Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: gFPr0nuGzU8OCU7F+94Z749/4CDnF1OTqpSB+U8F1B4=
Subject key identifier: AC:67:38:59:7C:B5:AF:9F:42:E3:15:56:BF:2A:56:BD:06:01:CB:37
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 0197B6A068297726624DAFABF8AF3D6AF32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: 9GSoiXsNYY62mRLn3bXSh8pS9phULu2EgpJ/TmrCZsE=)
2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:68:29:77:26:62:4d:af:ab:f8:af:3d:6a:f3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=ac6738597cb5af9f42e31556bf2a56bd0601cb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:6a:60:9c:a9:51:f9:3f:c6:9b:3e:e1:33:
1e:e8:26:38:b6:c0:b2:b4:a4:25:c7:08:9f:ed:68:
4a:1c:d6:b6:da:bc:43:28:d8:54:16:77:55:e1:41:
ca:c3:c2:92:2f:f8:64:c1:1e:16:80:39:4b:c6:58:
af:0f:af:3d:db:5f:75:93:4e:bc:ee:c8:d3:a0:7e:
37:d0:7b:53:db:e0:f1:c3:a3:6b:74:c8:98:bf:4d:
72:a6:58:28:a7:c4:3a:d4:19:79:d3:1d:22:68:41:
4c:f6:10:1c:0a:e2:7c:b1:07:97:0d:46:7c:19:45:
84:79:5a:46:89:73:00:ca:be:2b:d4:9b:48:62:99:
36:ce:61:c0:52:9c:f0:ea:24:3a:86:ac:2e:60:18:
0e:33:b7:a6:2d:ad:8e:62:04:4d:cc:2d:4d:85:d7:
84:bf:73:cc:2a:4c:8c:e3:55:53:11:71:51:c1:2e:
9a:3a:42:96:df:f5:41:ab:f0:3c:8d:43:df:c8:ae:
a3:06:64:e5:db:ca:42:48:d8:e2:d8:c5:4d:ca:42:
46:ad:c0:90:1d:64:da:cd:24:c5:95:7f:ba:3e:49:
5c:7a:6a:88:bc:26:2b:ca:ce:20:13:cd:d2:c9:f8:
41:bb:08:80:53:8a:3c:40:01:70:8b:7d:b4:48:6e:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:38:59:7C:B5:AF:9F:42:E3:15:56:BF:2A:56:BD:06:01:CB:37
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c7:c1:13:f7:3f:91:ba:6e:db:a3:83:ff:07:1f:42:71:e8:
50:68:fb:c6:b6:e2:ae:80:01:d0:fc:18:2c:67:6b:d6:b4:3b:
ee:37:fb:c2:95:2e:46:b9:a2:27:a5:fb:4a:76:2e:d9:bf:c5:
b5:9a:69:f6:3b:d1:c8:04:85:3a:c2:4b:f9:79:c9:f6:9d:9b:
5e:32:80:a0:8e:74:20:55:86:a3:b2:9e:ed:a7:94:b4:0f:b6:
d7:c4:0e:96:c3:5b:42:ff:f8:7f:03:47:fb:a4:a5:3b:f7:99:
43:02:77:7c:71:bd:0b:13:e8:2c:4a:07:8f:6d:15:34:66:54:
99:ee:07:cd:60:b5:f1:be:28:83:57:93:75:e8:56:b5:64:14:
ac:5d:18:90:25:f9:56:ab:c1:33:0b:92:9a:ef:b8:31:a0:b8:
2f:b2:75:a7:af:dc:a5:a1:df:0d:09:18:e8:73:dd:45:e8:44:
52:a4:2b:67:1b:34:a2:87:46:e0:40:b3:7f:76:8c:0b:26:dd:
87:a2:9e:5d:37:2f:e9:55:b4:9e:2f:84:bb:62:ba:dc:dd:c1:
c5:5e:77:0f:93:32:8e:3c:df:95:42:0b:30:59:c5:aa:97:0a:
bf:74:9f:03:d7:fc:85:78:33:f6:94:e2:04:b3:43:9e:f8:96:
f8:00:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:35 2025 by rpki-client