Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: epgcTqzJandqdL8Huh0LiR60aqmWEZFhZYkYFQw75pI=
Subject key identifier: 54:69:7C:21:E0:95:19:6F:31:AF:6A:30:55:B5:13:30:00:68:CA:13
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 0197B88F94CF807C0B9614C8604DDA5FD40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0915
Signing time: Sat 28 Jun 2025 22:01:46 +0000
Manifest this update: Sat 28 Jun 2025 22:01:46 +0000
Manifest next update: Sun 29 Jun 2025 22:01:46 +0000
Files and hashes: 1: 5Ut0b0NCsET_SBcrRZDGmpxguZ8.roa (hash: yFP/8VV88RGdYS/1gMV2xguqReDrDsPUy9So1+AmUlY=)
2: 5govGzTOoEOkHW5AQQBeXhEslnY.roa (hash: WSesnMfx5MzV8mfpr2Kk+2TovkIoHzCJWKSulEHwHA0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: FLP4ql3IfyTfhVSDb9OrqO9avTDh0oHYrtdThY5OX54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:94:cf:80:7c:0b:96:14:c8:60:4d:da:5f:d4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Jun 28 22:01:46 2025 GMT
Not After : Jun 29 22:01:46 2025 GMT
Subject: CN=54697c21e095196f31af6a3055b513300068ca13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:a6:5a:31:e6:f1:51:98:7c:67:2a:90:f3:
3b:af:2b:1f:7e:a1:54:06:56:05:1a:23:44:2b:9a:
f7:4a:9e:ae:59:30:01:a0:03:2d:a1:b6:3a:f1:64:
6e:4a:f3:41:ca:b2:f6:38:78:01:99:30:36:03:09:
1a:8a:3d:8a:2d:b1:9f:94:a3:06:f7:58:e3:be:33:
55:3c:8b:e0:7d:01:90:69:a7:88:2c:84:6e:c9:46:
7b:0b:35:f0:78:12:30:e5:b3:97:4a:74:20:e4:ec:
ec:d8:fb:4f:87:83:cd:2f:22:dc:ba:af:14:39:8d:
fa:f3:59:9e:f5:3b:31:1a:c8:46:59:27:d7:08:a1:
e1:2c:7e:28:7e:3e:5b:f8:9b:d5:e4:4a:4a:e4:e9:
58:88:1f:3a:36:9c:51:f3:31:ab:29:4d:c0:a0:42:
22:52:c0:f5:5e:74:fc:0e:65:87:c6:f2:51:44:64:
08:8a:ce:e1:f5:16:e9:01:ca:af:99:32:7c:d1:72:
31:8d:cd:da:fd:d0:4e:df:37:cb:cf:2d:49:5e:e2:
43:27:0c:53:e4:86:75:7e:8e:d7:bf:81:bf:50:c5:
f0:d9:03:c3:0f:8b:0d:8d:0b:8c:fe:2d:c5:dd:49:
64:b9:2e:13:81:50:8c:63:03:8a:1e:8c:02:b1:7a:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:7C:21:E0:95:19:6F:31:AF:6A:30:55:B5:13:30:00:68:CA:13
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:06:99:dd:24:a5:1f:fe:f8:90:64:38:80:bb:d1:da:75:2b:
8a:31:dd:20:e8:8f:bf:6d:92:38:8f:c9:a2:29:44:10:6e:24:
71:b3:54:26:39:b1:e6:21:5c:3d:90:93:25:f4:43:da:b9:c1:
fd:b8:a1:f2:03:8a:d0:71:ef:2d:68:6e:70:2c:1c:2b:be:2a:
18:03:bd:26:c0:37:33:d8:07:4b:d0:f1:b9:e9:6a:b3:b5:2e:
78:e6:5c:84:b3:fd:6c:7c:9b:c6:13:84:b4:8b:95:51:b3:7b:
4d:c3:fc:29:a3:0c:f4:c8:38:bb:17:d8:5e:46:2e:78:d9:55:
d8:4f:4d:fd:86:30:7d:b7:81:ca:f7:bb:17:4e:e9:12:08:8d:
7e:87:c4:2e:1d:ef:b3:ae:31:c9:3b:21:ac:86:3b:25:70:e7:
01:25:55:f6:c0:88:a1:83:ae:a0:be:48:3b:13:21:98:b4:ec:
0c:f0:a7:74:65:56:ae:5f:30:58:a6:4d:11:42:f1:b7:ee:36:
db:42:98:ca:44:7c:94:38:4c:9f:56:45:25:f9:fd:55:fb:c5:
db:d3:e4:98:05:6d:f4:c9:3c:22:c6:25:8a:2e:22:b1:f3:b0:
3f:48:5b:9a:37:21:16:20:01:2e:1d:09:9b:4a:a2:b9:1c:b4:
1b:48:5d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:18 2025 by rpki-client