Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: eWZGw+wo5QtYb9lmVnGxvpmPw/gXMfAMUEdQzQhRs64=
Subject key identifier: 7A:DC:B1:AB:C1:40:B2:84:5F:1C:3F:02:B7:15:DE:BA:44:6C:CC:AB
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 0197B5C4AFBE6A2A65C09092B33CD83D1FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 09:00:55 +0000
Manifest this update: Sat 28 Jun 2025 09:00:55 +0000
Manifest next update: Sun 29 Jun 2025 09:00:55 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: lHO7KQMtgpzF6SessTmJk8FGzbpJPoDpUC60WfNAVWI=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:af:be:6a:2a:65:c0:90:92:b3:3c:d8:3d:1f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Jun 28 09:00:55 2025 GMT
Not After : Jun 29 09:00:55 2025 GMT
Subject: CN=7adcb1abc140b2845f1c3f02b715deba446cccab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:26:7a:1d:2d:70:e0:bd:d3:a7:9b:6d:69:
03:23:1a:0a:6a:22:6a:60:ae:55:02:b0:83:71:4c:
5b:fe:88:d6:18:a3:25:92:16:4c:fb:71:13:71:f2:
fe:6d:6c:20:15:9f:aa:e7:59:05:aa:7a:5d:e3:6c:
94:b9:de:39:51:d9:9a:df:10:6a:71:3c:c4:08:80:
81:f4:3e:2a:72:ad:a9:53:78:33:34:4d:bb:ee:eb:
b7:76:ee:d2:bb:76:76:9a:d5:bc:3b:44:13:d4:87:
9f:18:0d:59:44:53:d0:5e:ee:40:d9:66:2b:d2:dc:
7f:d3:c8:26:67:41:ae:0a:13:f7:d4:71:d9:96:27:
c8:2f:da:1c:07:b8:57:7f:98:f6:f5:2d:5a:9c:92:
ae:2b:1b:13:12:a8:e7:3d:d4:bf:cd:ec:69:62:4f:
04:ef:0d:db:c4:5d:65:29:c9:b4:3c:0d:7f:09:d1:
b1:26:33:29:b1:41:31:96:68:96:1f:49:d2:3a:86:
62:96:09:a2:d3:da:54:fe:53:47:a7:04:24:62:90:
4b:b6:16:a6:a8:d2:9e:1b:57:16:e7:5e:32:e9:e5:
41:41:64:3a:b5:99:a4:1c:0f:dd:3e:bf:1d:9f:43:
03:c6:20:3c:a9:72:b2:f4:6c:80:ad:9c:22:c4:be:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:B1:AB:C1:40:B2:84:5F:1C:3F:02:B7:15:DE:BA:44:6C:CC:AB
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c3:3e:8f:39:50:5b:c7:f6:c3:0a:2f:64:21:bf:81:1c:0f:
4b:03:28:9d:f5:bb:6e:ca:ba:4c:84:dd:f7:b8:c2:41:cd:32:
14:bb:4c:dc:92:28:49:54:c0:46:63:9e:dc:46:c7:8c:79:74:
13:28:71:60:77:56:12:a0:78:6b:51:04:91:f6:1c:62:59:cd:
68:78:73:ee:43:bc:66:89:bf:a6:9f:ce:ac:97:d1:5e:bc:14:
9f:83:9e:ab:93:1a:00:e3:5d:8a:b6:90:5e:52:80:e6:53:db:
a9:d6:aa:df:d0:42:24:eb:5d:55:9a:10:ce:f3:05:19:d3:bc:
1c:90:6b:ad:da:98:4e:1d:45:c8:6a:df:1c:30:9c:58:e5:38:
fe:e2:c7:41:12:49:cc:0f:bc:b9:19:bc:3e:19:2b:25:c8:f6:
0d:4e:d5:f4:d5:cf:8d:d3:c4:da:11:07:db:22:e1:e3:83:df:
75:b3:eb:fc:93:ed:00:7b:56:e1:aa:7c:9c:76:50:5f:66:6c:
a2:e9:51:97:2f:c4:79:0f:79:be:08:3f:87:85:48:fa:af:d8:
77:eb:60:e2:c3:a2:d2:dd:08:7d:45:3a:e4:a2:81:b7:a9:a1:
ce:e3:8b:40:0c:56:9d:37:e6:b6:a8:a6:b0:f4:61:58:45:5c:
14:a6:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:39 2025 by rpki-client