Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: h8wwumHYe/P6QePXOwuZm6+P1CFjPgNhP2R103Al5jc=
Subject key identifier: B7:89:7D:67:4C:55:45:A3:51:B8:D1:AA:1E:96:63:C8:2D:94:95:11
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 01976E5028C714897EE7F98805D949F00959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 0353
Signing time: Sat 14 Jun 2025 12:00:36 +0000
Manifest this update: Sat 14 Jun 2025 12:00:36 +0000
Manifest next update: Sun 15 Jun 2025 12:00:36 +0000
Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 8ioIFrsqnWJnnTyHXF922qaaeBJ4NS28VpFQBfKJPoQ=)
2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:28:c7:14:89:7e:e7:f9:88:05:d9:49:f0:09:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Jun 14 12:00:36 2025 GMT
Not After : Jun 15 12:00:36 2025 GMT
Subject: CN=b7897d674c5545a351b8d1aa1e9663c82d949511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:c0:7f:f6:e7:ff:d0:c6:d1:b3:56:5d:e5:
7c:5c:3d:e2:cc:ad:b4:73:a1:30:48:39:20:96:c5:
49:03:ac:55:3e:a3:a1:18:72:0d:d2:04:dc:70:94:
8e:99:88:ce:6c:e6:5a:0a:b6:4b:20:27:73:07:d2:
30:7f:fe:53:af:ad:5c:04:d7:81:9e:80:c0:84:12:
00:ed:92:9b:04:d3:6c:d0:79:a5:91:88:0c:13:0d:
89:fc:f1:62:b3:61:26:4f:70:cc:fd:0a:e1:9a:d4:
8c:b0:b6:c7:8f:14:ad:cc:15:6e:f3:05:98:cc:2b:
da:e5:f8:fd:6b:0e:77:e5:99:7b:aa:9d:03:43:d7:
73:8e:ea:12:0e:7a:2b:a5:b4:75:01:28:f5:5d:77:
bb:d8:3a:3d:35:e6:b1:2b:6a:fe:19:78:8b:b4:77:
97:85:55:7a:30:eb:1b:e7:c4:e9:85:64:d7:1e:fc:
50:9c:64:0d:bc:f6:53:15:5d:27:78:73:5b:fd:9f:
17:a8:8f:cd:da:24:18:71:e4:1b:5c:67:91:af:3f:
40:20:21:cc:ef:a7:b3:77:0d:37:5c:34:9e:ba:4f:
7b:6f:3e:f1:39:65:52:89:d5:fc:32:00:5e:aa:e7:
fa:cb:7c:93:0c:c8:93:eb:64:13:e3:b9:6d:f2:1a:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:7D:67:4C:55:45:A3:51:B8:D1:AA:1E:96:63:C8:2D:94:95:11
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f3:ad:c5:31:8e:81:ae:6a:73:85:67:cc:b8:c2:75:6d:0e:
78:5a:1e:73:d1:72:21:8b:0c:58:d5:27:e2:25:83:1d:42:96:
13:e1:95:ae:48:42:b2:cf:72:5b:fa:bc:49:2c:6d:a0:b2:7d:
4f:d4:d5:d5:d2:7a:a3:b3:d4:f2:79:ae:6f:33:90:9d:14:5f:
8f:f1:fc:a0:a8:76:37:9d:ba:5a:8a:27:77:4e:bc:2e:ca:a4:
9f:9d:90:03:cb:40:67:d7:23:e7:8e:74:26:fd:94:4d:43:e1:
c2:6e:0f:f2:b8:31:44:8b:a0:85:40:82:df:7c:6a:f3:7a:4d:
71:ac:b7:01:8d:63:94:bd:5b:f2:fe:c3:41:55:81:84:90:83:
28:c5:0a:05:92:f4:b9:ae:96:b4:a7:ba:1d:7c:ea:8f:a9:b8:
40:5d:51:d3:c9:52:23:96:8f:8f:b6:b2:18:c8:aa:18:ef:ca:
8d:b0:bc:57:da:a1:03:65:65:cd:15:0f:53:40:f6:25:a2:28:
f0:91:8c:29:e0:48:2f:85:c1:29:2b:2b:fa:db:cd:9c:b7:a7:
46:88:2e:7c:f2:d6:07:36:d5:90:27:d2:5f:91:0d:ae:99:bb:
55:8e:d2:70:86:6f:a7:b0:35:c3:d6:39:dc:8f:d1:a1:4c:cf:
52:7e:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:09:53 2025 by rpki-client