Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: JK5VWq4eeLd3YwZ6Iv+PJ97ycW1hOJmFWuaNdlQCsaM=
Subject key identifier: EB:B0:28:24:84:FB:A6:6F:AC:F1:AC:F8:F1:CD:B4:0E:6E:1E:3F:83
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 0197B88F342538DB4313D7D9C6AD74D27166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 0554
Signing time: Sat 28 Jun 2025 22:01:22 +0000
Manifest this update: Sat 28 Jun 2025 22:01:22 +0000
Manifest next update: Sun 29 Jun 2025 22:01:22 +0000
Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: ipvW0oZ7miq0Ck7gpPViKOUQlahKurU8gwyQocT0Yek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:34:25:38:db:43:13:d7:d9:c6:ad:74:d2:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Jun 28 22:01:22 2025 GMT
Not After : Jun 29 22:01:22 2025 GMT
Subject: CN=ebb0282484fba66facf1acf8f1cdb40e6e1e3f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:b6:57:e7:64:e3:aa:6e:af:40:0f:c9:11:
23:0a:0b:1a:5c:2c:19:1d:5b:5a:48:3c:88:2e:dc:
dd:59:36:ac:cc:2d:83:1c:d1:5f:4d:a6:fb:90:3a:
ed:91:46:f9:68:b7:f2:6e:c2:0e:5f:45:97:2d:1f:
27:18:41:fe:6c:83:9d:e2:f5:1e:eb:a4:c6:71:0b:
fd:d3:85:95:de:e3:eb:6c:3d:97:05:6e:cf:43:13:
c7:72:03:42:23:f3:35:34:e0:8d:52:0c:1d:fb:97:
1c:8e:c3:66:ea:6a:81:dd:ad:0e:50:92:35:48:66:
45:a3:28:34:bc:b2:a7:67:62:0c:84:65:bb:e8:96:
9b:15:6d:fc:f8:df:df:7e:d5:ef:51:b8:cb:73:96:
4b:56:05:06:8f:62:f6:53:f1:c0:07:b5:fa:fb:24:
fd:48:34:70:b7:44:8d:81:2e:42:2e:de:dc:35:2c:
a0:cc:cf:80:85:20:6d:29:c4:af:d6:23:d1:55:70:
3e:fa:14:91:6e:e4:5e:3f:91:9e:ae:cf:aa:8d:9e:
5b:a5:0d:19:be:b4:65:17:40:11:ed:e2:c4:f0:0b:
7a:e1:61:70:d8:4b:2d:7a:b6:34:e3:97:65:d5:8b:
d8:08:32:99:a5:e3:e1:cb:bc:0b:ad:ab:76:e5:ef:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B0:28:24:84:FB:A6:6F:AC:F1:AC:F8:F1:CD:B4:0E:6E:1E:3F:83
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d5:ad:7b:86:f7:66:fc:fb:ca:fa:12:ae:eb:f7:74:5d:74:
35:74:c2:c1:c4:5c:2d:58:98:6e:40:f2:74:ea:f0:dc:20:ac:
a1:9a:98:e4:35:f5:7c:21:b0:2b:4c:ae:19:23:b4:fa:e3:8e:
3c:d0:19:79:33:5f:b7:ed:c0:c2:e8:92:a6:76:89:83:27:ca:
d1:3e:ca:69:18:43:e5:a7:81:35:ff:d3:f3:d8:d3:f4:54:d0:
d6:ed:e9:7e:82:05:86:cb:03:69:99:9f:3c:3a:48:fb:7f:35:
51:53:88:c0:15:10:85:fd:1c:c2:05:50:b0:9a:09:4d:67:dc:
c2:3d:85:8b:49:d6:1e:2b:2d:9c:39:9b:f0:f2:6e:3c:3a:2b:
82:27:a5:38:46:10:8d:63:9e:0b:60:ca:89:e4:ca:9d:3c:05:
94:94:a0:f0:a6:c0:1b:02:4e:81:de:3b:9d:c8:24:fc:53:69:
f2:78:65:7d:cc:62:77:79:16:06:71:b3:fb:27:f2:73:f2:6a:
97:39:ba:4e:7a:58:73:f1:59:2e:92:dd:03:ea:cf:ff:38:ce:
d6:75:42:71:61:48:58:c5:f5:d7:ef:cd:04:86:13:6a:be:53:
2e:35:ff:85:4c:6b:a1:d9:5e:ac:ac:00:7a:c8:3b:ba:43:1b:
e8:f1:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:58 2025 by rpki-client