Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: VYuJ5C9yupVvMLnT3zytwJ1epprAFB/iWfmrXpKQSvY=
Subject key identifier: 8B:7C:98:D8:7C:CC:2D:0B:7C:E8:B7:E6:F4:57:01:C0:82:D0:6B:9D
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 0197B632FB746270F21030E271A371512A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0DE3
Signing time: Sat 28 Jun 2025 11:01:23 +0000
Manifest this update: Sat 28 Jun 2025 11:01:23 +0000
Manifest next update: Sun 29 Jun 2025 11:01:23 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: +4YEJkB7KmUs6foYBAGmMsY1znUzwtbhaF6q4diel/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:fb:74:62:70:f2:10:30:e2:71:a3:71:51:2a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Jun 28 11:01:23 2025 GMT
Not After : Jun 29 11:01:23 2025 GMT
Subject: CN=8b7c98d87ccc2d0b7ce8b7e6f45701c082d06b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:10:6c:79:86:a1:17:77:e1:d4:f0:0c:03:
44:1d:a9:ca:ca:8d:ec:66:66:4f:71:02:d4:46:6b:
f5:43:f0:f8:92:b3:e5:8b:0d:54:7b:fd:4c:f4:10:
38:5b:cb:9c:2f:93:01:7b:51:8c:51:28:70:54:89:
2c:e9:b2:57:b5:67:22:ef:e3:a6:23:15:40:fb:82:
e8:4b:a4:4f:f3:9c:c1:96:f0:ea:c5:06:7b:6d:34:
01:a9:37:cf:d0:5f:93:fe:0a:eb:db:6c:38:84:57:
be:33:73:96:8e:f5:d2:3f:1f:1e:34:9d:49:02:81:
bf:8d:eb:d3:41:38:ac:69:57:8e:79:05:c5:df:6d:
4c:2e:3d:67:df:93:c6:89:d8:cf:bf:48:13:ca:0a:
71:cf:af:2c:e2:a6:51:23:d8:62:eb:e0:9e:8e:0d:
a9:0f:4c:38:78:08:f0:2a:2d:72:b2:f5:b3:05:9f:
df:03:aa:af:5b:58:21:87:e3:63:fb:ca:ae:5b:6a:
14:28:24:11:e3:4f:9a:03:6b:8e:87:eb:14:7a:ec:
cd:9c:c3:91:05:8d:52:76:05:0a:65:9f:b1:bb:66:
8b:88:09:72:72:79:13:a8:15:86:f9:da:aa:0f:a1:
b5:d6:9b:7f:d0:99:2b:23:d7:0d:c4:b1:93:54:df:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7C:98:D8:7C:CC:2D:0B:7C:E8:B7:E6:F4:57:01:C0:82:D0:6B:9D
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:29:6c:63:dd:04:7a:25:86:aa:2f:47:21:d4:1e:72:f0:56:
d6:25:e6:b8:7f:a6:d1:07:5f:e4:14:40:83:50:23:1e:5d:0f:
99:ee:7d:9c:e7:e3:f3:8e:8a:e9:4c:f5:8a:22:d0:10:92:05:
ea:6f:04:97:6d:6e:ae:a5:84:7e:a7:7f:61:15:73:5f:19:00:
58:00:63:6a:63:0f:ee:af:9d:97:5a:0c:97:fc:b1:30:e7:ab:
57:46:b5:e2:40:3f:29:82:94:eb:f2:47:91:2d:b7:3c:3a:a5:
9a:42:e7:4b:5b:9c:92:c5:61:39:96:fc:29:3b:59:2d:31:8b:
be:09:f2:31:39:56:83:65:09:c9:e9:35:f6:0d:40:92:ae:2b:
dc:47:30:0a:de:47:40:6e:a3:93:7f:47:73:46:a5:66:7c:3b:
37:d7:9a:94:6f:8e:1f:9e:ca:ca:b4:97:dd:1d:45:a9:89:1a:
64:f7:c4:d3:74:a6:cc:f3:fc:5f:9b:2e:68:ad:59:3a:cb:58:
a6:ae:25:42:45:f3:6c:9b:65:5e:5e:6b:f4:5e:b4:01:41:70:
e6:b4:19:e0:ef:15:24:0d:1f:88:69:a3:1d:e5:59:2c:88:0e:
68:fa:29:9b:78:07:39:1c:83:ad:0c:81:27:07:c7:54:b8:3e:
5a:8e:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:02:46 2025 by rpki-client