Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
File: oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json)
Hash identifier: F60Zykm8fcA1H/5Sj9wYDMvBV4YENeLTpBKT5PqfgSk=
Subject key identifier: 67:43:C8:AE:77:62:82:21:63:E6:8E:6F:C7:BA:DD:06:12:1F:96:B4
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial: 0197B6A1F1FA6969789E507F2D9B7D799571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
Manifest number: 0578
Signing time: Sat 28 Jun 2025 13:02:35 +0000
Manifest this update: Sat 28 Jun 2025 13:02:35 +0000
Manifest next update: Sun 29 Jun 2025 13:02:35 +0000
Files and hashes: 1: F9oMnlBaYcvudHdAu16anIbAsho.roa (hash: Y2+lSCzHCoY6IW2lijDN5QVdOABERpdjfmMwMnErXhg=)
2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: cn2RNde1ETSq4gOB/DIQeU15AfFCi9fEMY4O++8oOnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f1:fa:69:69:78:9e:50:7f:2d:9b:7d:79:95:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Validity
Not Before: Jun 28 13:02:35 2025 GMT
Not After : Jun 29 13:02:35 2025 GMT
Subject: CN=6743c8ae7762822163e68e6fc7badd06121f96b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:e0:52:a3:a0:bf:49:95:54:34:56:74:db:
04:20:81:84:2e:bf:2f:bc:c1:ae:f6:85:a9:5b:6c:
84:c6:7d:62:cd:5a:c9:ff:64:c7:c4:1f:7c:a8:9a:
d1:6b:5d:ed:57:f3:84:71:8b:d0:3c:0b:75:ee:ab:
27:71:26:b2:bf:8b:b5:4a:86:0a:be:e8:36:12:a2:
64:3d:7d:b3:4d:16:af:35:c7:5f:20:d9:e6:e9:62:
5b:de:1a:d6:df:39:96:65:bf:02:ff:19:16:fa:af:
50:26:f1:86:c3:8f:6e:dd:30:4f:f0:19:bc:c1:33:
14:ab:4f:7e:ee:fc:0c:55:8b:c0:30:67:61:b0:ab:
7e:65:b6:88:d5:3e:e6:ad:8f:bc:ab:66:b9:50:6b:
84:9a:32:cc:c2:bf:1a:ed:b3:17:d4:50:15:41:a7:
b0:62:3b:a0:1a:24:f1:c5:51:8d:e6:6b:c7:70:e2:
58:53:3d:e1:7f:73:50:b2:03:66:d0:47:81:27:e1:
cc:c2:91:c1:70:d5:1d:85:12:32:a4:49:ad:a6:8b:
6d:46:0e:06:e7:6c:40:0c:a0:e0:f9:f9:e2:16:89:
5a:5a:33:bf:1a:08:de:f6:f8:34:b9:8c:58:4c:06:
e4:7e:bc:23:20:e9:3d:11:6b:e9:84:14:6f:a6:79:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:43:C8:AE:77:62:82:21:63:E6:8E:6F:C7:BA:DD:06:12:1F:96:B4
X509v3 Authority Key Identifier:
keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:25:a7:16:90:a6:c9:2e:0f:9a:ba:85:85:85:c8:42:d1:d5:
e0:08:9c:ba:e4:54:7d:8c:6f:b6:ac:7b:b5:68:10:be:05:41:
3c:58:cc:10:ad:13:6f:f1:48:7b:d5:4c:2b:3e:a1:a7:6f:b8:
ab:71:53:1f:a4:ce:0b:55:a2:5e:af:ff:9f:29:2b:5d:a1:bb:
57:08:23:07:d5:27:b4:a6:81:19:73:aa:7d:2e:6a:fb:63:cc:
33:ab:53:90:74:0b:26:3d:34:28:3b:f0:05:34:39:96:b0:54:
22:24:44:e8:17:2e:c5:6d:cd:3d:c3:6d:6f:42:02:a2:1b:73:
3a:d1:25:0e:57:2d:d2:2d:68:c1:76:64:7b:6d:18:fa:60:8e:
fc:2a:a4:cf:ec:0a:d0:55:65:46:76:3a:52:fd:93:b5:aa:c9:
f7:5e:5d:9a:72:c2:99:7d:f1:e1:6d:8f:1c:56:68:9d:cc:f0:
3e:bd:f0:c8:a6:f6:1a:12:f0:13:6b:2c:88:e6:31:ef:a1:68:
83:24:f7:ed:16:11:16:80:e2:aa:a9:4e:29:21:22:56:25:b5:
df:44:c4:c3:57:11:f8:d8:f5:fa:83:22:11:89:9c:a7:25:3a:
15:f2:4e:b7:6c:5b:09:33:22:56:6f:61:b1:36:93:b7:e0:47:
38:bb:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:24 2025 by rpki-client