Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: nTyKhFQO4wudV3KjaGxhecWFyOg7s8P4J/0r2J0SpZk=
Subject key identifier: A6:E1:52:5C:26:0E:E4:CF:08:16:75:A2:C8:76:19:07:04:49:08:9E
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 0197B77CE06DB6BA970B7C80322E24D813EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0CA2
Signing time: Sat 28 Jun 2025 17:01:43 +0000
Manifest this update: Sat 28 Jun 2025 17:01:43 +0000
Manifest next update: Sun 29 Jun 2025 17:01:43 +0000
Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: mmlrUyX7GOZ53e3P9poPww0AhcbYuFmQDnkEcBQRVTM=)
2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:e0:6d:b6:ba:97:0b:7c:80:32:2e:24:d8:13:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Jun 28 17:01:43 2025 GMT
Not After : Jun 29 17:01:43 2025 GMT
Subject: CN=a6e1525c260ee4cf081675a2c87619070449089e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:83:33:87:72:03:9f:90:48:2b:9f:2e:7f:
42:9e:68:3e:25:de:69:bf:91:d5:c7:5c:f2:b9:37:
13:cc:19:ed:1a:75:89:88:50:b8:ab:30:93:b7:75:
ba:3a:45:96:de:91:5d:45:23:99:6d:f0:05:ab:ec:
f1:e8:86:76:74:fa:ee:e7:78:98:84:9b:ba:59:6f:
70:3c:8a:a2:a2:e6:5a:b1:78:ef:32:31:ea:67:ad:
36:5b:01:b3:78:69:10:94:fc:df:6e:93:f0:fa:11:
bb:3b:c7:76:4a:a3:d5:9f:f0:4a:1e:ab:2d:50:76:
38:82:7d:ae:37:ec:51:d0:13:fd:14:42:7a:ce:69:
f4:1b:30:b3:2e:1d:11:23:bf:88:2a:19:cb:9f:69:
5f:a2:c2:4d:72:d2:86:69:a0:bb:9f:05:6f:89:19:
64:79:de:c9:7c:76:db:e0:8a:6b:3e:d7:72:20:3f:
7d:be:a0:c1:3e:43:44:73:50:80:0b:62:7e:ff:84:
f4:13:d8:53:bc:dd:78:99:69:a7:ff:2d:b4:3c:b5:
6b:dc:61:4e:c4:ce:b8:66:93:06:03:7e:91:7a:dd:
98:3a:ec:c3:76:44:28:69:a8:1a:dc:2e:68:e1:5d:
ad:93:79:cb:5f:d9:7b:ed:42:fb:58:05:f3:0c:55:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E1:52:5C:26:0E:E4:CF:08:16:75:A2:C8:76:19:07:04:49:08:9E
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:62:01:4e:d3:97:e5:cb:ae:bf:7e:0b:49:44:30:07:cc:6d:
6d:b2:e1:f1:db:a2:e2:a9:b8:99:3a:88:a6:aa:60:fe:11:2a:
92:f8:da:57:b4:07:d3:3b:06:b6:82:62:bb:b8:6b:e8:72:b6:
d1:63:e1:91:6f:ba:74:ab:92:1f:93:ce:fc:1b:18:93:e3:d8:
1b:bb:7d:88:60:7b:53:a9:90:3d:f7:f6:1e:92:b1:cf:68:b5:
62:7d:70:f3:7a:9d:04:27:6e:6c:94:6f:77:35:5a:4a:2e:b0:
5f:d2:08:8c:3f:6c:35:d2:d2:78:9f:82:a7:64:74:8b:74:13:
01:09:d4:ce:95:a0:a0:5d:ef:3a:4a:b0:17:e2:48:63:21:36:
4c:a0:25:c5:17:3b:85:80:65:85:a3:09:49:39:c4:3d:0b:04:
9c:b1:c1:43:ba:60:e8:3a:4d:19:7c:42:b6:6d:9c:03:39:f0:
1b:e5:c5:b4:4f:f7:15:0e:01:39:bf:93:94:a0:3d:72:3c:67:
fc:4d:6c:5a:12:9d:b9:c8:6c:cf:b0:48:32:13:eb:7d:5b:71:
22:a7:fc:30:9d:34:12:0d:6e:18:4f:39:90:cd:a3:e1:cb:96:
fe:df:d1:db:c0:2e:0d:d0:da:60:dc:c1:f3:ca:b9:bf:4e:e8:
ef:a8:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:40 2025 by rpki-client