Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File: oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier: racS4WuOs/lNv6j9ip0S6vCvXjqdvldK3HccFO4iUdU=
Subject key identifier: DA:59:81:3E:D9:90:BE:FB:03:D6:56:14:6D:D3:EA:C3:C8:08:98:A8
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial: 0197C426E2C9397472A15B445757F8A4BD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 04:02:52 +0000
Manifest this update: Tue 01 Jul 2025 04:02:52 +0000
Manifest next update: Wed 02 Jul 2025 04:02:52 +0000
Files and hashes: 1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: HG9Od+yZPrknnVG8EjttLKs6F4QlVEic5mzNsnC7hfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:e2:c9:39:74:72:a1:5b:44:57:57:f8:a4:bd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
Validity
Not Before: Jul 1 04:02:52 2025 GMT
Not After : Jul 2 04:02:52 2025 GMT
Subject: CN=da59813ed990befb03d656146dd3eac3c80898a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:79:8d:03:8f:74:d0:52:fd:cd:b9:48:64:
fb:88:c7:6b:a3:20:4e:0d:ba:c3:4e:38:72:d5:34:
e4:b5:d6:78:c5:f1:84:b1:e1:2a:a6:96:c3:62:05:
0a:67:c7:ac:40:09:af:4c:71:b6:9f:a9:36:0b:00:
d2:ea:bc:28:12:bf:3a:59:a4:48:d3:93:e6:aa:d7:
a2:98:7b:ce:bc:07:64:6c:56:df:8f:68:d4:fc:93:
b6:8e:b7:7a:b0:4a:37:ee:a4:7f:0c:8d:62:3b:10:
e6:8c:f6:41:20:f6:35:cb:7c:05:bc:fc:9d:50:a8:
a2:38:b2:cf:59:4f:c5:2c:96:47:0e:4d:d2:14:f4:
b8:bb:a4:dd:8a:0b:17:9f:20:52:69:6b:f0:1e:a9:
d3:87:67:d0:42:4f:8b:b1:39:eb:be:55:f1:5d:a8:
6f:4a:fc:61:1f:71:f9:52:e9:4c:91:ec:92:3b:71:
b7:14:94:1f:6d:de:d4:2a:95:93:84:d1:af:3c:76:
4f:ef:31:f7:30:d0:81:0b:2e:9c:db:ec:8f:bd:37:
4a:a8:4c:ea:e1:79:d6:25:a7:38:45:19:64:cb:48:
a2:f7:0c:40:8c:65:62:dd:b5:2c:d0:7a:94:60:14:
c7:c5:84:14:4b:16:ed:f4:ac:99:8a:f4:62:92:10:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:59:81:3E:D9:90:BE:FB:03:D6:56:14:6D:D3:EA:C3:C8:08:98:A8
X509v3 Authority Key Identifier:
keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e8:35:0b:1e:56:3c:08:a6:21:e8:10:18:fb:75:f2:eb:e1:
d2:12:d9:68:dd:92:1c:94:9c:6c:60:ef:f3:40:55:1f:9c:c8:
d5:58:0e:b6:ce:93:66:85:8f:91:40:93:44:83:2b:e8:77:7f:
82:79:83:57:c5:4d:e2:27:5a:f1:9f:23:26:57:06:02:f4:44:
5d:9f:fd:ac:01:8c:ee:b2:f7:a5:63:ce:1a:49:4c:c4:ba:76:
d3:64:e0:4d:d7:fc:63:60:2a:24:37:7e:7e:a1:67:19:9d:b5:
46:96:e7:96:99:bf:92:8c:c2:04:6d:d1:9b:53:c5:5b:23:58:
26:35:03:49:af:79:a0:b5:38:c0:e1:58:0e:de:30:32:da:81:
61:51:31:ec:db:9d:cd:8a:7a:de:00:cd:10:78:d0:6a:6e:18:
e1:52:72:89:ff:f3:3d:1d:36:dc:69:08:33:f5:b3:af:4d:7b:
ce:f1:82:da:31:e2:e6:ca:9e:63:d5:77:51:2f:7b:85:2e:bb:
50:15:5a:75:6e:27:ba:73:25:ce:d3:eb:c5:5f:d8:f1:7e:f1:
53:d6:fe:eb:c0:b0:ec:aa:99:48:53:14:3d:5d:af:87:a8:ad:
16:00:8d:0a:30:87:53:05:6a:56:24:34:b4:ee:43:aa:b3:cf:
23:aa:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:07:51 2025 by rpki-client