Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier: RSlUt8RqevBPyb4CMsRZY8hrsSPziM0hQ+QZQvkaQE8=
Subject key identifier: 0E:F5:F7:1F:27:36:7D:01:50:E3:44:30:C2:28:30:40:D4:E8:FA:DF
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 0197CBDF0A971673D4B26C9BB96A128972EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number: 15BD
Signing time: Wed 02 Jul 2025 16:01:21 +0000
Manifest this update: Wed 02 Jul 2025 16:01:21 +0000
Manifest next update: Thu 03 Jul 2025 16:01:21 +0000
Files and hashes: 1: VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa (hash: E6B6Bl1mDcetd5EsaNvc0boHcTeWIhqXRqGoFPj9kUc=)
2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: ocmLgvZBMmsCWoM9eUvfpim+M1UTD786f4dKpHzBOMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:0a:97:16:73:d4:b2:6c:9b:b9:6a:12:89:72:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Jul 2 16:01:21 2025 GMT
Not After : Jul 3 16:01:21 2025 GMT
Subject: CN=0ef5f71f27367d0150e34430c2283040d4e8fadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:83:77:d3:00:00:0f:76:f2:41:4c:74:85:
78:f5:72:23:e2:cb:9d:9c:7d:b6:9b:96:aa:23:a7:
9c:00:8e:42:f5:a8:24:f2:6e:a6:d6:0d:2f:2a:25:
18:18:42:79:0e:a3:7f:34:41:3d:23:20:94:c3:03:
97:11:eb:aa:29:22:6b:ab:ff:27:67:c6:f7:e0:c0:
2b:52:03:db:22:9e:ec:5f:d1:b4:36:82:63:aa:c1:
f2:0c:2c:15:38:a7:d8:72:1d:6b:b3:ac:a8:ae:4c:
c3:c4:77:5a:7e:1c:4a:73:5e:de:de:45:70:9b:ea:
8d:a5:f1:74:9d:ca:d4:90:90:56:9a:50:6a:e8:c8:
0b:b8:ab:c1:97:cb:2b:dc:eb:35:64:30:8f:94:21:
f8:74:b1:dd:2e:86:b9:15:15:85:a7:56:c7:02:e2:
bc:7c:5a:43:4e:c9:44:a8:56:f1:2a:35:f6:7b:01:
7b:ca:69:00:35:fb:cd:6f:89:3e:9d:85:af:fc:5b:
2d:6d:f1:95:a3:8b:14:fe:07:8e:b7:c1:92:d6:1b:
19:be:98:21:5f:5b:ef:10:10:fd:7c:44:de:f9:2e:
ba:c5:1e:3b:90:65:ad:35:81:c7:e4:1c:71:be:9f:
0b:8c:3a:f6:c9:5e:43:01:83:0e:9f:88:56:3e:6c:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F5:F7:1F:27:36:7D:01:50:E3:44:30:C2:28:30:40:D4:E8:FA:DF
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:61:91:f1:af:0b:fa:dc:fe:92:69:92:74:a5:00:00:fc:50:
ba:32:77:41:0e:3f:6a:28:b8:ad:3c:c3:d2:cb:e6:94:4e:8a:
80:93:90:1f:7b:97:16:c4:0f:e8:12:28:18:26:d1:f6:e8:15:
23:c7:42:ba:7e:d1:1b:62:51:f2:39:68:cd:17:c4:f3:3f:38:
99:1e:f8:11:2e:68:8e:40:40:f6:a6:a4:c1:3c:ae:ad:ef:23:
a9:55:81:3b:7a:bc:e4:0f:34:58:e2:b3:41:ec:70:8d:a6:9c:
d2:a2:86:10:58:ba:ea:d4:c8:09:30:95:7b:b5:16:48:08:79:
f3:d6:e7:5b:9e:23:e6:a1:b5:43:d9:d3:d0:cc:2d:44:fd:ca:
50:b8:9e:99:c3:22:4f:67:61:c7:63:8d:48:b3:a5:23:5d:af:
18:40:cb:bc:19:fa:bc:f0:89:ac:89:74:03:32:15:00:c8:21:
98:c2:e9:3d:df:ef:15:6f:50:7e:76:39:dd:88:66:14:58:be:
78:a1:e7:d8:b3:7c:46:de:dc:a3:21:da:e7:ba:96:01:97:ad:
18:01:8e:49:e4:03:37:4d:db:60:e8:af:a8:ac:e2:d6:1f:7c:
25:79:e7:2a:1d:a7:79:94:8e:46:2a:bf:b2:fb:75:ec:9a:5b:
7f:ec:ed:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:43:22 2025 by rpki-client