Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: +k84moYLhNtTBQDZoKRm2GIk4SU9HQCTalPGFf1g0JQ=
Subject key identifier: D6:22:0E:D2:6E:B3:D2:06:61:6B:E3:0C:24:BE:8A:7F:66:3D:E3:EE
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 0197BA0FBD7EBFF45E5D9B7324F8C8F9E2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 01A5
Signing time: Sun 29 Jun 2025 05:01:23 +0000
Manifest this update: Sun 29 Jun 2025 05:01:23 +0000
Manifest next update: Mon 30 Jun 2025 05:01:23 +0000
Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: hBG2h9v/tt/jgwZbG9gq1EzsWk0gRXT6ytkPzKkRMrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:bd:7e:bf:f4:5e:5d:9b:73:24:f8:c8:f9:e2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Jun 29 05:01:23 2025 GMT
Not After : Jun 30 05:01:23 2025 GMT
Subject: CN=d6220ed26eb3d206616be30c24be8a7f663de3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:cb:e5:69:9e:2b:55:6d:6f:0e:4c:4c:d7:
2d:86:0d:ea:d2:b5:73:9b:ba:c4:6f:0c:30:a0:8e:
3d:02:8b:bf:5a:80:5c:e6:88:f0:d1:0a:40:af:ed:
c5:fb:bd:89:29:9d:65:fe:9e:7d:40:84:a4:26:bd:
3d:b9:74:47:64:f7:f8:08:2d:12:bd:6a:03:cf:00:
50:fe:30:60:06:c4:ad:b5:55:2e:ef:7f:99:ad:67:
5f:18:7b:32:05:a7:f8:1d:26:01:40:3f:f6:be:0a:
8c:c9:ab:36:d5:80:f6:b6:02:23:b5:0c:82:cc:ee:
56:73:ce:27:76:60:45:bb:12:ca:3f:aa:5b:62:a9:
84:d5:88:cf:4e:a9:10:1a:e6:22:0d:b4:04:d4:c8:
d5:18:76:b5:42:06:f7:b5:e5:65:6c:4b:67:1b:6a:
ad:5e:a2:95:f9:aa:d2:c4:c1:58:39:f5:b0:90:cf:
74:15:a9:05:7f:c6:cb:72:1d:25:c9:e8:04:e0:93:
cc:d7:17:7a:10:94:40:ac:a3:d4:ac:69:a0:9a:a3:
5a:52:91:f7:18:dd:b3:1a:f4:b5:0f:21:d9:3a:b1:
cd:09:ab:e1:19:ef:47:7f:72:15:52:36:45:b9:81:
e2:df:30:d2:e6:e5:7b:b0:a9:cf:7c:e7:70:9d:db:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:0E:D2:6E:B3:D2:06:61:6B:E3:0C:24:BE:8A:7F:66:3D:E3:EE
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:54:00:b6:60:b0:d4:87:c5:aa:3d:70:40:f0:a2:cc:c9:ec:
4d:48:db:ed:cb:17:3c:87:17:97:c3:2f:a2:4a:5b:49:c9:df:
4f:e3:d9:a1:9d:13:6a:77:73:49:9a:41:75:dc:92:d0:60:1a:
ca:13:08:85:d8:6d:4e:bc:5d:c7:a1:10:c8:55:ed:4d:de:57:
fe:9f:00:98:eb:1f:65:e1:95:4b:0c:22:37:fd:44:4d:87:e7:
bd:55:fe:33:40:3f:61:36:71:01:6c:a7:3b:0f:74:42:7d:8a:
7e:ee:e4:8e:ee:2e:45:de:a6:38:ed:31:2e:10:91:d6:44:ef:
0e:bd:cf:7f:11:ff:6e:53:ef:8f:5f:4d:06:24:6c:33:85:ce:
67:bc:b8:9e:a0:41:f5:42:1b:18:a1:c1:0e:b5:a9:05:48:ab:
b2:1a:3f:32:8c:9f:22:91:cd:3d:7a:19:5a:10:ae:75:9c:f1:
4a:7b:5b:94:41:95:30:9b:ca:03:98:75:71:e1:f5:ba:4d:d2:
88:28:7a:60:fe:5e:bb:eb:ad:53:34:75:2d:aa:61:cc:d4:56:
cd:13:7f:f2:a1:f3:10:bf:d0:46:f6:d8:1a:f9:96:b5:8e:60:
b4:40:42:be:6d:9f:da:ca:9f:b2:40:8b:33:04:e1:ed:3c:37:
a5:20:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:12 2025 by rpki-client