Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
File: Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft (raw, json)
Hash identifier: ycwl0tbyQH/4nrYIW7IQg+hmypiBl3ySlA1esrv4BZ4=
Subject key identifier: A2:B9:4A:32:44:36:C9:1D:CE:7F:45:4B:19:16:72:AB:AF:2F:60:EE
Authority key identifier: 3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
Certificate issuer: /CN=3aa9e9832ed25de78c3ce0501208261066281f51
Certificate serial: 0197C492E46E64787677B6A279CB738732CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
Manifest number: 1004
Signing time: Tue 01 Jul 2025 06:00:50 +0000
Manifest this update: Tue 01 Jul 2025 06:00:50 +0000
Manifest next update: Wed 02 Jul 2025 06:00:50 +0000
Files and hashes: 1: Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl (hash: yLfDi7uCqhZNRIu6L6ZnZLGV4uuyM0A+r0GgOOC9xlY=)
2: aWYIXcaJkiVxLLibbCxl3jRBEqg.roa (hash: is1rfoaga6D1caCReE6B6u2V3E2PMjX4LQvHyaYSnhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:92:e4:6e:64:78:76:77:b6:a2:79:cb:73:87:32:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa9e9832ed25de78c3ce0501208261066281f51
Validity
Not Before: Jul 1 06:00:50 2025 GMT
Not After : Jul 2 06:00:50 2025 GMT
Subject: CN=a2b94a324436c91dce7f454b191672abaf2f60ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:65:46:04:9e:d0:cc:ed:af:f6:97:42:6b:
99:8c:db:9e:2a:20:51:04:d5:f8:5f:47:eb:30:db:
59:2a:9a:86:c2:7d:a2:2e:43:1f:7b:29:20:dd:45:
63:ad:74:6d:a6:6a:f4:c1:11:e8:9c:68:52:fe:4e:
8b:c3:cd:0b:ae:0f:84:c3:97:13:4c:07:a4:eb:d2:
bc:d2:a6:7a:9a:26:70:b7:ac:e6:14:0a:91:f4:a2:
ad:c8:f8:72:e8:ab:91:02:5d:75:db:f1:a4:3b:b1:
a8:85:38:75:76:0e:91:1c:2f:a7:4a:7f:27:33:6a:
97:53:53:cf:16:59:e1:8a:d6:a5:d7:73:f4:2e:c5:
3c:f9:9a:f2:08:d9:d8:89:f5:bb:7a:7c:fb:a3:00:
29:6e:c5:99:40:ba:af:08:06:47:df:c7:43:f7:02:
8c:2a:37:81:a3:18:9d:b0:fb:96:50:bf:f1:4c:57:
14:3c:cb:1f:c9:16:02:09:fd:fa:39:0e:24:02:f4:
01:e8:88:87:86:9a:a2:3a:a8:af:7e:f3:10:f4:02:
63:64:54:9e:ca:a1:1f:50:31:53:6b:b8:69:91:74:
b9:79:28:83:9a:d8:26:b9:7b:91:68:c9:0a:d5:0a:
cb:31:d7:02:c8:37:59:50:d0:ac:a3:76:b5:e5:6e:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B9:4A:32:44:36:C9:1D:CE:7F:45:4B:19:16:72:AB:AF:2F:60:EE
X509v3 Authority Key Identifier:
keyid:3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e7:63:20:f0:c1:35:cd:b1:14:0c:d8:3c:de:a1:90:1e:b0:
4e:85:4d:b5:2b:6f:cf:48:b9:e1:71:2f:12:87:23:ac:22:e6:
9d:62:a6:3f:c3:9e:b0:15:81:4c:0e:98:43:66:49:36:34:d5:
79:e7:08:f2:89:cf:fa:ed:79:ed:4d:63:48:28:c0:0f:bd:88:
57:af:db:ac:76:c4:a9:72:1f:7a:bd:ac:1d:24:d2:9b:06:5b:
d3:3c:40:56:12:63:73:e6:8a:e6:0c:6e:01:c8:a1:3d:80:ea:
88:75:98:5d:df:ff:3c:0e:4a:92:31:09:a2:de:cf:24:d3:a5:
71:86:15:21:9b:31:71:c1:1e:2d:ed:66:b8:6d:13:a4:8a:5c:
a9:fb:ad:78:6a:10:ca:fb:f1:41:25:13:fe:39:10:65:bc:fa:
d4:7e:fe:28:ba:54:24:fa:58:56:37:6b:02:6f:ee:2f:bf:60:
b3:9f:2f:e0:f4:27:f5:78:b4:d1:81:64:a3:a2:cb:27:51:f4:
c3:84:b7:14:d8:06:e3:9a:ee:80:fc:b5:c2:1f:d0:87:7a:e4:
d7:68:a7:07:a5:7d:d2:91:eb:34:14:7e:2b:3a:d4:07:b0:fd:
c1:9c:e5:96:d8:f2:6c:e1:8a:d1:eb:d6:0c:8c:db:a6:66:cc:
d4:ec:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:10:46 2025 by rpki-client