e9:10:09:0a:
5d:04:74:ec:d9:1e:86:43:37:e9:43:7f:b3:da:07:fc:85:07:
b4:0a:e3:a4:5b:0c:d7:cc:b0:04:48:aa:06:58:e2:b7:fd:94:
3b:da:3a:7b:08:d2:8d:93:ac:b2:2e:80:87:a2:fa:47:86:5e:
14:e5:36:04:d3:dd:d3:59:7e:89:fe:41:e1:6f:ee:56:fe:5f:
c9:47:55:60:74:38:58:8e:62:2c:82:fc:07:29:a5:13:58:1a:
1a:5c:fc:83:87:d9:f7:97:1f:a0:f7:fc:6d:2d:6b:57:18:a6:
35:2f:9c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:12 2025 by rpki-client