Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier: zfqsPl4Qm3B1+0X4Vd8PmPAHDRLO1jdn0RP02Dlvops=
Subject key identifier: 26:75:44:BF:04:BD:20:18:43:4A:8B:3E:06:87:F4:F3:4E:3E:3B:26
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 0197B5FBFA2C61CC6C12B06526645A1ED355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number: 0378
Signing time: Sat 28 Jun 2025 10:01:18 +0000
Manifest this update: Sat 28 Jun 2025 10:01:18 +0000
Manifest next update: Sun 29 Jun 2025 10:01:18 +0000
Files and hashes: 1: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (hash: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=)
2: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: Tu618dfKVqcQhxs+pOpJa7NeZmrQvYSsfRtktP26mjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:fa:2c:61:cc:6c:12:b0:65:26:64:5a:1e:d3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: Jun 28 10:01:18 2025 GMT
Not After : Jun 29 10:01:18 2025 GMT
Subject: CN=267544bf04bd2018434a8b3e0687f4f34e3e3b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c9:37:35:15:6a:17:3e:ee:36:bd:c9:7a:ff:
58:66:2f:0f:22:1d:a9:fe:70:d9:b1:50:fc:96:28:
81:68:2d:94:0d:a8:c7:0c:8e:7c:65:10:63:f0:ec:
00:c7:69:0a:21:6d:45:9f:76:bc:64:86:89:ef:2a:
f1:d9:5a:64:d3:f7:48:7f:6a:2b:73:b4:09:cb:b5:
18:47:90:8b:a4:07:0e:1b:87:36:dd:20:ee:f0:ec:
e0:fb:b1:05:e1:53:15:02:dc:68:83:c4:e4:81:f0:
61:d0:3e:d2:5d:9b:bd:72:26:81:cb:d3:da:8a:25:
30:a0:b0:1e:21:34:fd:a7:09:20:4a:55:78:93:d0:
0e:9c:3b:be:b2:e9:d2:64:74:40:20:ac:20:53:74:
c0:f0:ef:15:db:ab:b8:bf:bd:be:eb:a8:c2:09:ae:
e4:ec:b3:63:79:2f:68:f1:14:a2:0d:80:6d:e6:6e:
72:1a:d8:8b:39:3f:8d:be:a8:cd:38:99:c9:20:37:
23:f2:66:73:b4:fa:1c:c9:6e:4c:b8:26:6b:b2:a3:
d6:a1:3c:8e:e6:69:e1:58:f4:1c:b5:63:09:6b:03:
f7:79:e3:75:08:54:e4:5d:96:65:e8:c1:ff:92:cb:
cb:61:c6:93:f2:83:94:c6:15:7f:0a:88:39:34:e1:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:75:44:BF:04:BD:20:18:43:4A:8B:3E:06:87:F4:F3:4E:3E:3B:26
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e6:71:a1:8a:64:42:0d:ed:17:28:69:96:64:c4:2b:26:7b:
a0:e8:c0:bf:08:6e:f9:75:85:ab:81:a0:74:f9:80:58:b6:4e:
eb:85:e6:aa:6b:2c:1c:a7:38:35:d3:42:d6:1b:98:0a:8e:bc:
ad:75:61:7f:58:e1:03:3d:84:8f:24:88:15:7c:3e:af:64:93:
8f:77:86:ed:39:dd:79:66:cb:b2:4f:af:d8:d5:61:a1:79:46:
2c:95:c0:59:67:a1:5f:d7:25:da:c9:dd:91:de:8c:ac:69:6c:
22:3e:02:1f:2b:e5:a2:8b:12:5e:44:c3:be:d2:0b:ca:8f:22:
66:96:c0:03:4c:1c:ca:16:f5:69:c2:5f:d7:8b:33:51:3e:5d:
6d:df:e9:fb:9a:85:ab:80:98:0e:f8:1b:23:51:9e:92:af:60:
2d:a5:ea:3f:c2:34:37:21:73:da:db:32:6c:aa:f3:3f:6e:09:
e4:c1:09:5c:cc:e7:7e:19:0a:69:a4:00:95:a4:bd:48:07:60:
02:1f:9e:37:df:4a:30:55:3c:b1:c6:e1:21:42:61:3f:29:b3:
cb:45:04:ba:ce:6a:40:72:e5:99:24:f8:16:17:58:69:1e:88:
a0:2e:23:f6:e5:4f:d4:f5:86:92:2b:5c:f6:ae:a2:f0:d1:ae:
2b:97:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:51 2025 by rpki-client