Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
File: OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json)
Hash identifier: IPPwPiN/tl9n0YTo/teC149eKKdFMbM24im/aKtVZw8=
Subject key identifier: 39:9A:8C:85:E2:64:CC:85:F8:4B:00:4D:8E:D6:4D:29:73:28:20:D7
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial: 0197B632B25A65F9AE99E9496355ED5AE5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
Manifest number: 150A
Signing time: Sat 28 Jun 2025 11:01:04 +0000
Manifest this update: Sat 28 Jun 2025 11:01:04 +0000
Manifest next update: Sun 29 Jun 2025 11:01:04 +0000
Files and hashes: 1: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: kWB0A722t12bDC9A6JiAfMelxoBncXZBEQV+tq68TSU=)
2: QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa (hash: MbjZHir8r+jpFNjo1IiwrrSwZjkeJw6BZ6V05J/2V+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b2:5a:65:f9:ae:99:e9:49:63:55:ed:5a:e5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
Validity
Not Before: Jun 28 11:01:04 2025 GMT
Not After : Jun 29 11:01:04 2025 GMT
Subject: CN=399a8c85e264cc85f84b004d8ed64d29732820d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:04:42:e0:69:4b:96:e4:a6:89:24:9d:8a:
fc:ad:53:04:5a:4d:ba:c9:2a:97:55:e9:b1:5d:20:
70:37:60:d6:4a:cd:c9:2f:55:ed:89:a9:a2:e2:8b:
fd:08:78:8f:67:d6:25:ba:87:27:82:d3:d6:ea:6c:
e6:f9:58:67:60:38:bc:df:ef:40:a1:42:91:45:d4:
bc:fc:1e:4e:fc:3a:3d:46:2d:48:fc:61:96:99:a1:
4c:f0:45:87:51:1c:fb:b3:61:16:ca:23:b6:9a:f1:
2e:49:1d:12:ce:96:ff:aa:3e:b8:fe:eb:de:f6:83:
15:c6:9c:80:fa:82:83:85:ac:bc:a3:cf:5f:5a:48:
2c:61:76:05:59:d9:da:7b:29:a6:22:12:08:63:5d:
53:64:f6:87:9d:e8:af:de:d4:19:99:e9:7b:f8:32:
67:ac:e1:b9:ef:f7:85:82:bb:94:82:7c:d6:6b:1d:
e5:c0:a1:df:f8:e2:c8:56:ab:2d:85:b7:84:db:4f:
2f:90:fb:3e:5d:37:47:1c:5f:62:65:0c:43:99:6b:
bf:47:e6:1f:1d:ab:09:13:4a:a2:f9:82:45:f9:21:
49:48:5d:24:72:8d:bc:fd:42:26:71:62:b6:4f:38:
ce:f2:22:2a:7f:38:9f:2d:11:0e:d4:e2:ba:e5:dd:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:8C:85:E2:64:CC:85:F8:4B:00:4D:8E:D6:4D:29:73:28:20:D7
X509v3 Authority Key Identifier:
keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dd:3f:f3:39:2e:de:14:3f:95:d4:62:3b:2e:6b:b2:50:6b:
d7:4a:af:30:b7:77:8f:41:c2:61:8e:2b:15:17:d6:18:ba:6f:
bf:d4:8c:41:bb:08:e7:d9:25:ab:13:60:ea:dc:45:22:83:8e:
99:ae:e6:35:bf:02:a3:cf:97:ab:13:0e:2a:bf:a7:4a:f6:12:
2b:23:c4:a1:25:e4:dc:9f:70:d9:e9:e9:af:e9:04:1b:ba:f0:
f6:f0:cf:f1:11:94:bd:67:2c:e0:d9:5c:20:0f:ab:5a:5a:62:
cd:07:5a:db:20:bd:86:55:2b:ed:a4:e8:9a:40:f1:3f:fb:94:
4d:47:72:5a:2a:ed:fb:15:4c:78:8c:05:25:c7:21:8d:b8:f4:
7f:45:51:36:25:74:89:a3:0f:25:80:00:5f:c5:e7:93:7a:61:
2e:69:17:df:71:be:ea:dc:7e:de:de:d8:5f:5d:d3:a4:f7:c4:
9a:35:66:92:16:fe:55:a8:d9:08:3e:91:2e:f2:53:dc:9d:d4:
86:7d:51:a9:a9:36:76:39:77:b6:f8:1f:2c:9f:79:fc:69:e5:
2e:3b:15:c8:8f:e2:a2:89:7b:b2:9c:8e:de:26:fe:b0:71:d4:
55:a3:71:ff:a8:e3:66:1a:21:eb:85:32:3f:1e:1f:56:98:73:
24:94:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:44 2025 by rpki-client