Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: AQQuMcEIxTiaRl8yc9olNrN/OTP0/K2cQx4c1n+rx/8=
Subject key identifier: D5:B1:60:6D:F3:ED:01:64:BB:07:09:3B:D4:69:0F:49:33:6F:09:BE
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 0197B8FD93BEE4A26DD6AB945428FFB81738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 0126
Signing time: Sun 29 Jun 2025 00:01:55 +0000
Manifest this update: Sun 29 Jun 2025 00:01:55 +0000
Manifest next update: Mon 30 Jun 2025 00:01:55 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: C3lsepTIketk2+2/gaubKMLseymvmCdmdEJb6YE8cDk=)
2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:93:be:e4:a2:6d:d6:ab:94:54:28:ff:b8:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Jun 29 00:01:55 2025 GMT
Not After : Jun 30 00:01:55 2025 GMT
Subject: CN=d5b1606df3ed0164bb07093bd4690f49336f09be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:e0:0d:cd:42:c4:3c:d8:af:dc:34:6a:f3:
3a:0d:c6:77:8e:cc:5c:e4:cb:3e:2f:2c:2c:aa:eb:
fc:af:a6:42:5f:df:b2:4e:6d:df:e3:be:56:d5:73:
3e:83:5c:25:6c:bf:92:9c:46:44:25:fd:a4:e2:67:
43:71:e4:a1:f4:a4:93:e7:ce:d7:28:56:6b:d3:5a:
59:4e:c7:db:f5:ad:7c:a2:b9:56:d7:31:bb:9b:6c:
5f:0a:67:3f:0d:09:c9:15:50:0c:c8:28:e2:ef:af:
dd:5c:e0:99:4a:97:df:2c:e4:95:3f:93:d3:f9:a4:
01:d2:db:a8:64:b2:42:ea:0b:5a:88:b7:f5:0d:ed:
e8:eb:17:8e:32:1a:6d:7d:33:94:69:e7:9e:c1:69:
a3:b9:35:f7:7a:ca:19:15:77:b5:9d:95:24:e7:b3:
18:07:29:db:e3:b3:b3:bd:b5:ae:ba:6c:b7:fe:e0:
0c:c7:1d:e0:c0:e5:8c:ed:48:1f:89:76:58:eb:7b:
d9:69:34:5a:76:ee:1d:94:a5:86:6c:e3:e4:f5:b1:
10:69:38:43:46:1e:04:be:e5:85:f3:a3:15:fc:6b:
ad:7d:ec:4f:25:2f:7a:3f:32:b6:65:22:5f:0a:76:
db:6f:a9:36:dc:65:d5:58:7e:f5:d1:0f:ad:cb:ca:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:60:6D:F3:ED:01:64:BB:07:09:3B:D4:69:0F:49:33:6F:09:BE
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ec:bf:3f:34:43:2b:64:2a:29:86:71:ac:07:e6:4b:77:d0:
c5:98:58:4e:f8:fe:1e:9e:2b:fb:a2:f8:2d:fd:a1:01:8c:d9:
6f:23:50:4a:97:96:69:4f:ca:8d:ea:2d:21:71:c7:68:73:4f:
2b:88:fb:6d:28:a5:a3:75:68:62:b9:50:81:aa:4c:3b:fd:10:
f1:90:72:3d:2e:5e:d3:5c:99:54:ff:2a:d8:bc:84:49:6d:0b:
b3:64:44:cb:91:9d:a3:14:d9:53:7e:5a:34:7f:f4:9a:68:4e:
33:7c:ae:f8:fd:d8:42:d5:bb:30:5e:47:6f:70:90:38:d3:66:
24:2d:be:fc:91:1b:88:54:7e:1c:b9:a4:c2:5a:6b:3c:94:e1:
9b:fb:85:de:76:74:ec:11:20:8e:83:f0:a4:aa:3c:2c:46:dc:
0d:02:f8:58:b9:ad:d2:18:a0:df:90:fb:70:de:07:94:bc:24:
ea:02:99:e4:39:80:83:2a:97:53:88:a3:1d:13:8d:08:ba:cd:
0d:fb:1e:e1:e9:a3:40:f8:3e:10:86:db:0e:f4:cc:09:73:bb:
8f:ab:3e:5e:84:74:61:9a:30:f0:44:f9:b6:b8:c8:7e:ac:7e:
c5:79:0e:d0:55:4a:26:39:09:20:11:9a:f0:80:83:bf:4d:fd:
02:02:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:03 2025 by rpki-client