Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier: 8LNQEc0eNaHxVEedyvujf+j/hc9ZKTGteHrfBdKhg64=
Subject key identifier: 96:6A:81:1B:88:FC:8C:CE:DB:FE:AD:B2:D1:4A:E7:F1:E8:7C:0F:7D
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 0197BA7EAE0DE0E5CEF0E80B60C015E66644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number: 6C
Signing time: Sun 29 Jun 2025 07:02:33 +0000
Manifest this update: Sun 29 Jun 2025 07:02:33 +0000
Manifest next update: Mon 30 Jun 2025 07:02:33 +0000
Files and hashes: 1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=)
2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: uZl7RPTwOMOIFL8LnesmW3xoq/03EiUxg2MwSgYj99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:ae:0d:e0:e5:ce:f0:e8:0b:60:c0:15:e6:66:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Jun 29 07:02:33 2025 GMT
Not After : Jun 30 07:02:33 2025 GMT
Subject: CN=966a811b88fc8ccedbfeadb2d14ae7f1e87c0f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:4c:6b:b6:58:57:de:de:b8:ea:42:c4:69:
0c:58:c4:d9:0d:c0:af:e4:a8:5e:8c:c6:63:fd:de:
2a:39:d5:90:54:11:92:85:2a:4e:ae:e1:b4:dc:2e:
5c:3b:47:00:5b:46:d6:cb:c4:3c:2d:06:d7:0e:2b:
91:83:81:33:6a:58:9d:94:0a:e4:93:ae:30:e4:bb:
d4:0a:1a:d9:90:1e:fa:12:9c:26:cd:6e:51:3a:0e:
b4:63:b5:63:68:c2:05:20:83:0a:f8:49:f8:9f:3d:
0f:a6:a2:c9:e8:98:21:fd:b3:1e:95:75:9e:bf:cc:
3c:8a:f4:d7:d3:24:d1:33:d3:9c:26:98:37:1e:a6:
c1:39:fc:01:11:13:9e:38:f2:91:61:06:b7:7d:87:
2f:d1:38:e0:34:b7:46:03:2d:13:5d:19:51:3f:8d:
e9:f3:54:5b:b2:ca:07:dd:59:9b:1e:d4:46:fa:2b:
9e:a2:86:c5:53:e4:a5:1e:f9:21:cd:fe:89:4f:04:
48:02:49:19:4a:78:f0:4d:ad:23:25:96:b9:1f:ce:
8d:1e:58:93:f8:16:b1:a3:32:0d:3f:00:87:a1:a7:
96:c4:c2:d9:f5:49:63:fb:1a:83:04:8d:91:bf:03:
be:c0:16:8f:a4:2b:39:fb:72:70:68:61:c8:3f:d3:
09:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:81:1B:88:FC:8C:CE:DB:FE:AD:B2:D1:4A:E7:F1:E8:7C:0F:7D
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:51:b2:79:2e:55:e3:9f:75:f3:1f:c5:43:48:26:db:8e:b9:
d5:40:10:3a:24:92:cd:c8:47:c7:ad:a3:58:fd:cd:fa:af:d1:
85:aa:ca:46:c4:43:09:43:0e:46:ba:dd:e9:f9:63:14:38:07:
96:5a:aa:4a:57:1f:f9:e8:42:21:2d:a9:ec:73:25:6d:20:7e:
fc:f2:d0:44:32:57:72:dd:23:56:81:4f:e4:2c:b6:58:88:fc:
26:ad:1d:3c:5a:41:e6:d6:06:d6:21:ca:ef:84:d0:ef:ef:58:
97:05:69:b0:41:2d:41:52:82:9d:d7:aa:78:23:8b:aa:c5:43:
ae:d6:1e:dc:3f:6b:e8:13:5e:0a:0c:f8:09:67:78:09:4a:94:
7e:80:54:b3:43:bc:68:12:53:0e:d3:85:fb:4e:d5:c6:56:e3:
e6:63:dd:df:c5:c9:63:f6:5d:f5:d5:99:c9:53:55:c9:e7:d1:
da:7a:da:74:fd:a6:1c:00:15:f2:1b:ea:e1:2c:a6:c0:52:46:
70:08:ff:ea:5e:b5:3c:c9:08:17:24:22:aa:89:19:fc:3e:fc:
44:3a:f3:8b:02:02:16:73:fe:e6:15:b4:d7:39:49:79:c5:f6:
84:a0:9b:f0:a7:22:bf:e4:25:4b:5d:44:df:a6:97:0a:77:0d:
4f:ee:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:21:19 2025 by rpki-client