Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: LJyir3DL0Mqg8UbOW3O3Z4UkcvXtuNwBug/guDoYxxo=
Subject key identifier: D6:61:F0:C3:A7:A6:F1:3B:3D:82:26:09:17:1A:B6:0D:B2:1F:30:8E
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 0197C838DFE6F7DC884654839925B631060B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 23:00:59 +0000
Manifest this update: Tue 01 Jul 2025 23:00:59 +0000
Manifest next update: Wed 02 Jul 2025 23:00:59 +0000
Files and hashes: 1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: f7FJ0GqO3KE7YYoiuNPw+OxNCqB3j7tMh7gEo0uMwoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:38:df:e6:f7:dc:88:46:54:83:99:25:b6:31:06:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Jul 1 23:00:59 2025 GMT
Not After : Jul 2 23:00:59 2025 GMT
Subject: CN=d661f0c3a7a6f13b3d822609171ab60db21f308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:75:45:55:02:39:a8:e3:93:e0:12:33:cb:
24:e6:16:18:fe:61:b4:28:5c:9d:62:67:97:c9:64:
46:ce:07:4c:88:58:96:db:e0:ba:f2:f8:ce:af:f6:
72:95:3e:6d:a8:c1:4b:58:42:48:e0:fa:91:9c:a9:
2b:68:0b:7e:09:12:cc:04:e9:f7:48:7b:ab:11:30:
22:1c:ae:ac:59:6e:89:0c:63:96:1a:92:aa:c8:3a:
d9:b9:d6:5a:15:da:dc:ee:74:0e:29:8b:a6:60:58:
06:bd:ce:e8:d2:04:f5:68:de:32:56:5f:ab:e3:57:
c3:c5:d9:fc:a8:07:20:d3:a0:6f:71:3e:e1:4b:35:
14:02:b8:23:52:29:fb:73:b9:80:89:76:d6:1d:66:
8f:d9:a2:2d:83:0c:ce:6f:d7:86:76:25:3e:4d:10:
79:be:25:de:63:d0:d1:65:24:bb:39:23:80:77:13:
58:9a:18:1e:9f:93:86:0a:20:f1:e1:01:82:53:a2:
c3:1a:48:eb:a2:ba:96:db:51:4c:99:94:b4:9d:37:
11:24:d1:fb:60:f7:ba:de:47:10:4c:a1:32:a3:c5:
25:a7:34:ef:ec:fe:ae:8f:c9:f6:19:9b:83:ab:24:
ad:36:d9:3c:1a:9f:96:18:a5:b0:d5:43:3e:ec:d0:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:F0:C3:A7:A6:F1:3B:3D:82:26:09:17:1A:B6:0D:B2:1F:30:8E
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:94:e0:3f:e4:f9:26:ce:bc:73:c8:45:f3:e9:08:f8:ae:a9:
ef:59:8e:5e:79:4b:0b:0a:9c:a4:96:8b:c0:3f:04:8e:7f:1e:
eb:74:4f:68:1c:a7:66:41:04:3e:5b:54:50:e2:2f:01:38:c0:
f3:3a:fb:eb:5b:8d:94:8a:0a:f1:69:10:0b:28:67:64:71:36:
6b:a3:31:74:00:56:d0:27:2c:bb:f7:47:a5:4a:ed:26:e5:28:
36:08:c0:b9:f2:76:51:19:97:bc:12:82:b1:4d:9e:9a:79:c1:
98:74:40:fc:82:d3:f2:a9:d9:0d:70:e3:93:7a:cf:b7:b6:d1:
b6:71:5c:00:cd:7b:f1:fc:6d:73:1b:34:5c:eb:5e:b5:cd:dc:
78:47:33:cf:e5:ac:02:61:98:ba:a5:9d:aa:42:5c:9b:ae:ae:
6d:91:fd:f2:4e:2d:19:41:20:6d:b4:ee:f1:5f:5e:23:bb:56:
8e:21:33:a4:ec:fe:62:e4:b8:b0:e8:39:00:9d:03:2e:70:b2:
bf:4b:e9:4c:1e:61:ff:37:e9:77:a9:79:26:e0:6d:60:47:a3:
72:39:6f:08:1a:ea:2b:f5:68:dd:f0:25:ed:b2:25:7b:cb:e2:
0e:21:b2:82:09:99:20:8a:2d:dc:32:6f:2a:35:75:94:ef:06:
50:c8:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:05:10 2025 by rpki-client