Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: ktTf77gQmAo7/Bf43enavZgOlVWvscZ5A0XCHuNn0Fc=
Subject key identifier: 22:FD:EF:86:96:19:B0:6F:96:7E:22:29:C3:2C:4F:28:13:B2:45:7C
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 01976C61C150250DB4FDB0E43B9BB0323ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 0352
Signing time: Sat 14 Jun 2025 03:00:35 +0000
Manifest this update: Sat 14 Jun 2025 03:00:35 +0000
Manifest next update: Sun 15 Jun 2025 03:00:35 +0000
Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 9brwT3Ed2q1eJeGupy94clGqG+FUT9Yb/zxkeoMPBGY=)
2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:c1:50:25:0d:b4:fd:b0:e4:3b:9b:b0:32:3e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Jun 14 03:00:35 2025 GMT
Not After : Jun 15 03:00:35 2025 GMT
Subject: CN=22fdef869619b06f967e2229c32c4f2813b2457c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:bd:4d:93:64:5a:ea:5c:25:2e:54:48:b0:
1c:5f:aa:a5:70:bf:f8:c5:e1:e2:42:cf:d3:06:42:
40:08:e8:1c:09:65:4e:6e:1a:5e:51:55:d5:70:45:
aa:85:b5:ca:19:cc:7c:c2:d2:a1:b4:55:f3:7c:e1:
d8:ec:12:c6:6a:f5:19:29:bc:22:47:ed:e3:5d:4f:
21:f3:8d:73:eb:29:fe:95:51:3f:85:ae:d0:1c:25:
25:f9:a6:18:1d:5e:a0:61:81:fb:cb:4f:af:ef:12:
4b:76:97:0a:42:d7:f8:fb:a6:38:fa:4a:7a:81:00:
0e:56:f7:2b:73:29:4a:63:d5:11:8f:ef:de:67:f6:
c7:af:01:dd:bc:f2:db:40:10:56:33:6a:02:42:39:
df:73:47:23:a8:f9:09:0f:fa:3e:af:0f:ea:df:f7:
56:4d:2a:5f:5e:d3:26:35:7a:92:fe:65:d2:d2:c3:
26:1c:e5:16:d3:27:19:06:61:01:be:a7:34:05:3a:
7e:97:72:60:00:55:50:fb:7f:2d:c5:02:4b:38:a0:
c3:07:9c:c1:24:3d:8b:c4:47:61:25:7c:e6:2c:ab:
23:eb:04:04:fb:25:94:df:af:9a:1f:bc:d8:af:a6:
76:ae:80:1e:b8:2e:aa:24:03:d3:a6:56:72:a0:7d:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:EF:86:96:19:B0:6F:96:7E:22:29:C3:2C:4F:28:13:B2:45:7C
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:30:05:c0:9e:68:0c:b6:1c:45:c6:87:63:ca:ef:02:c5:c3:
b3:33:a1:8c:ce:da:9a:b8:13:7c:96:af:a4:3e:62:b3:6a:c2:
31:02:e5:40:e9:1a:93:e2:30:8b:c5:88:55:ec:b4:6e:05:29:
91:13:53:07:0d:ec:9f:cb:40:69:91:03:19:41:76:09:0c:f4:
ef:e8:05:8f:81:4e:32:54:5f:a2:3f:7f:fc:f1:83:6f:2d:b1:
8f:f5:84:b9:74:09:c9:6d:d1:11:18:04:79:e4:4c:01:cc:6f:
ff:b0:44:b1:b6:90:45:ab:19:f1:e9:e1:dc:1e:3f:c5:1b:ff:
76:f6:c9:6a:27:1c:90:77:83:34:f3:ad:c1:78:2a:70:34:4f:
ee:45:aa:e0:0d:0e:6b:b0:d1:1e:01:49:0b:74:c9:b5:ea:14:
c6:2d:38:ba:a5:be:3f:12:ad:ad:44:18:9c:01:a6:93:2c:1e:
04:e5:33:94:b7:e0:d0:a7:50:ad:bc:d3:80:01:6c:5b:6b:3e:
b2:5f:9f:91:82:34:52:9e:cf:bf:cb:ae:31:9e:d2:da:12:88:
d4:8f:86:74:e7:17:fc:98:8a:6b:24:27:fd:c0:e2:e9:e3:98:
7d:a1:ee:a9:8d:2c:7a:f0:6d:6d:99:0d:b6:21:cc:12:36:9b:
05:a1:83:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:23 2025 by rpki-client