Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: RvdJsMrbfj8eJmitURl+90oCbPa56jXs6bQCYi7vx7c=
Subject key identifier: B6:B0:6F:9F:EC:5B:60:A4:1E:5E:A3:2B:45:47:EF:2E:79:FB:B8:2F
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 0197B77C5FA5ED8210F736CBB888DF99FC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 11E9
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: QsVUWy7rGj0jONeHab16GQkRTKXTZ/dviM5+21FBkOk=)
2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=)
3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5f:a5:ed:82:10:f7:36:cb:b8:88:df:99:fc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=b6b06f9fec5b60a41e5ea32b4547ef2e79fbb82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:26:8d:62:e4:c9:9f:f4:71:42:3f:97:06:
2c:60:9a:cb:c5:2b:cc:20:82:6d:d4:60:2c:f8:99:
ac:0f:fc:fa:d1:94:84:0d:f5:0d:6f:52:8e:cb:64:
d3:76:01:29:1c:e4:b9:55:68:a1:be:9a:9a:18:c9:
6f:84:b6:50:38:c6:3b:22:54:00:f4:ae:f5:fa:a2:
c0:2a:2c:92:90:55:9e:d2:84:68:04:f3:b5:fa:4b:
81:24:75:ad:df:f3:de:44:ce:d5:ae:01:08:f3:26:
aa:36:22:c4:a1:67:77:ec:a6:d0:6d:40:50:20:c3:
76:a3:67:d6:bd:c6:1d:3a:c3:4f:bb:ea:d9:c7:7e:
ca:7f:cb:83:7b:da:f9:0a:1c:e7:81:14:52:e4:f8:
0a:63:19:ac:60:d3:a3:be:ad:1b:6e:bb:be:9b:3f:
d1:41:6d:8d:b3:fb:48:29:29:0d:7b:fa:ca:65:e3:
eb:3d:0d:98:70:fb:f6:72:bb:81:59:67:2e:4b:bc:
ba:6e:9b:c7:6c:08:6f:a1:1a:8b:35:60:f6:d3:8d:
5b:d6:93:83:07:8b:3f:a5:20:6b:1e:ef:4c:8a:2a:
e0:85:70:88:2b:bf:de:1a:bf:f5:f4:b6:31:a1:ad:
b8:ab:cb:9d:df:4e:42:81:a8:46:02:39:54:a7:da:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B0:6F:9F:EC:5B:60:A4:1E:5E:A3:2B:45:47:EF:2E:79:FB:B8:2F
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3b:8e:ef:e0:e9:30:82:79:d3:ea:29:aa:58:46:98:8b:67:
ee:41:7e:10:c9:2d:57:0a:f0:68:14:29:74:a6:1e:14:f3:0f:
96:04:9f:3c:48:33:59:d2:aa:9e:21:4d:38:0a:2b:27:17:71:
f6:77:75:93:83:31:3b:0d:e4:c0:c4:78:5b:c2:5d:34:7b:44:
62:ad:0b:a5:09:77:84:96:45:2f:ad:04:3e:8c:04:de:cb:5d:
0d:42:3d:ee:21:e5:98:f2:75:fa:d4:15:d9:dd:c5:e0:fe:98:
ec:a4:39:82:9e:ed:26:af:b6:95:a7:27:3c:1c:2f:b3:df:41:
04:d6:bb:32:bc:a8:11:c3:02:89:38:b4:41:03:a9:83:a8:3c:
12:78:bb:cc:9c:51:07:36:73:f7:cd:a5:f0:58:f8:4c:ce:2b:
2b:60:0b:1d:64:d5:31:9f:4f:8d:fd:ea:42:93:9e:60:b6:2f:
fb:33:45:22:32:db:db:34:c7:63:e6:12:5e:b3:63:fa:e3:41:
33:ac:c6:5f:51:ff:d2:86:56:31:1c:01:7f:92:04:e3:93:68:
04:66:80:64:97:aa:25:ef:6a:ae:37:90:b4:a8:89:57:7b:8c:
f8:ed:00:c0:25:f9:48:7c:7a:d4:74:f9:54:d3:07:21:a7:86:
95:bc:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:25 2025 by rpki-client