Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: J7flzhMUIvxWiNkfxjReNKg6o58aPbyspL1KIBGcBXo=
Subject key identifier: A0:76:9C:FF:06:D8:EC:D2:1B:B3:88:2E:D3:13:C4:55:66:98:F2:3A
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 0197B6A06B57630A178A2EA1A1860EFF7239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 11DD
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: m5VvbsU+e1OKVyuEg/cxs8IcCZIUt8gwcUoxXBQU7vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6b:57:63:0a:17:8a:2e:a1:a1:86:0e:ff:72:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=a0769cff06d8ecd21bb3882ed313c4556698f23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:39:be:a8:ca:d3:aa:69:09:24:be:14:5c:
9d:1b:ef:05:81:20:55:34:0c:36:22:6a:bf:e4:99:
eb:3b:bb:1e:a0:ba:32:05:7b:fc:38:8c:34:06:b9:
8a:90:81:62:9e:9e:31:3c:e1:64:b0:d6:41:c9:c5:
5e:1f:cf:d1:0f:9a:fc:60:ef:17:b1:44:91:71:ec:
b5:05:65:2d:fb:89:db:4a:68:40:ef:f0:4d:e3:21:
ab:ff:af:2a:9e:6c:d0:01:be:e7:bd:7c:d6:6b:ab:
59:0a:24:e2:51:80:3b:d5:40:10:d3:cc:d5:de:6b:
3d:52:35:33:44:d7:2c:9c:b5:fd:7a:20:3f:cf:78:
42:08:9a:ed:47:3c:bd:73:37:5e:51:48:fb:8e:9e:
7d:7f:b7:0d:17:db:83:d1:bd:b5:95:cc:7a:62:ff:
97:ec:49:da:3a:b3:57:b7:e6:f0:62:5c:aa:77:c3:
1f:5c:4e:47:cc:9c:31:6d:3c:74:a3:a1:00:bc:61:
4b:31:ac:5e:14:63:0c:a7:58:1f:38:33:c9:57:ca:
40:d1:37:a5:8f:95:5f:1e:29:83:c3:5b:ab:ed:f7:
bb:d4:1b:85:9f:ca:1b:99:9f:4a:84:d8:ff:26:1d:
8e:51:36:f9:ae:6f:86:13:f9:26:49:c1:47:5c:92:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:9C:FF:06:D8:EC:D2:1B:B3:88:2E:D3:13:C4:55:66:98:F2:3A
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:55:0d:5f:0a:30:26:a9:6a:66:26:cb:41:dd:dd:51:16:b1:
30:62:bd:2c:f2:9b:26:89:fe:ae:6b:91:4c:dc:2f:55:16:9d:
d3:40:20:7b:5c:8f:58:53:cf:bc:12:da:92:69:cf:6b:d1:c5:
e8:b2:27:85:b5:c2:dd:5d:85:49:91:6a:40:38:89:94:53:28:
36:3a:5a:11:db:76:bd:23:87:f3:68:0b:fe:eb:56:c9:f9:18:
6c:47:d5:ac:f9:c5:d1:5a:ae:86:a8:bb:d7:d2:d0:11:4d:4d:
e6:17:06:9d:d1:be:51:bd:ba:58:00:9c:7c:32:42:12:05:42:
27:fb:ca:d0:09:e6:fe:eb:7b:df:65:18:a6:82:e1:e2:f6:0b:
81:6b:1d:10:76:ad:93:2a:7e:d7:fa:59:ad:6b:c7:c8:00:bb:
1e:4e:07:8a:c0:7b:3e:d3:0b:5e:bf:10:64:de:8c:72:b1:17:
9c:91:66:7b:23:01:9c:e2:3b:b9:96:29:de:e1:72:3a:e7:b2:
65:1b:10:93:9a:9e:ee:ea:da:9c:2e:a9:6e:93:b9:ca:21:ef:
3c:4d:96:ee:72:41:1d:e5:f1:38:fd:cf:68:4d:0e:f5:56:dc:
20:53:d9:7b:be:cf:d0:ca:eb:14:58:4f:e4:13:10:66:cc:77:
79:02:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:55 2025 by rpki-client