Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: YdUh28wAw1LCOAb4aXR0KCA3KaQlOkYF+VFi6QmJxPw=
Subject key identifier: 00:01:93:4F:CB:3D:DE:50:7E:5A:C8:67:33:38:BF:0B:27:67:57:1F
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 0197CF167DBD9E8E6C9374FCD234CA60CE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 15C5
Signing time: Thu 03 Jul 2025 07:00:47 +0000
Manifest this update: Thu 03 Jul 2025 07:00:47 +0000
Manifest next update: Fri 04 Jul 2025 07:00:47 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: 9nMk+ca+gpE+aw+W14XhS2eRLH5cw0CDdgPwq5papzo=)
2: 6-1osKnhRTEecieKzI4jIsepkfg.roa (hash: ckgtNbcE4kjHePU129hSHdQEi9afRo+rLgqsRFEg78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:16:7d:bd:9e:8e:6c:93:74:fc:d2:34:ca:60:ce:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Jul 3 07:00:47 2025 GMT
Not After : Jul 4 07:00:47 2025 GMT
Subject: CN=0001934fcb3dde507e5ac8673338bf0b2767571f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:dc:db:0b:a2:2d:cb:9b:9c:20:aa:68:d3:
44:3a:12:77:ee:64:e1:85:17:7a:84:d6:dc:2e:d7:
b9:72:42:af:3f:3e:40:48:b1:64:03:f0:08:78:47:
fe:6a:f3:aa:b6:28:ea:61:c0:4b:be:93:fc:a1:a2:
16:e5:89:93:d4:5e:b5:42:9e:36:52:a3:fd:3d:dc:
90:b9:ca:47:29:da:1e:cd:11:d2:d8:01:b3:02:f5:
8b:e5:0a:5b:48:14:00:8a:ac:4c:e7:aa:f5:ed:92:
c1:05:f8:4f:0d:59:40:97:c8:ea:2b:48:43:52:7a:
b0:da:1b:b1:1a:db:46:18:16:2e:87:e6:b7:64:7d:
04:ad:0a:05:f3:79:66:00:21:78:ce:74:d1:f9:54:
cd:d2:de:d4:5d:09:2f:c6:5a:e4:8d:0d:f9:54:bc:
f1:77:3f:f8:a7:6e:aa:cf:06:67:0b:be:fd:56:89:
ca:b4:91:a8:5e:41:56:de:cf:12:82:b2:bd:d8:3e:
12:41:5b:ed:ff:37:51:84:a0:f4:4a:45:16:94:2b:
44:0f:e3:82:3d:e0:9b:0a:6c:db:ef:da:3a:a7:01:
e9:5a:9f:8a:d3:6e:08:e8:e0:de:6a:e2:17:ee:11:
4a:58:91:73:19:e3:91:fd:98:81:65:9f:b6:04:10:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:01:93:4F:CB:3D:DE:50:7E:5A:C8:67:33:38:BF:0B:27:67:57:1F
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2e:e0:f1:b9:8d:7b:f1:c9:99:d2:97:0c:2d:37:be:03:c9:
b7:a9:36:46:c2:0a:2b:3b:62:e2:a1:48:32:93:88:58:91:f5:
8a:07:53:d4:a9:54:0d:8e:24:c6:7f:a6:1d:10:1d:87:54:9a:
77:f7:45:66:7d:1d:2b:e5:f3:a1:a9:73:75:ab:e1:e1:ef:67:
b4:9f:05:99:73:10:a1:ae:70:6f:95:72:6a:74:95:19:d0:28:
4d:1e:38:6e:54:66:0a:ed:90:03:b5:48:80:50:a1:40:88:3b:
3a:c3:bb:b4:17:68:27:f1:7c:82:2a:25:00:2b:34:d6:fd:56:
ef:79:76:8e:13:9c:b9:f9:dc:17:4f:ce:cc:e7:fa:2b:52:8c:
ef:02:9b:c0:77:d7:18:74:ba:20:bd:0e:4f:47:2b:4f:5e:d1:
9c:f6:b3:ab:61:84:a8:f8:d5:af:d5:7a:9d:08:93:f0:f0:06:
7e:25:fc:09:6e:13:61:b7:98:89:08:0c:f1:f4:54:cd:a0:af:
53:1e:5c:3b:55:3c:9d:c2:2d:3e:e8:60:8b:40:9e:63:ee:75:
2e:d0:8a:b5:6e:a9:3c:6f:d1:31:31:ec:06:4a:5b:b9:f1:a0:
c1:6b:0f:75:ba:68:25:05:2a:99:83:dc:21:b6:82:87:88:0c:
55:d1:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:05:24 2025 by rpki-client