Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
File: OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json)
Hash identifier: zpQ5XUcgVzQaTV0BPynsL4zpCfHaSRhZlOU/F78343M=
Subject key identifier: 47:D3:3F:06:95:D1:C6:86:82:68:BF:6D:A9:86:B0:4B:5D:6B:DF:4C
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 0197B77C066A482A0E48E248ECB565B3EC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
Manifest number: 0BA3
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: Wk4weAtzrpFBzg9MuxbPv2lGTXZhHylDKf1HziiS3nk=)
2: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (hash: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:06:6a:48:2a:0e:48:e2:48:ec:b5:65:b3:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=47d33f0695d1c6868268bf6da986b04b5d6bdf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:11:bd:06:5d:23:0c:36:74:40:db:fa:3d:
7c:37:44:91:db:db:8d:d2:8e:aa:63:c7:69:1b:d5:
90:e0:b7:30:39:be:91:33:e2:5e:99:2d:cf:81:3c:
22:3a:6e:95:4b:ac:12:d9:70:9b:e5:bd:70:2a:47:
06:06:b1:ae:78:71:89:ac:41:f8:90:76:34:94:09:
09:2f:77:3d:3d:0f:aa:f7:3f:be:0f:05:c9:99:cd:
3a:23:7a:2b:ad:3c:14:0f:64:64:fc:23:f6:b7:76:
fb:15:52:cd:69:c1:9e:15:25:03:b6:67:3a:5f:2d:
8f:5f:18:3b:b2:1e:0d:ad:7b:df:c3:23:b1:81:ae:
e0:36:d8:6d:fe:78:1d:33:e5:88:4e:5d:fa:e8:fa:
97:c1:91:72:a2:d5:f6:d3:0d:e5:cb:3d:db:2a:2c:
3c:b3:5d:31:7a:d4:b1:fe:0c:be:09:13:71:75:92:
b5:39:fd:70:53:53:7c:6a:8e:68:e5:d7:e7:1c:80:
5f:1d:cd:36:61:44:c7:ea:6f:74:8a:9b:db:0b:dc:
34:81:95:23:4e:8e:04:77:aa:a1:0a:a7:2a:0c:e1:
7b:90:b1:94:a4:c7:f0:fe:69:73:c6:90:8d:84:44:
08:14:84:b8:fb:2f:ea:90:8d:5b:84:f8:7a:cc:68:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D3:3F:06:95:D1:C6:86:82:68:BF:6D:A9:86:B0:4B:5D:6B:DF:4C
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:17:19:55:03:0f:e9:aa:4d:3a:72:a7:ef:1d:5c:f2:fb:ab:
80:9f:e2:a1:e1:42:7d:7d:6d:dc:cb:6e:e5:15:5b:1c:3f:3e:
22:b0:47:2f:b9:a1:b6:2d:69:d2:02:d3:8b:82:ac:ad:f8:c8:
47:65:76:64:63:01:11:74:95:53:a1:68:22:25:a3:0f:00:d8:
65:9e:10:14:03:cd:13:3a:ce:63:96:99:c8:d7:97:c9:a4:17:
2d:3f:9c:d0:de:32:53:42:80:c9:c9:94:eb:69:c2:91:61:66:
7b:ea:13:dc:fb:e5:de:69:88:3f:92:ff:83:e5:aa:69:ed:dc:
42:51:38:e1:39:53:bd:91:51:92:17:2b:1a:dc:24:b4:52:ea:
67:9e:ab:4d:10:bd:2f:91:e0:b3:29:ae:5c:aa:f0:e7:79:12:
be:51:26:35:20:29:e3:ac:b7:5b:28:c9:77:d7:09:b4:ae:7e:
6c:d8:32:ff:dc:76:65:91:b9:a7:fa:30:a9:44:12:d2:48:85:
ae:b0:72:9b:58:3d:c0:e8:9f:1c:c0:af:04:00:bd:51:44:53:
cd:cf:6e:57:04:76:13:44:bc:2b:4c:74:02:2e:92:07:75:db:
19:3e:69:ff:70:a8:8b:46:4a:a2:c1:4a:25:b9:8c:1b:dd:f9:
88:13:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:47 2025 by rpki-client