Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: v0NtF37iXig6hgYXEULKrvUmlN23EA6hmMnXxuF0ZTc=
Subject key identifier: 5C:A5:2B:26:9E:C9:EE:60:34:82:82:28:D0:9C:2F:F3:FD:96:94:53
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 0197B6A0ED1A9B0B41BD72265107B7F4FFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: Au3Pu5s+8lMsE36caC5VSWwZO5KHA06sRKdFhyAQMEw=)
2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ed:1a:9b:0b:41:bd:72:26:51:07:b7:f4:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=5ca52b269ec9ee6034828228d09c2ff3fd969453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:29:be:7b:b4:37:3b:9d:2a:32:27:5f:f3:
6c:83:02:42:95:2e:28:e6:c4:20:8d:95:71:21:34:
c8:6e:00:65:5e:90:30:7f:8a:39:e0:35:d5:2f:72:
16:70:de:a2:39:07:e5:d5:86:a1:d0:0f:71:09:fd:
31:d5:10:9b:81:56:58:d8:5e:39:e1:d9:59:16:e4:
58:89:56:2d:ac:eb:a0:20:fe:5c:73:3a:97:8d:d5:
81:79:2c:d0:e2:0d:dc:b0:75:b8:b8:2d:9b:b5:91:
f8:1f:9c:6d:94:26:d9:a8:cd:0c:6f:ac:a9:6c:f4:
97:98:33:ef:c6:8d:ff:8c:e5:a5:69:42:ed:02:61:
d2:0c:c9:35:de:6a:41:f9:d4:89:7b:6d:ee:38:2e:
26:b9:3b:2d:98:4a:f5:45:e5:c2:cc:f8:7c:e9:3a:
9e:aa:c3:13:5b:7e:db:54:e9:c7:fb:0c:9a:7b:63:
6b:c6:88:27:d1:21:e4:98:6e:c4:8e:d8:95:6c:d7:
06:5c:2e:d6:e6:2b:e0:ec:08:db:89:7b:10:fb:86:
cf:0b:ba:b8:bb:24:dd:84:ab:91:31:4f:6d:b7:1a:
7a:68:21:ef:2c:3e:b9:37:76:48:b5:2e:87:e8:6e:
80:82:f1:7b:41:ad:94:c0:54:17:ca:c6:7e:11:09:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A5:2B:26:9E:C9:EE:60:34:82:82:28:D0:9C:2F:F3:FD:96:94:53
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d1:44:06:ac:95:a0:de:1d:a4:2b:54:f1:97:d2:19:16:7a:
02:23:26:d9:6d:9c:3f:28:34:af:9b:13:41:fc:b6:2f:b8:71:
12:01:b5:9a:f5:03:7b:dd:b0:73:e8:5b:9a:da:32:c2:c2:8d:
74:7f:16:27:b0:8e:b6:c4:ff:a7:cf:05:4d:8c:55:53:ed:f6:
a6:d2:03:47:e2:bb:83:c7:60:b2:93:fb:93:13:0b:9c:26:0c:
4a:60:c1:04:ae:5d:9d:57:9f:2b:e3:cc:d8:23:72:78:fc:0f:
39:26:58:ea:0e:74:44:de:91:24:0a:9d:a5:39:d0:ee:10:11:
4f:60:ba:3f:05:62:c1:5c:b8:08:9e:ef:90:9d:94:a3:5e:ea:
57:a3:8c:01:24:e4:5c:5a:74:27:66:d2:f9:80:28:7d:3c:1f:
46:a6:33:45:a2:a0:5d:06:1d:45:59:71:0f:cc:af:06:f3:b0:
aa:8e:ca:e7:40:55:64:08:0c:7f:1f:de:b9:fc:ba:49:7a:90:
5f:9d:9e:05:78:90:90:47:9c:f1:72:f4:55:de:f5:7c:c2:ab:
d2:e3:ce:c1:0e:2c:a7:25:ad:71:fe:45:88:f8:76:7b:ce:64:
07:33:c0:91:9e:5d:3e:c3:77:e8:72:9e:88:1e:8b:9b:06:07:
c8:c2:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:01 2025 by rpki-client