Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: aboz3MS5i8nCgP7J4z3QMoWeo8RWBOdM4zF4c/Ipq6k=
Subject key identifier: A0:76:47:25:FB:BF:86:ED:2B:C0:F4:46:86:B7:B0:DF:FC:4B:BD:1D
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 0197B6D77D63B2C4057548DDCAB86A2DA5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 0205
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: OSKFrUkvyH8vmHn90gfYUG9rR56zYWVLLtX2enFI5zE=)
2: lhV68OSkur6ZsAA_2dy8-L_4IL0.roa (hash: BvvVh8/fqP1HPi1uOxwh0N4UEkoJk2nM455CRrFSNec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7d:63:b2:c4:05:75:48:dd:ca:b8:6a:2d:a5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=a0764725fbbf86ed2bc0f44686b7b0dffc4bbd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:b8:c7:bf:18:84:cd:a0:68:8c:91:47:0f:
01:01:79:75:67:09:7a:f5:94:2b:b0:ef:2a:67:d8:
59:a3:2b:18:82:78:f6:c8:37:05:f4:19:dc:8a:78:
db:33:09:86:29:c8:1e:f5:64:78:63:ad:2a:c6:c0:
da:6e:44:41:4b:d0:44:d9:2a:c4:6b:3a:b6:57:a9:
ca:ac:18:b1:a7:3b:15:fd:e2:7e:9b:4f:e6:73:2d:
96:40:76:ab:b8:e7:b4:33:8b:b4:26:1f:71:ef:b0:
11:db:4c:50:80:00:40:2e:94:c3:f5:de:ec:85:f5:
51:45:2c:5c:51:30:3e:ac:e4:2a:ec:68:e0:ec:78:
17:16:8c:5f:fe:f3:a1:00:47:b6:a3:1a:bc:07:a9:
e7:89:11:f6:86:96:9f:84:38:f2:5d:c2:8c:6c:97:
dc:61:77:eb:27:9b:a3:22:6e:cb:71:13:5e:e5:0a:
95:b7:cd:6d:f5:eb:d9:60:07:ee:8a:f3:26:e8:47:
13:b0:66:1f:4f:90:21:12:34:9e:ad:69:ad:53:b9:
8d:be:f7:d4:8a:83:7b:36:bd:1c:7f:33:a2:6c:89:
75:59:50:1a:53:7f:b7:2f:e7:be:9f:47:b9:78:64:
26:7e:b7:44:e3:93:58:c6:81:a7:79:22:5d:19:c6:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:47:25:FB:BF:86:ED:2B:C0:F4:46:86:B7:B0:DF:FC:4B:BD:1D
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e2:ed:51:3a:50:a0:1f:11:6e:1d:ad:ce:92:aa:c0:42:78:
0e:47:5a:1a:54:a2:8f:c2:dd:a5:d7:77:12:d1:1a:cb:17:b2:
77:13:8f:04:c8:3e:0e:9c:8a:be:49:9c:f8:a2:6b:f9:27:5d:
a3:d8:10:71:74:d5:f8:d7:4f:fa:f4:33:d9:1c:96:db:de:d3:
ed:a4:40:1b:78:54:24:d4:3e:35:f0:1a:5b:80:2a:ef:45:04:
22:26:ca:da:d1:a7:2e:19:c7:03:a8:0c:fa:a8:7f:11:ce:0b:
d1:47:36:2f:98:3f:64:a6:57:1c:0d:2b:71:66:d5:ba:6f:0c:
e1:ab:26:67:93:d0:ea:9a:85:66:b1:b7:3b:5f:3d:27:fd:b7:
78:c2:5f:ec:81:b3:52:4b:1b:5c:df:59:a4:7a:91:37:dd:ed:
dd:83:c5:f8:f4:b4:53:20:35:93:b1:98:7b:3d:4d:bc:33:c9:
75:18:26:64:5e:6a:3f:e8:77:90:52:72:ae:3e:dd:a5:1b:81:
ee:db:31:54:67:38:6a:7b:2c:8e:0b:d2:31:bd:cd:ef:04:c1:
28:bb:a1:89:1f:91:19:ea:26:b1:6e:6a:be:b9:a4:fd:f5:ff:
b3:fc:dd:ed:03:cd:58:e8:10:6f:72:9e:08:02:52:b2:32:4b:
53:23:d8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:29 2025 by rpki-client