Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File: oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier: oELscDaMcu0KtXoufwJ+J6CWKbuCshNCcXrZvP+5png=
Subject key identifier: 71:BE:65:38:2C:33:24:68:73:19:2A:F9:89:5C:2A:4E:61:41:09:D0
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 0197C6B89B96AF050CC86ECB26B8E195A6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number: 15CB
Signing time: Tue 01 Jul 2025 16:01:16 +0000
Manifest this update: Tue 01 Jul 2025 16:01:16 +0000
Manifest next update: Wed 02 Jul 2025 16:01:16 +0000
Files and hashes: 1: 95FzUOf19GAUgH-NNap3guhoYwc.roa (hash: xIP1fB6Qn9UTZZo8HocsS+GRzZb3S08GTszP5U7/+78=)
2: EFk1lNXwEBcRAFhoClA443_i5HA.roa (hash: xLW6nYf20kTwvvd9EPpkcVtHN4fslrZstANOcysv2Fs=)
3: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (hash: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=)
4: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: /+TGuuT7bYKxbu1h/4aH7Hlx6gh0lPOrYESdk4ylZ3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:b8:9b:96:af:05:0c:c8:6e:cb:26:b8:e1:95:a6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Jul 1 16:01:16 2025 GMT
Not After : Jul 2 16:01:16 2025 GMT
Subject: CN=71be65382c33246873192af9895c2a4e614109d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:45:f8:18:f7:54:10:de:59:7f:65:de:80:
37:61:67:97:26:49:fb:5c:cc:8d:c2:fa:12:97:dd:
9b:40:6f:70:6d:ad:b2:b7:cf:cc:ec:7c:dd:58:1d:
0c:b6:ab:da:00:b3:8b:1f:e1:5c:65:f0:a8:79:3e:
39:bf:27:28:ff:59:bb:be:8c:6d:80:0b:4a:ad:92:
ec:ab:47:31:43:ce:1f:21:ab:a8:e1:2b:96:8d:3c:
f9:29:56:a3:7c:c1:61:4d:6a:d7:fd:66:0c:fb:c9:
c2:ef:f0:c6:8e:5a:a9:8a:cf:d4:ef:38:36:d2:ce:
50:eb:27:a7:95:96:f3:0a:ec:1f:87:71:c0:43:a0:
7f:34:4a:f8:88:05:3c:6d:48:76:21:70:d8:01:74:
6a:e8:c1:7f:00:0a:49:8b:a6:05:f2:7a:53:26:85:
e8:be:13:90:59:da:72:d7:3e:77:2a:4b:df:b1:88:
a1:9e:a9:0e:d1:3f:09:68:c7:02:35:c1:14:8e:07:
b7:1e:26:ec:c9:07:4f:b8:13:3c:ce:10:8d:2c:37:
86:68:da:90:34:ef:d4:da:25:27:d8:f3:6e:f1:96:
9f:8b:39:9e:8a:50:ef:24:2c:81:e3:ce:97:5a:a9:
7f:10:b4:a5:a2:4c:dc:06:1f:d2:64:ad:d3:00:3c:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BE:65:38:2C:33:24:68:73:19:2A:F9:89:5C:2A:4E:61:41:09:D0
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:15:b7:78:4a:dc:6e:5f:d1:ef:08:b7:ea:92:ea:ca:f4:76:
17:f5:93:54:44:03:dc:a8:69:85:63:ee:e8:79:f0:e4:8f:e2:
12:1c:d8:93:fc:97:82:9e:f8:04:f4:d5:62:96:36:12:d0:a9:
9d:42:a1:2a:10:b5:2b:44:37:8c:b2:de:56:9a:42:3b:df:8a:
f2:7b:87:34:75:d9:44:09:e0:df:a6:ad:ea:5a:4a:26:9e:f7:
f0:fc:69:a1:86:bc:d4:7d:41:be:aa:92:a1:4a:0e:f3:76:12:
a1:16:bb:eb:a0:48:46:ff:f1:45:6d:19:36:cb:31:4c:a2:89:
d7:27:63:0d:4b:da:77:b7:01:76:93:ef:03:da:b7:61:a4:b4:
b4:e5:a4:28:23:c1:a5:11:8e:49:48:f9:fe:2a:d2:7f:cb:b0:
5d:fe:be:64:a7:28:bc:8d:80:7c:f4:86:c0:13:65:7d:36:eb:
7a:28:7c:b9:3f:97:04:cb:1c:a4:46:16:d4:07:45:4d:a2:26:
8e:18:ac:da:10:d8:07:27:59:70:df:f0:dc:13:1a:d0:02:55:
66:8b:88:87:4c:cf:e6:05:8b:b7:6d:f8:b2:4c:3d:e7:20:50:
bf:0e:f1:a7:8e:59:c7:de:a1:cd:f0:3b:8a:0a:4d:b3:ae:cf:
a1:bd:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:20:46 2025 by rpki-client