Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
File: OQJ3OPl4_tokqdh7DLi7mqevVA0.mft (raw, json)
Hash identifier: aEixARi59jMtHT39KlI05/P0a5P7wqhThNY/P4LePaY=
Subject key identifier: 04:1F:10:24:96:33:21:A4:8D:44:76:D4:10:AC:CE:30:80:22:28:5B
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 0197B70EA567B089891170445B361CF053E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
Manifest number: 15BF
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: OQJ3OPl4_tokqdh7DLi7mqevVA0.crl (hash: 4TXvwzPSrvyUK/8UJNQ1kGcHMeM6SYAe03HhTdlG1l8=)
2: THEjTsFNcxDVZEOdq3GfXqXC4zc.roa (hash: x5CBmcScUC+Y/Wuw5WgYT+dNtpSqSEasQSVqzZJLzc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a5:67:b0:89:89:11:70:44:5b:36:1c:f0:53:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=041f1024963321a48d4476d410acce308022285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:a5:e2:cf:40:ea:8c:42:38:cb:15:9d:8b:
33:1f:49:2a:e8:53:0f:9c:07:9a:e3:e3:89:dd:2a:
16:da:81:27:36:b2:1f:85:8e:87:f6:93:6e:40:8e:
7c:89:f4:dc:47:bd:b9:a5:9b:c9:be:8c:55:19:b0:
81:e6:ca:21:6b:9c:b0:be:84:62:cf:b9:c4:a7:80:
86:9b:de:48:e6:99:f4:d5:83:e1:22:ef:99:6d:26:
54:e3:17:9f:ed:03:53:f2:8d:56:99:08:75:4e:1c:
ca:ea:09:19:47:e8:d9:a7:51:8c:c4:54:2c:85:16:
74:ba:39:2c:37:30:0b:55:27:95:a7:01:d1:ee:71:
11:4d:16:d3:85:71:d6:4a:2a:27:eb:f7:a6:f7:36:
8a:c5:9c:9a:51:bb:ea:6e:1f:d7:7d:20:5c:ce:51:
ea:0f:16:de:ab:1a:36:f7:d1:74:8a:2c:88:be:02:
2a:6b:26:2c:26:bf:1b:c6:30:a6:af:8a:df:84:80:
74:0d:1c:ba:66:f3:93:95:89:fa:1d:a9:72:e0:fc:
6c:fc:9e:f9:e4:57:c9:4d:27:53:75:8f:cf:82:b3:
d5:82:b3:f2:0a:ff:f3:cb:61:35:b0:b4:1c:4c:db:
3b:74:90:98:1c:3b:25:e5:5b:d4:2a:96:6c:2a:99:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1F:10:24:96:33:21:A4:8D:44:76:D4:10:AC:CE:30:80:22:28:5B
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bc:a3:fa:5c:d9:d8:ae:8c:1c:23:76:8f:c1:51:9a:5a:7a:
0f:06:36:fb:79:b4:76:4c:0f:27:31:a6:ea:6d:8a:28:57:ae:
17:0f:fc:36:40:1c:b5:96:f6:c5:36:15:d3:f9:6b:92:ba:fd:
45:cf:b3:c2:f5:60:c4:88:5e:da:92:ab:69:69:d2:0d:82:1a:
11:1c:b0:da:64:eb:59:6d:9f:56:21:6a:06:e0:14:dd:4e:a3:
d9:80:e3:b9:53:33:99:ec:a8:36:3a:b7:7e:12:ec:1a:89:e5:
18:9b:e6:a6:62:5f:e1:02:eb:a5:d9:5a:90:4c:8a:f8:92:d6:
0e:2b:3a:8c:cf:f4:f8:35:fe:30:52:04:dc:52:ab:a8:7e:1e:
c0:77:b3:a1:92:62:55:03:a8:ea:a8:29:34:a4:04:04:45:96:
54:82:23:b7:11:de:97:7a:a5:6b:59:ab:1a:31:e7:5b:b1:cc:
f3:f4:01:66:6d:15:2b:51:cb:c1:0c:bb:5e:65:3d:79:d9:59:
08:76:0e:14:8d:be:ef:36:b4:3a:d2:b0:45:d8:0f:a2:39:87:
f4:69:2a:ee:e8:e7:73:29:98:97:1e:b4:6e:5b:4b:fd:43:12:
90:b6:9f:ed:56:3f:4e:49:a2:ce:04:37:0e:e2:7c:a5:30:70:
3e:7b:b7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:29 2025 by rpki-client