Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: dFZOz2ZlWqUsK/Z2FZFsLm2/tq7e+tm64ogaHcNUrfY=
Subject key identifier: 9B:5C:EA:FC:EF:39:76:AE:19:84:96:BA:9C:59:5D:06:2B:75:07:BE
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 0197B7EAD03070A081E53A8DA1C404B1B149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 0F1B
Signing time: Sat 28 Jun 2025 19:01:48 +0000
Manifest this update: Sat 28 Jun 2025 19:01:48 +0000
Manifest next update: Sun 29 Jun 2025 19:01:48 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: YD3K6MpY4+4rFvIWYYM6a5pyOxZ6q+hUS0C8LtOBpI0=)
2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d0:30:70:a0:81:e5:3a:8d:a1:c4:04:b1:b1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Jun 28 19:01:48 2025 GMT
Not After : Jun 29 19:01:48 2025 GMT
Subject: CN=9b5ceafcef3976ae198496ba9c595d062b7507be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:2a:a7:a6:ee:c0:65:81:58:41:63:8d:27:
77:18:a7:cc:38:e6:70:b4:96:00:7b:f0:75:cf:45:
e9:36:09:f3:cb:6f:5e:b9:10:1b:a5:25:76:d3:77:
b5:28:12:20:73:df:43:1c:b8:4b:4b:05:fc:56:1a:
2c:62:3d:0f:6b:c6:e3:41:4c:d4:a3:0e:21:ea:1e:
52:ff:d9:5b:a1:f3:de:31:b6:a6:89:52:f1:d7:de:
74:5c:55:0c:6d:0e:69:a5:7a:9b:3f:ca:5e:f1:a8:
e2:e2:13:51:67:40:e1:6f:88:00:88:a5:b9:fa:95:
26:2d:14:db:dd:0b:a1:9e:7c:ec:cc:e5:5a:e4:b5:
1b:f1:b4:d4:9a:15:8f:0f:4d:28:2d:75:df:39:5c:
92:09:74:87:84:88:d8:eb:05:ab:59:44:30:95:f9:
9c:aa:6d:f9:b6:18:87:eb:00:16:8c:ad:a4:3b:eb:
06:bb:9c:a1:84:55:bf:ce:4a:03:c0:6f:63:dc:9b:
dc:8c:e0:d5:e2:cd:63:01:d3:54:82:17:ca:20:05:
28:2c:bf:65:2b:9f:0a:d1:7f:9c:8f:2c:5a:63:41:
11:c1:55:d8:f6:9e:71:01:17:fd:ce:ff:b7:c5:dd:
76:fc:c2:94:24:05:a7:1b:a4:fb:79:10:fa:c7:1f:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:EA:FC:EF:39:76:AE:19:84:96:BA:9C:59:5D:06:2B:75:07:BE
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b5:a4:62:72:e2:cb:2e:c9:d1:df:ed:ce:8a:9b:f7:b4:40:
21:f5:be:87:bc:a3:88:f3:4d:e7:83:34:2d:fc:60:70:a1:69:
e6:a5:db:43:38:85:7c:89:83:c5:26:2c:e1:80:8f:02:3a:ea:
52:d4:2c:30:5c:9d:ac:d2:1f:a7:97:b7:de:63:8d:0e:ed:91:
97:64:fc:ef:69:5f:22:ea:2b:5f:4e:6e:06:88:9b:4f:9a:98:
f8:69:4e:49:2a:4e:cf:e0:7e:9f:14:25:09:37:56:31:e8:2f:
5a:02:ca:95:44:6c:7b:30:ea:26:b6:ae:6a:52:3e:05:3b:24:
cc:6a:99:b5:7a:b5:6f:b2:76:23:b8:7c:5b:68:2e:18:8a:14:
90:37:fa:62:e4:8c:fc:a8:5c:49:3e:ba:b4:e4:9f:a0:14:60:
74:52:25:bf:92:9e:66:6d:5b:61:ed:a6:7f:f3:24:ad:09:5f:
74:88:ab:41:c1:24:f2:a0:f8:87:20:c7:fc:88:f1:ec:c0:0d:
65:ba:5a:5f:73:8c:f4:67:51:6f:03:02:ae:26:cd:d8:62:92:
3d:37:68:22:78:69:9c:65:2f:f6:73:53:fe:43:39:b8:6e:34:
ca:33:19:de:74:7b:55:00:55:22:59:29:f3:55:aa:6e:48:7e:
aa:18:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:00 2025 by rpki-client