Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: aRC68uhCyks2T2Tzn5Ft/uYG53otojdtXuZzjU3pp5Q=
Subject key identifier: B2:2C:5D:1F:C4:20:B5:5C:E9:FA:9B:79:DA:48:9C:2D:B9:30:4E:0C
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 01975347264BFA64A0CAD3DBBA215D95AE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 044A
Signing time: Mon 09 Jun 2025 06:01:01 +0000
Manifest this update: Mon 09 Jun 2025 06:01:01 +0000
Manifest next update: Tue 10 Jun 2025 06:01:01 +0000
Files and hashes: 1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: Pyi6K+/juPBsqy6bltSabFErp7Xka0bjiH50VolTIjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:26:4b:fa:64:a0:ca:d3:db:ba:21:5d:95:ae:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: Jun 9 06:01:01 2025 GMT
Not After : Jun 10 06:01:01 2025 GMT
Subject: CN=b22c5d1fc420b55ce9fa9b79da489c2db9304e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:05:97:00:d7:bd:5a:d8:cf:7e:50:3f:6e:8f:
7e:e3:9d:6c:0c:00:63:dd:dc:af:fd:42:33:b1:1a:
1d:fe:1f:62:47:99:91:49:eb:9f:9c:c3:a8:26:09:
58:3a:5e:4a:17:a6:96:d2:c4:ac:ba:45:40:73:88:
6c:e8:d0:e6:b8:a6:76:9d:cc:48:06:8e:bc:93:28:
c9:af:e1:0d:be:db:bc:e2:cb:a5:a3:d1:c6:de:ca:
14:98:df:d0:29:60:e1:ab:6d:e5:c2:d4:a0:a1:50:
f1:37:6b:2b:da:3b:d1:00:a4:85:06:ae:a6:d1:25:
80:67:da:0b:26:3f:60:08:c8:e3:70:8e:dc:0b:13:
07:f5:3e:94:f2:62:0e:88:8f:5a:55:80:eb:84:8d:
d0:0b:f2:8b:42:0b:96:28:64:b8:70:05:53:14:91:
06:40:be:24:78:4c:05:ec:5e:89:22:d6:82:6f:d1:
5e:4b:2b:68:ad:e0:00:26:3e:35:80:3e:d8:5a:11:
2f:17:e1:08:14:2f:8f:88:18:5d:17:51:0f:6b:aa:
6f:df:b7:e1:64:c3:25:69:cd:eb:87:17:e9:db:ee:
cb:3a:03:9d:f0:f6:a1:4d:a7:bf:e6:b0:3e:9d:db:
f5:42:af:7d:c8:de:6d:59:20:96:42:f6:65:f0:f9:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2C:5D:1F:C4:20:B5:5C:E9:FA:9B:79:DA:48:9C:2D:B9:30:4E:0C
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8b:b7:69:bc:be:c3:7f:fe:3c:12:bc:af:77:00:e1:41:f8:
da:26:d7:38:f1:78:88:7c:1f:3f:0f:15:c1:bc:81:f2:ac:b2:
8d:83:0e:21:dc:e3:c7:8d:f9:e3:2a:a2:ff:87:89:e3:b1:6f:
01:ef:d9:05:f9:6a:0d:11:8c:cb:44:1b:9f:0a:99:54:9c:89:
4f:e7:b2:02:ae:6a:31:13:d9:92:30:6d:eb:f4:06:bd:12:79:
a0:41:0a:e7:74:1a:b1:eb:73:b5:f7:65:6a:a7:95:51:9a:b1:
84:31:d6:61:04:93:5c:f2:6a:a5:fd:cc:29:92:7d:1b:bc:06:
13:d9:17:ef:8f:bf:f5:a4:1c:72:16:ea:54:a3:d1:76:be:66:
80:17:4f:f5:55:e3:18:55:32:b1:58:b6:eb:91:dd:d1:f2:ad:
37:7b:d8:af:30:25:9b:5e:c5:7b:1a:03:f4:54:57:94:89:69:
35:81:32:62:5c:17:41:05:38:d0:e5:7b:28:a7:74:14:7a:71:
01:75:c2:de:a6:f2:74:1c:d2:e9:8d:60:37:5a:8d:bf:7f:1d:
0f:24:8f:90:cf:d9:af:89:76:3f:83:6e:1d:b3:1d:d2:d3:7c:
2c:7c:45:d5:10:b7:f2:4b:03:41:b6:7f:5c:aa:60:f6:aa:4b:
7a:77:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:04:23 2025 by rpki-client