Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier: qxCc7t0FLU+5DPzeXGfCklYXwW56X7ifo622lExB820=
Subject key identifier: 52:0C:1E:AD:AF:A6:57:7B:7C:D7:94:11:57:D1:CE:F2:B0:1E:49:7D
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial: 0197B8213EF1CA470AB6A8572E6BE51099ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number: 068E
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: hnLlF72Gey1RhDc5w20W5CDAULo.roa (hash: shW0FHDTxcWsn5y+FQlRP0Y7mcQwz41mLYft4nrAmSI=)
2: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: IWEYLmPPsehUFTjH2s4eYaL+6pg0rI88qfr9NTk6z3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3e:f1:ca:47:0a:b6:a8:57:2e:6b:e5:10:99:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=520c1eadafa6577b7cd7941157d1cef2b01e497d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:77:56:aa:c4:cf:9f:c2:57:80:9f:64:30:
10:f3:d7:7b:f7:ec:54:6a:e4:9e:a6:a3:53:bb:40:
ab:54:47:b7:70:a3:8d:1e:5a:47:01:e3:c3:02:ad:
9f:9f:cf:35:cc:16:9f:b2:98:f7:36:82:30:a4:4f:
e4:bf:02:58:db:89:b0:50:c7:2d:6c:e4:08:05:44:
95:a7:0f:49:0c:27:cc:9a:9b:5d:23:3b:a0:5b:26:
76:c3:6e:09:a1:8d:42:fb:76:e4:92:4b:a3:46:f1:
1b:af:7e:89:d0:6d:e9:b9:99:95:3a:5b:35:63:0f:
16:a1:4f:d2:5a:81:ba:b5:9a:f1:33:06:21:35:b3:
31:ba:5d:56:00:4b:7a:9e:67:d6:df:31:f4:f3:15:
02:02:01:04:dc:44:e6:5b:84:42:76:d5:67:60:4f:
c4:38:52:76:ab:87:26:78:7b:48:6b:32:d8:13:d8:
61:59:a7:e4:d5:6d:1d:3c:89:aa:c6:72:9b:95:37:
0a:57:50:12:8a:7b:2f:72:45:4b:b4:93:6b:6a:35:
90:6a:60:37:64:03:64:b0:aa:16:32:9d:86:b4:d3:
70:42:9c:9d:04:8f:b2:3e:63:00:db:09:b2:11:46:
ad:5e:27:a2:e6:ff:e6:9d:78:22:a7:6e:7b:e4:fa:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0C:1E:AD:AF:A6:57:7B:7C:D7:94:11:57:D1:CE:F2:B0:1E:49:7D
X509v3 Authority Key Identifier:
keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:9b:de:ba:3e:3c:6d:1d:0c:db:af:52:47:a9:f7:98:c4:74:
9a:d9:8d:56:29:b3:a3:ac:cf:f1:3c:e1:bc:2f:1d:f0:0c:fd:
54:f1:22:85:46:fd:5b:7a:56:14:be:6d:db:ed:86:f9:65:4d:
ca:ff:7f:92:fc:ef:c8:a6:94:69:3a:75:66:1b:06:c3:1d:45:
03:67:85:8b:c6:9f:6b:7e:53:f7:32:a8:99:83:43:e5:ba:50:
ab:ae:4c:db:63:65:93:02:74:b0:f8:36:16:4e:e3:09:51:e8:
0e:43:ae:68:ba:50:4b:f6:5b:e0:95:04:fb:9a:35:7f:2a:02:
0c:d5:65:2f:d2:44:e4:4d:6d:26:86:74:9c:08:28:9e:03:02:
2f:5a:70:08:32:76:0e:85:53:b3:b3:c2:5f:08:1e:28:b3:cb:
0f:ef:48:b7:00:1e:f6:f9:73:7a:fa:24:60:f6:df:06:0a:a1:
0c:47:81:52:6a:72:b2:e9:88:a1:70:a0:d4:63:a8:c5:e0:63:
ae:ae:22:81:32:ba:ec:45:97:1a:63:d3:71:78:ff:a7:94:79:
e6:cf:a6:2d:5c:60:db:90:95:0f:cc:c0:19:29:17:aa:89:e7:
fa:3f:fd:ca:82:b3:1f:72:2f:54:a7:33:a1:a2:f1:49:47:e1:
4b:42:38:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:15 2025 by rpki-client