Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: okWUjJ6P9b8af2uCw4tsAuU9mG8hMZH5bofPwdKkuyk=
Subject key identifier: 0D:94:25:EA:F4:AA:B9:F2:04:3C:F1:18:00:16:8B:24:38:C7:11:4B
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 0197B6A1FC449DE3FEDCC6966474ADC1A699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 15CC
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: 2iawdTNRAh1zMLPtNSSUfzd99zU.roa (hash: glHA3I9GeCgeFCksuKJN4v0XXNiSd6eBOO+HCKjdMxc=)
2: D3uFNp_uUSHt1YSi-2IaHiDrRag.roa (hash: s8c53hlFJRAlFwJlOpAFaiZbwpviv1EIugwd2PuQcZA=)
3: dFUsEYWW8cUdCui6PDM05P1wfuk.roa (hash: AL/iuu9lD2lbk6JUjTvJCA4F0UIgpReIGiy6fq4g99s=)
4: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: vXZy5n4j/FjHkXLffBHcQgghG6ypr/hWHZpoYnRPxuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fc:44:9d:e3:fe:dc:c6:96:64:74:ad:c1:a6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=0d9425eaf4aab9f2043cf11800168b2438c7114b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:d1:d7:11:42:5b:fb:52:8c:ee:53:68:f7:
ff:50:31:4d:11:b8:b0:51:1f:a4:2c:61:1c:9c:08:
d9:3c:86:dc:98:57:fe:16:d6:fb:e1:5e:68:43:08:
d0:2c:1a:08:58:bf:44:71:00:82:e1:12:d5:c4:ff:
d6:c0:37:47:6f:08:e9:3f:fd:62:3e:f8:d1:f2:69:
bb:b8:83:98:e9:27:72:49:96:9b:a5:af:fd:26:99:
c7:df:93:5a:88:8a:1c:27:e9:b7:2b:97:5b:07:16:
ba:71:6c:a4:d6:5d:cc:57:ad:fd:8d:d8:21:57:78:
14:96:9a:91:49:dc:81:4b:db:06:ba:4b:bc:dd:88:
20:6d:27:4d:fd:d9:fb:09:33:22:70:60:42:95:a8:
81:92:1c:e9:9d:ba:66:89:a3:8a:94:36:c6:03:aa:
09:27:6b:34:20:38:6b:23:3c:29:9b:59:bd:8e:7b:
d9:2e:e7:33:67:6f:33:a3:f1:3c:45:e5:49:1e:c8:
3e:6b:c5:16:00:04:bc:ae:70:c9:fa:c1:03:e4:52:
ff:85:45:47:f5:72:f9:ab:0d:d7:68:8e:a5:47:23:
a4:9e:30:3e:b1:4b:59:d0:83:1e:d5:68:98:e9:a7:
43:41:d7:6c:4a:2e:9d:03:1e:91:bd:eb:99:14:56:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:94:25:EA:F4:AA:B9:F2:04:3C:F1:18:00:16:8B:24:38:C7:11:4B
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:10:dc:4b:55:d9:27:6a:13:41:0d:35:46:5e:a8:41:ca:83:
61:d5:02:97:7d:fd:2b:33:bb:29:54:fc:05:fb:38:e0:a5:4a:
50:dd:13:38:ab:b9:a4:ec:dc:35:2f:d7:59:b1:c5:a6:3e:bf:
9e:23:ec:93:49:d6:a5:18:bb:d5:36:d2:93:9a:90:04:9f:73:
c5:37:9b:c2:55:f5:d4:43:d3:5b:ca:9e:3f:9e:5b:d8:b9:6f:
6d:6f:80:07:ae:c8:32:01:43:c5:80:d2:0b:d6:fc:75:f8:a0:
76:a0:57:9a:f6:2c:0d:66:4f:ee:92:fb:ad:f8:7a:1a:bb:87:
1f:b6:81:75:2a:0e:70:69:55:36:f2:51:82:41:0b:46:ad:12:
24:c8:db:39:c9:c8:95:c1:74:24:7f:c8:4d:a2:65:a9:97:00:
cc:f3:db:57:cd:f2:f0:20:e1:de:b8:07:fd:79:f3:a4:53:2d:
74:2d:09:b6:25:29:6b:9f:64:58:85:a8:e6:1c:35:6c:bd:cc:
ac:1e:d1:50:79:22:4a:5d:d1:51:51:9c:fd:20:6a:21:b9:e2:
e9:0b:1f:db:e5:27:57:95:f6:4d:1e:1d:68:89:da:15:cd:9e:
78:da:fe:82:d8:e4:3f:8b:36:3a:17:ee:10:ad:c9:f0:9e:4b:
e8:63:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:04 2025 by rpki-client