Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: RwhuygduB0OakYyaPWUaLolD3yAdPLLvko48oaALfVY=
Subject key identifier: E7:92:BC:F7:4D:41:B8:5C:FE:46:2C:A5:EE:C2:1D:06:39:A2:AC:62
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 0197B6A09B8A2F05C0702F0911E1F461CCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: RUL5TJJn4NQOToyCFJLia2q14THj7zRw/3VVwEa1gjQ=)
2: vYaPE7wk6Qo5Lm2fpqZ1rhvLpDU.roa (hash: ZL2srvtFB3ZUj0RuUE6dDGpy3UL8CY63qkKeS+BMJ20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9b:8a:2f:05:c0:70:2f:09:11:e1:f4:61:cc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=e792bcf74d41b85cfe462ca5eec21d0639a2ac62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9b:1e:ec:74:8f:7c:70:85:b3:55:4a:60:96:
ac:a9:79:f2:eb:93:04:11:e5:32:fd:63:b1:ae:54:
bf:5d:1b:65:10:2d:52:90:64:d5:aa:8e:45:8f:59:
2f:2e:8a:99:1e:2a:d0:d0:82:40:2e:f1:81:6c:8e:
e9:33:e6:f3:5b:eb:9e:95:51:26:32:c3:80:4f:a9:
a8:22:07:d7:0d:b9:34:8d:2e:94:6a:66:b6:f1:2c:
6e:c6:9d:4f:0a:83:d5:30:cc:ef:4e:01:52:b6:cf:
13:6b:00:3a:a9:9a:2d:72:cf:ef:bb:97:85:8d:7b:
d6:a8:e7:3d:98:45:26:34:5f:07:ab:f9:4a:47:a1:
f1:e6:bb:3c:5b:ef:8b:52:f0:42:bc:22:20:f8:e0:
09:b6:fe:36:af:bd:77:99:bb:74:ed:26:90:c6:96:
e0:70:f8:dd:b7:96:0d:28:01:f4:8f:a4:11:73:6e:
b3:bb:19:e6:c7:61:7e:86:84:cc:9b:25:65:ae:3c:
3c:8c:bd:a1:5e:55:ef:48:04:76:89:ca:8a:f4:0f:
5e:74:2f:bf:bb:00:b0:d3:3b:f7:91:98:1f:bd:fd:
da:d5:53:2a:e9:5d:84:3e:ea:d9:de:a6:6f:bf:03:
f1:bd:8c:30:a2:f9:a7:fe:8b:4f:26:90:ff:3e:82:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:92:BC:F7:4D:41:B8:5C:FE:46:2C:A5:EE:C2:1D:06:39:A2:AC:62
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:06:f8:b0:fa:25:9a:7b:ef:f1:4f:c5:12:69:9e:74:f6:b7:
e3:e6:2b:da:ac:bc:34:85:fa:ed:3f:55:5c:93:45:c0:be:87:
bb:45:46:ae:4b:e0:d6:5a:42:e3:04:af:60:28:2d:56:db:75:
78:37:0d:2b:6a:e8:6e:a2:39:87:3f:78:5c:39:85:32:4e:95:
74:8b:2f:06:44:0f:5f:87:86:cd:e3:30:37:0f:24:3e:fb:6a:
1a:b7:ae:4c:7f:a7:cb:44:dc:a2:fa:40:52:e0:b4:8d:5f:f1:
58:84:91:9a:dc:4e:6a:ba:e5:ab:e5:9b:f0:f8:5b:aa:5a:15:
1d:39:a6:8c:43:64:a7:10:72:9a:67:63:e1:45:a3:55:49:de:
22:c3:fb:5a:ea:9a:e4:3c:07:18:0a:80:40:22:e5:f8:13:a9:
7a:53:44:80:e5:92:02:09:16:3f:be:51:9d:82:bb:9e:39:ff:
be:ae:4d:76:d8:ae:59:28:f3:d3:c1:97:b2:cd:d4:cc:4f:09:
dc:8e:79:f9:c0:5e:1c:2c:42:91:3c:6a:85:97:4a:66:49:e7:
79:f5:f1:a6:78:86:68:49:ad:96:52:a8:b1:2a:31:aa:67:2c:
02:25:9b:b9:bb:bb:f9:2c:9b:be:43:ab:71:f5:9b:f8:1a:16:
d1:53:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:34 2025 by rpki-client