Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: UMFVLuTFHG9srAIzuN0YjkrluNJsHF/hv6DQnt7VQWE=
Subject key identifier: 76:FA:26:CB:EE:3A:4A:BB:9E:35:6A:D6:89:16:71:E3:A4:38:AF:7A
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019760CB582DFF683705ED1714BABEE43723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 034C
Signing time: Wed 11 Jun 2025 21:00:28 +0000
Manifest this update: Wed 11 Jun 2025 21:00:28 +0000
Manifest next update: Thu 12 Jun 2025 21:00:28 +0000
Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: vFs9dKy/Lwa0WS2aeECVILdPmCZjd/o4D+43zPg4RyY=)
2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:58:2d:ff:68:37:05:ed:17:14:ba:be:e4:37:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Jun 11 21:00:28 2025 GMT
Not After : Jun 12 21:00:28 2025 GMT
Subject: CN=76fa26cbee3a4abb9e356ad6891671e3a438af7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:51:42:9e:da:7a:64:7b:d2:f7:12:bb:47:
d6:5d:d9:06:e6:70:57:6f:a9:33:39:f9:0c:ac:9a:
67:7b:87:5e:73:67:e4:df:9a:6a:bb:18:0c:75:9a:
df:94:14:f4:66:1c:15:1f:78:18:08:b1:fd:37:c2:
20:a0:23:48:90:38:03:86:78:36:a2:26:27:9a:75:
b2:9e:e1:25:35:64:99:f7:31:79:1a:4b:4b:b9:30:
fa:ab:fb:45:5c:71:f5:6b:73:43:20:8c:3f:86:fa:
b1:9c:ac:17:cb:a3:94:27:5b:2c:ef:3a:a3:01:ec:
26:e8:c7:17:1d:86:5f:0b:5f:10:88:19:20:18:37:
b8:7e:91:bb:e2:9c:dd:19:35:72:a4:33:ed:d0:7a:
62:3b:8c:8d:77:d1:38:72:80:ae:47:b5:fb:6e:b3:
51:a2:db:e8:78:4e:3d:cf:a1:02:23:fe:40:9c:07:
db:ec:2b:b9:69:f3:50:96:b8:38:2a:2f:d2:9b:de:
36:38:37:08:44:d2:76:a5:25:0e:83:53:57:ab:6b:
80:7e:ef:05:fd:16:08:04:84:ec:44:78:99:e0:0f:
9d:8a:22:95:5a:57:62:ab:fe:75:73:e9:7d:9b:81:
5f:a4:38:66:51:4e:bd:c8:2a:f2:5f:3f:38:3e:0f:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FA:26:CB:EE:3A:4A:BB:9E:35:6A:D6:89:16:71:E3:A4:38:AF:7A
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bb:90:bb:b8:da:de:05:50:d5:ed:06:87:3c:f4:0c:8e:ee:
1a:23:af:73:16:ec:97:56:f3:77:57:b6:4d:8e:ce:ce:2d:b9:
8b:4a:3f:57:5a:d0:b6:bd:41:1f:bb:a1:01:d2:ec:88:d2:27:
1c:fa:c3:55:3d:5a:a8:ad:41:a4:09:9c:04:49:dd:f6:d7:4c:
ad:a7:ac:a9:22:85:de:88:d6:e9:ad:71:ae:0d:86:d5:24:ad:
11:22:7e:9e:a5:bc:04:2c:61:2a:68:4a:7f:ce:75:73:f8:f9:
54:f6:14:c9:96:e8:18:01:2c:7d:40:f6:1f:8e:dd:21:da:fa:
b6:4c:0e:84:20:bb:e3:6d:53:bd:15:2d:e5:0c:b9:4f:55:78:
98:fc:3b:71:8b:cd:bd:04:10:c7:ec:59:7f:b1:c6:41:6b:1c:
70:02:ea:a7:f7:64:25:af:c4:e1:18:59:17:ac:14:f1:eb:52:
47:19:87:9f:23:0e:04:36:93:be:6a:ef:c5:f3:96:48:ac:0e:
16:9a:07:2e:d3:41:34:a3:a7:8a:6c:26:ad:42:04:ba:d2:a2:
bd:ed:8b:d2:e2:35:a4:1f:f6:fa:a6:ed:8d:0e:4b:50:a8:34:
7b:86:9a:28:77:69:ae:3c:33:18:d1:91:5d:f4:64:a8:6f:11:
12:51:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:46:34 2025 by rpki-client