Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: 7SNvrgQ+KwkYmNVuKOpvfMCNkbxAPg3Uj/6r+GuoZQI=
Subject key identifier: 2A:06:5F:94:AA:3D:D3:EA:AD:10:D8:57:AB:B6:61:4B:51:81:47:61
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 0197B70E7ED3278152DA369E66F194E96BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0C33
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: lzPtQhXptEfG1093gTE7CG559835vRB1cpQ7QK5A584=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7e:d3:27:81:52:da:36:9e:66:f1:94:e9:6b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=2a065f94aa3dd3eaad10d857abb6614b51814761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:52:4b:93:da:11:17:77:44:e0:f1:6c:6f:
50:06:4e:a5:73:56:d2:74:f9:2c:40:a2:7a:ac:73:
af:a8:49:90:ff:d3:ef:82:e7:08:f2:7d:ad:15:70:
d0:0c:88:a0:14:6f:37:61:35:3a:fd:e8:7e:fd:04:
d0:8a:f8:a1:b1:c0:08:48:16:5e:62:a0:3c:f4:0c:
d9:60:e3:78:14:6f:83:59:da:83:c8:91:41:41:45:
2a:88:e1:d0:3b:19:e0:3a:ea:d1:73:df:f6:a1:07:
08:50:18:ed:01:f0:25:1b:bd:f2:8a:39:d5:47:ea:
aa:89:b8:09:62:45:ab:f1:41:27:8a:3d:5e:fc:b6:
fa:b9:f8:4b:6b:42:2b:25:d1:b2:8d:3d:34:37:a5:
ce:36:23:4d:cd:28:c0:f8:46:b2:28:8b:99:87:28:
47:f6:82:5a:1e:7c:0e:c7:30:7a:9f:29:c0:4c:4b:
ef:50:ce:d8:23:9a:0a:1c:54:c6:3b:19:15:3c:68:
c5:0a:8a:38:57:8d:b5:eb:36:5b:a2:28:d2:e0:5f:
86:4d:0c:f0:94:2e:f0:8d:fe:87:d3:f9:70:25:85:
c7:dc:f2:40:d7:0a:03:ee:10:49:5d:32:d9:33:d5:
51:d7:6c:52:de:a0:e9:ff:42:71:5f:30:f9:a3:94:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:06:5F:94:AA:3D:D3:EA:AD:10:D8:57:AB:B6:61:4B:51:81:47:61
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:1e:4c:2d:e1:71:1b:4c:fc:38:26:fe:d9:ee:8b:dc:61:23:
9b:ca:0c:b0:ae:f2:9f:58:bf:36:53:37:98:7c:e2:b7:b7:46:
00:1c:67:62:7c:e7:c3:19:77:df:91:85:bd:88:38:28:59:b0:
4a:6a:2b:86:30:24:a2:20:45:31:03:cf:f1:b0:90:10:3b:76:
f7:90:c0:6c:c9:ad:d2:5e:c4:b8:74:87:01:63:db:d9:17:ec:
30:2f:5f:14:35:33:78:bb:ee:23:84:6a:ae:88:38:71:ab:c0:
ca:cf:77:42:58:53:71:c6:6e:55:37:de:c8:dc:85:71:f4:9c:
49:d2:93:66:7e:2c:f7:db:b1:74:fe:98:cf:ae:5c:69:7f:bf:
c5:cb:df:f3:51:dd:e8:be:f1:18:20:2a:31:dc:35:61:d2:3f:
b8:76:71:3a:68:6d:36:b4:21:c7:32:03:13:e0:d6:c8:ce:80:
59:e4:46:9b:01:05:0d:d7:f2:f0:89:ce:a4:71:4a:89:02:db:
20:a0:ea:36:20:f0:a4:89:d5:e3:a7:e2:d2:c8:40:8a:41:b3:
99:96:d6:7d:e5:64:0e:cf:71:fc:8b:dd:8f:cc:1d:05:34:3d:
a3:c2:d3:cd:12:e5:6f:64:96:ab:ac:44:ae:0c:2c:a8:db:80:
5b:97:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:22 2025 by rpki-client