Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: H/wueY3XPU9ynglhRm3ijTrhDXmllSV3Ksslm7Xia5A=
Subject key identifier: BD:4F:AD:94:43:2A:08:DF:5D:D5:10:CD:1D:C6:53:A5:71:B7:8C:A8
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 0197B9342F9DF49E970D816511668642E74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 01:01:34 +0000
Manifest this update: Sun 29 Jun 2025 01:01:34 +0000
Manifest next update: Mon 30 Jun 2025 01:01:34 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: WftbuCwSizSYynToCxnd0x6Ad8PZLO/6mPaX2jv7oJk=)
2: iq3ssvUo5bXZcIWEHzsdc8Eqg0c.roa (hash: Ra9VLNdMH1vgwJCIHGEFTa1hXj9TZ6bEeh1Cxv0m8Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:2f:9d:f4:9e:97:0d:81:65:11:66:86:42:e7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Jun 29 01:01:34 2025 GMT
Not After : Jun 30 01:01:34 2025 GMT
Subject: CN=bd4fad94432a08df5dd510cd1dc653a571b78ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:bc:1f:48:7a:a9:2b:6f:05:ef:cd:85:4a:
a5:fd:64:7f:7b:01:4c:e9:30:b5:7a:4d:78:4e:ef:
99:87:46:ca:63:ef:dd:f2:b5:25:a0:e2:7b:a0:82:
56:ab:7a:5b:3f:63:79:d2:62:7d:67:b7:65:27:ad:
41:ac:b5:6d:88:b5:ee:8d:a3:0a:b7:08:d2:12:be:
c4:f3:0b:06:8e:52:bc:ed:5b:a8:bc:35:ed:c8:4d:
49:41:2a:4d:e4:56:b6:af:e3:7c:91:4c:00:48:67:
03:9d:2f:56:59:77:99:ef:2e:ac:e6:91:ef:57:6f:
d9:04:ed:26:62:65:45:13:07:91:96:cd:91:d9:d0:
99:d8:af:91:d2:4b:11:e8:e4:ca:cf:c3:f7:60:bd:
3f:46:52:9a:d7:32:9b:c9:45:5b:4d:bf:d6:2a:87:
97:8b:e2:32:09:9f:2a:94:4d:14:c1:04:57:12:d2:
c4:3d:3b:bd:3a:08:52:15:f2:22:97:d7:47:70:c2:
c8:12:fa:55:53:be:0f:d7:a1:f3:b0:45:73:48:4e:
c6:ca:71:20:18:ac:78:ee:85:2d:fd:12:c5:0f:69:
2b:30:e1:3d:5a:ab:83:8d:9b:4b:02:ac:d6:e5:74:
d3:48:33:29:14:e6:8e:4b:41:f4:af:df:c2:a8:82:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:AD:94:43:2A:08:DF:5D:D5:10:CD:1D:C6:53:A5:71:B7:8C:A8
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e3:2a:33:61:34:dc:b3:22:78:ab:02:95:7b:92:87:ce:c5:
b6:f8:e6:1a:f1:f5:e7:79:9a:e6:34:f4:89:69:53:d9:f0:b4:
97:6b:5d:93:c9:25:6c:64:48:0f:95:c3:bd:0f:b7:35:86:c7:
57:92:df:c2:73:f4:9e:ba:9e:7a:92:cc:40:a1:3d:b2:92:09:
3e:df:0c:a2:ef:a8:c0:8a:d4:34:a8:7e:42:08:af:12:f9:8a:
f8:26:32:ec:af:03:05:13:9a:d5:09:b8:69:df:44:cc:2b:55:
72:d2:22:17:f4:bf:16:91:e7:13:0c:bb:4c:ba:be:99:c9:36:
07:41:45:37:c0:0c:09:03:65:a1:82:cc:1c:ba:d7:a0:0e:dd:
9d:8e:dc:aa:2c:d1:11:80:c5:45:51:53:87:8e:3a:c9:c7:d4:
f4:20:6a:97:51:6e:22:41:47:e7:9e:de:1d:c2:c5:9c:1e:9f:
e2:a7:98:72:8e:00:2d:3d:10:4c:57:3d:a7:ee:09:64:24:4b:
da:ad:fe:92:f0:89:2b:77:47:4e:0c:7b:4b:57:f0:fa:d3:4a:
2d:92:4b:85:5f:9a:10:ad:f8:8d:91:c3:98:51:d1:6d:c6:fd:
70:2e:7f:f1:dd:0a:dd:76:68:e4:dd:e2:24:4f:9d:e2:e4:95:
87:0b:db:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:21:47 2025 by rpki-client