Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: pnmzq2Cy59ehj2OayDQqNMRTJAnEEHUG0Ol/Yqqgueo=
Subject key identifier: 23:54:0F:25:D0:B3:DE:E0:10:11:26:8A:F8:E2:F8:31:27:C4:49:7B
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 0197B8C5F27CA9ECCC1C2F572004CDF14C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 23:01:09 +0000
Manifest this update: Sat 28 Jun 2025 23:01:09 +0000
Manifest next update: Sun 29 Jun 2025 23:01:09 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: RPkMM3wGldqMl4/DFTmQRnRWMPzSThl7gflyqbHEMt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:f2:7c:a9:ec:cc:1c:2f:57:20:04:cd:f1:4c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Jun 28 23:01:09 2025 GMT
Not After : Jun 29 23:01:09 2025 GMT
Subject: CN=23540f25d0b3dee01011268af8e2f83127c4497b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:55:09:2e:79:81:ac:7d:5a:f8:b2:fa:1d:
fb:47:7e:55:af:c2:1e:46:4e:7d:62:64:13:b0:8a:
a4:32:66:90:7f:81:3c:37:1f:ba:bd:be:7c:de:3b:
38:cf:37:24:35:ef:0e:26:61:5e:3c:7f:ff:ec:c1:
47:4e:f8:30:1b:0f:1a:c5:e9:5b:7f:fe:61:55:a1:
32:eb:84:fa:3d:e8:7f:a9:e1:88:c8:1b:74:9b:e6:
b6:c8:b3:1c:86:aa:d5:2a:e1:89:1a:93:5d:51:62:
69:96:4c:c2:e8:eb:10:8c:84:d1:79:0f:ea:ea:96:
51:f5:cc:8f:f4:fa:33:58:d0:9d:b6:4d:82:7b:55:
c8:69:3b:a4:a9:c2:3d:94:36:36:27:c1:f1:06:0b:
c5:19:77:0a:f7:3c:e5:f4:67:8d:75:15:e4:86:d5:
7f:93:78:c4:42:4d:5c:ca:0b:06:78:b4:06:2b:ec:
d1:91:2f:92:22:1a:59:f9:57:69:a4:e9:c6:c0:55:
0a:7b:9b:f0:c0:b1:ab:db:9b:9b:e0:09:e8:0a:95:
80:f9:34:d2:40:15:ac:84:d0:bf:a3:48:d0:3a:b3:
c8:1c:56:8e:e1:e9:69:30:19:d1:72:bf:a1:22:7d:
a1:52:a4:d2:23:e9:31:4c:2d:6a:af:04:19:bd:ba:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:54:0F:25:D0:B3:DE:E0:10:11:26:8A:F8:E2:F8:31:27:C4:49:7B
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a5:63:c4:a5:7d:d9:68:66:2a:e8:a5:b3:49:e8:ae:01:82:
06:2f:f5:15:11:50:d2:85:c0:c1:62:63:a2:cd:92:be:b1:05:
45:68:16:27:81:7f:46:c6:1a:58:6a:16:53:b6:73:25:6c:6a:
c9:23:5f:bd:ed:3d:10:03:69:1f:76:e2:18:ac:c9:fe:b1:ea:
aa:57:09:5e:78:11:3a:5f:fb:8e:94:2c:85:77:c7:b7:d9:bb:
a9:bf:ed:55:66:62:09:a7:62:43:f0:65:c8:82:93:89:56:ba:
07:74:30:5a:86:d7:b2:b2:e7:99:e4:17:49:c4:2c:00:ee:e6:
55:a3:84:93:47:fc:97:13:1d:50:6b:f4:ef:d4:59:df:11:3c:
be:ce:67:0c:bd:a0:8b:8a:e8:9e:22:b8:af:cb:5b:db:da:dd:
38:a6:ab:2c:f1:f6:c9:d2:b3:33:91:37:57:fb:15:32:a6:4b:
08:1f:f9:bd:6b:b5:3c:7f:2a:9f:c9:7b:78:c2:33:91:3c:2f:
fa:75:0c:94:eb:fa:8d:59:65:c3:21:e3:cc:0a:e0:18:4d:9d:
3a:26:11:3f:43:3a:37:c4:7b:69:ef:06:15:06:91:bd:e4:a5:
b0:72:69:a8:c7:bd:cd:90:7b:00:b2:ee:c5:3c:e7:4a:48:0c:
c3:2f:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:15 2025 by rpki-client