Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: Sy0rAOhk5W4H6ZkQ4SXcpIQ6tS0rThlv1r/kovs0PSI=
Subject key identifier: 5A:2D:0C:42:1D:F6:9E:12:60:93:C9:B8:D8:76:B6:BA:E1:52:96:7D
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 0197B77CB3BE543D652250BE4EDCE6EB0467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 0267
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: Y2LzLPY2hJZPShTNvIcyj76pKukPGr9RNH0SGx8ACik=)
3: qg4rCavoAEstd_gdiifZJ2l134s.roa (hash: zv8J2KuDAwQOB6a6izYV8dRbqPViGL374uqqVPG9O1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b3:be:54:3d:65:22:50:be:4e:dc:e6:eb:04:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=5a2d0c421df69e126093c9b8d876b6bae152967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:9f:36:28:d3:a2:a3:68:8d:b1:8f:ea:b4:
2c:df:a9:9f:b4:68:3d:7b:8d:cc:65:88:7e:bc:7e:
89:c6:fa:a3:21:cb:7d:6f:fd:c0:7a:2b:a6:10:e1:
9a:57:e0:0a:40:2d:5a:f1:f3:19:cc:d5:18:a1:26:
da:b7:a2:05:e6:ed:e5:ad:74:3a:2f:56:c1:15:fc:
2d:d3:03:bc:56:51:f9:ac:13:ea:a6:91:6e:b4:d1:
a6:b1:c8:5f:41:6c:c1:81:7b:95:bf:8f:ba:7a:b6:
63:8e:8a:b3:17:1f:58:3f:a4:d3:38:a0:fe:9e:21:
67:58:55:9a:14:30:1a:4e:eb:5b:31:a1:e3:e4:17:
3b:14:1f:ab:c6:54:ca:b0:94:d8:a7:8c:4b:b1:1c:
14:0b:26:7f:1d:57:58:e2:02:04:b1:8b:80:d3:ab:
da:26:36:1d:0a:b3:63:0f:75:73:21:10:5e:ca:ea:
62:f4:df:d8:ea:26:07:34:cd:bc:9b:46:a1:4e:2b:
ac:7a:83:aa:06:56:bd:29:e9:43:18:0f:59:cd:81:
95:86:85:f6:2b:5c:3f:be:d2:d0:e1:bb:82:03:5e:
3c:40:b6:b5:69:09:6e:f9:87:ae:6d:2e:6c:27:da:
a5:d0:66:08:cb:58:56:33:89:d6:a4:1b:7f:f9:97:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2D:0C:42:1D:F6:9E:12:60:93:C9:B8:D8:76:B6:BA:E1:52:96:7D
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4e:67:66:91:0f:14:db:20:69:66:0c:ad:96:5d:ad:7d:af:
af:50:0a:a2:59:0a:19:ba:40:96:68:8e:20:73:47:03:2a:60:
ea:99:3e:90:cf:0c:12:0c:15:23:0b:ee:13:f0:7c:dd:f4:1a:
57:fb:4c:c6:f9:0a:5d:08:c2:38:36:59:63:72:5f:a8:94:8c:
51:9a:6a:bb:33:88:ce:ee:c6:d2:75:93:33:aa:c4:19:be:ef:
25:fe:68:cf:25:4c:7d:de:b9:ab:75:a8:b6:35:86:d3:aa:c4:
79:11:c4:71:a1:c2:d7:e5:7f:95:3d:c4:dc:06:d0:92:66:29:
f8:6e:5d:c6:94:15:cf:8e:2b:a2:24:60:81:22:a3:1f:5a:c9:
0a:9f:e8:fb:d8:b9:9f:98:75:d1:95:08:38:9f:14:18:46:5f:
9f:02:00:01:52:2d:1e:c6:33:53:8d:52:80:35:69:35:4b:ed:
0d:e6:af:87:b3:51:95:0e:bb:c1:4c:a4:e9:7b:ba:eb:e6:88:
1d:3b:c3:d0:a9:3c:dc:00:ee:e9:2b:21:22:ec:91:48:1c:9a:
59:35:a6:b5:98:e6:5c:17:08:28:25:36:35:84:57:b6:c0:d0:
3f:9b:c1:5e:68:74:cc:85:13:47:1c:33:e8:e5:a1:fd:a7:41:
d2:51:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:27 2025 by rpki-client