Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: v4gqaWMvm+D4J7gpr0fegiliVxDN+FFWebB8QTAE9v8=
Subject key identifier: C9:D8:D3:B9:1F:EF:E2:2E:F7:D7:24:EB:82:5B:F6:5D:26:D3:60:48
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 0197B7EA2F6F86C141646A0595E24837E4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:07 +0000
Manifest this update: Sat 28 Jun 2025 19:01:07 +0000
Manifest next update: Sun 29 Jun 2025 19:01:07 +0000
Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=)
2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: gPkJujx1Noz9YuyhSRyQBftR5dKXW188nWM8perZFLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2f:6f:86:c1:41:64:6a:05:95:e2:48:37:e4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jun 28 19:01:07 2025 GMT
Not After : Jun 29 19:01:07 2025 GMT
Subject: CN=c9d8d3b91fefe22ef7d724eb825bf65d26d36048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:6d:16:8f:af:33:f7:93:67:ab:c3:5b:ed:
dd:67:36:2e:4a:94:86:f6:26:fc:25:11:78:82:72:
42:64:22:e0:0c:f9:99:e5:69:56:f2:a5:7f:c7:f0:
1b:e3:99:28:88:ed:05:b3:8a:65:12:65:08:c6:81:
b0:0a:7e:6e:4a:b6:0a:47:91:8f:fa:a5:02:5b:6d:
8a:38:78:0e:e8:a9:fb:96:d6:9e:0c:aa:db:8b:66:
81:8b:3d:f4:a4:14:e8:3e:44:da:26:82:97:4d:6b:
78:cc:92:e1:36:71:f7:aa:1f:32:55:88:ee:85:cd:
01:95:3c:b3:64:e1:7a:fe:9d:8a:1f:71:38:12:ba:
b8:58:54:34:24:5f:1d:14:be:5e:bc:3d:a1:16:66:
40:ae:05:ab:c4:9c:fd:94:30:1a:3b:51:8f:07:a1:
ff:7e:ad:c7:69:8f:99:9c:61:59:98:69:14:6a:d2:
8e:ac:cb:2e:29:dd:24:22:d8:2d:a8:0e:cc:8e:54:
28:a0:ea:f8:7e:a1:45:9b:9a:17:3f:20:5d:ff:90:
79:59:50:aa:7b:e7:9d:94:1c:b4:10:e9:70:6c:d1:
b9:7d:44:c4:92:a3:f2:93:9e:6f:32:b8:25:d0:85:
c1:08:a3:c6:ef:cb:e9:7c:43:ed:17:38:08:a9:60:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D8:D3:B9:1F:EF:E2:2E:F7:D7:24:EB:82:5B:F6:5D:26:D3:60:48
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f3:1d:7d:79:0e:47:17:86:8e:0d:d1:ec:7e:63:7f:a3:0d:
eb:da:44:f3:26:66:4c:75:ef:87:86:5c:7c:4e:cc:7c:d4:6b:
04:07:02:c2:44:a8:3f:a9:36:3c:2d:32:fa:c3:63:59:51:39:
1b:6f:fc:89:80:ad:a8:ac:85:46:de:11:e3:e5:64:57:88:7d:
bc:7a:bf:c2:ac:87:ee:7d:e5:2e:e7:5f:cb:6b:3e:62:01:c3:
fc:15:6b:c1:51:5c:b9:e1:0d:8f:e7:74:ba:df:29:ea:c4:a1:
d4:5b:03:25:c0:c3:ac:02:d9:db:4d:7b:ba:5b:76:61:d8:85:
0c:85:cb:5d:3a:d9:1e:ba:35:59:19:84:33:84:ac:2d:ca:9f:
47:e0:0d:44:48:d1:95:4a:18:8d:24:cb:2c:2a:1a:ba:53:fd:
60:a5:66:af:3d:85:4c:b5:81:77:ee:17:c7:16:9f:a9:c2:4f:
e7:ed:6d:06:2d:04:2d:96:d5:19:c9:d5:ec:33:39:b9:44:05:
5d:c5:8d:57:79:90:11:99:7f:f1:3e:24:1b:38:de:ef:87:f7:
8b:85:1f:3a:d5:8f:d0:d4:67:cd:1d:ed:56:d9:8a:b9:a4:79:
ee:f8:03:5f:d8:24:ef:57:91:9f:6f:7f:68:da:80:ec:e8:d4:
55:fd:64:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:32 2025 by rpki-client