Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier: XHER/Pgm8x/0oK3vWrPwN/PO4q2a1DwoIB1SDdtRzxo=
Subject key identifier: 83:EC:BD:1A:EE:FA:21:3E:C3:FD:1F:28:E4:95:C1:91:E0:C3:C9:9E
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 0197B8214D6D74D5BAB5EE7A67197280FCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number: 0FB0
Signing time: Sat 28 Jun 2025 20:01:19 +0000
Manifest this update: Sat 28 Jun 2025 20:01:19 +0000
Manifest next update: Sun 29 Jun 2025 20:01:19 +0000
Files and hashes: 1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=)
2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: VHBejsfFROtmxz7hiHV2/gLxgz60hrHdCvbZ30412fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4d:6d:74:d5:ba:b5:ee:7a:67:19:72:80:fc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: Jun 28 20:01:19 2025 GMT
Not After : Jun 29 20:01:19 2025 GMT
Subject: CN=83ecbd1aeefa213ec3fd1f28e495c191e0c3c99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:76:5e:21:5d:41:a3:e8:b4:3d:b0:79:21:
d4:de:b7:cd:84:f8:7f:7a:84:81:4b:d5:50:5e:5a:
5a:99:f2:22:77:f0:a2:a2:47:e1:32:63:5a:27:c7:
0b:de:b4:79:2f:28:5e:c0:52:57:9d:d7:9a:92:5c:
59:e9:a3:62:af:41:a6:bb:f9:92:7e:c6:8a:b9:32:
7c:35:1b:17:ca:9e:b8:d3:8a:aa:27:26:df:71:97:
19:a7:a7:8d:71:3f:95:e0:1c:aa:c2:cd:9f:92:ab:
3f:03:2a:63:03:64:e7:b6:b9:b6:1a:12:af:d0:66:
ae:db:3c:21:03:02:06:24:a4:b3:70:e2:25:ff:2e:
26:3f:d4:ba:f7:d0:0a:bb:62:4e:c2:26:19:57:3a:
a4:2f:53:98:25:85:ca:b0:8c:b2:d7:2a:c9:fc:fd:
cb:cc:1f:5c:c7:9d:5e:58:9d:11:64:2a:c3:10:08:
b9:d6:ad:47:7b:f7:84:26:da:6c:16:52:3a:9f:4a:
49:4f:38:fd:33:3a:49:ee:67:e3:e7:55:0c:d5:2a:
76:1a:f7:68:57:f9:a3:c2:1f:91:f2:7a:df:a3:7d:
4a:fa:3e:6d:70:43:e9:f6:ca:0d:e8:71:21:98:70:
ad:65:25:c5:82:16:78:f9:ac:e6:48:34:33:5b:e6:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EC:BD:1A:EE:FA:21:3E:C3:FD:1F:28:E4:95:C1:91:E0:C3:C9:9E
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:31:83:a7:3a:e3:9e:a8:3b:a9:ed:11:ce:aa:36:2f:a3:3e:
15:d2:63:d6:a7:e4:9c:1f:3e:f2:c5:ef:67:0a:91:f4:bf:54:
e4:91:dd:c1:aa:a3:59:d1:0a:a4:af:b3:1b:02:87:a2:9c:6c:
1d:c9:9b:60:68:1b:9b:20:07:a8:97:26:c7:5b:ce:a0:d2:a4:
c5:f3:78:46:58:40:29:04:7b:4d:8c:ee:33:4a:f4:ae:27:33:
60:66:15:7c:03:85:41:c0:41:bd:48:f5:85:3d:2a:cd:f3:a9:
b5:a9:59:c8:57:21:f9:2f:d3:c5:f3:41:74:b7:a0:84:b8:3d:
b3:11:bf:b5:9f:65:10:7b:ad:72:d8:a0:b8:5b:05:a6:fb:fd:
19:28:e3:99:ff:10:79:d1:e6:42:e3:f4:60:a8:7d:f9:3f:13:
5f:a9:7e:25:20:5d:79:4b:72:8d:58:2b:d7:bc:89:9c:8b:66:
96:cb:b9:ed:30:f2:ff:97:6c:68:26:19:d2:8c:bd:be:1e:0f:
aa:63:51:b5:f4:06:b5:02:f7:1b:39:4e:d6:c8:4b:ae:71:1a:
6e:24:06:6f:3c:51:c2:66:0f:02:27:3e:f5:4e:f6:2d:34:5f:
71:41:fe:35:9e:67:37:7c:b1:0a:ba:71:f7:41:ea:b0:39:aa:
f5:d1:35:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:02 2025 by rpki-client