Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: QsnnF8+37N1LcZvBK6F5FFuosAtWs3PgFYCPq5MJnak=
Subject key identifier: D5:A0:77:CB:20:1B:E7:66:E2:FE:B9:80:23:F4:72:88:84:99:53:73
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 0197CA5E4098A466E86D99D8D9FD7854DF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 0FFD
Signing time: Wed 02 Jul 2025 09:01:03 +0000
Manifest this update: Wed 02 Jul 2025 09:01:03 +0000
Manifest next update: Thu 03 Jul 2025 09:01:03 +0000
Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: 9pPtR4FProLTmZeMxrdOdqbWugkhxzEYJte5M9R2lVc=)
2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:40:98:a4:66:e8:6d:99:d8:d9:fd:78:54:df:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Jul 2 09:01:03 2025 GMT
Not After : Jul 3 09:01:03 2025 GMT
Subject: CN=d5a077cb201be766e2feb98023f4728884995373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:16:b7:93:65:f1:3f:5a:68:90:b2:88:50:
84:08:f8:98:91:b7:6d:d9:c6:49:a6:65:b7:ba:17:
50:b7:56:63:1e:72:8b:ce:c3:3a:61:ca:ce:c4:a2:
00:62:cd:50:be:95:1b:57:bd:fa:22:a6:c7:24:6a:
f9:41:aa:82:e2:60:5a:bb:a3:81:ee:99:46:38:7f:
79:94:0a:50:78:4b:bb:85:04:2e:bb:23:73:f3:76:
80:75:db:35:4e:2d:c0:9f:4f:cb:6f:fa:c4:e5:79:
1e:6c:ed:7e:d2:a9:91:8e:67:94:2b:57:7c:12:0c:
30:a1:ec:ab:9b:e7:15:10:c7:34:78:1b:0a:c2:00:
10:f2:33:50:8a:8e:94:43:41:02:39:9c:37:8c:19:
ac:eb:52:ff:08:13:78:7a:41:fa:b8:60:8c:1d:9d:
e9:e8:cd:2b:e7:a9:42:2f:2b:0d:cc:45:ca:42:2e:
cf:dc:f1:e5:d2:45:91:33:72:6b:de:d3:c0:e7:67:
30:93:13:56:83:30:30:7f:f0:32:31:10:24:c7:45:
21:31:2a:81:aa:d0:84:77:79:a3:02:31:1d:ed:27:
1c:17:ed:98:34:e9:42:3f:33:5e:cd:c4:97:bb:ea:
72:77:17:b6:64:b6:a1:60:6d:0e:c8:c0:9b:d1:73:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A0:77:CB:20:1B:E7:66:E2:FE:B9:80:23:F4:72:88:84:99:53:73
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e1:97:ed:58:64:ae:8a:6d:fa:22:44:65:ea:e8:d6:d3:62:
57:81:60:41:25:78:ba:74:bd:90:85:09:e2:bc:ff:8b:af:47:
af:b3:a0:14:2f:c5:22:b7:01:00:92:f6:f4:3b:5e:af:47:88:
bb:b1:3b:04:7a:c4:c1:69:9a:68:be:41:bc:ed:11:26:45:75:
1e:19:91:e6:60:e9:25:fb:ed:33:d7:59:9c:04:78:d4:de:6a:
b2:6a:3b:e5:0e:43:37:ff:26:ba:67:ac:df:ea:fe:42:84:66:
dd:9f:23:0b:b8:00:1c:7b:03:5b:c9:86:c6:d0:2b:1d:f7:a9:
95:04:9b:1c:b5:21:36:bb:c6:02:dc:d3:d7:94:3b:3a:89:f3:
61:73:3e:65:b8:34:83:7a:d6:df:94:4b:70:93:14:71:a0:bd:
bd:82:2d:06:88:cb:66:ae:c1:a0:90:72:3c:f5:7f:df:1c:7a:
f0:59:8b:d3:e3:54:95:f2:01:23:b9:e3:92:6d:ee:7c:cd:6b:
22:df:1f:22:c0:bb:1b:14:46:8e:53:f9:75:5b:06:91:31:1b:
17:6f:27:b8:35:33:cf:72:d3:1f:3c:a3:44:6d:70:2a:eb:59:
ac:98:43:c6:b4:fe:0e:b6:72:a6:9a:3e:77:b6:36:03:a7:1e:
c7:e6:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:18:55 2025 by rpki-client