Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: hbw13IuDtfmrW9Fm/QZq7hPvMlzHLMcvnU8BkqgQ0mM=
Subject key identifier: C1:68:9F:63:13:6B:E2:C7:81:CF:A8:D7:27:13:3A:50:F6:F2:6C:73
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 0197B6A1E90B033D53CD3D566D66CFD777F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 04A7
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: Pb2qqZgpbCXyE/mrLBfEsj05VZBflEoM28L1+0hX85w=)
2: iCi2fS7ETh308D0HxV49gSj_2Oc.roa (hash: 8Z0U9uTAtysIVIgEvm+zkP+R4k0ov21EhkUk/LCqI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e9:0b:03:3d:53:cd:3d:56:6d:66:cf:d7:77:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=c1689f63136be2c781cfa8d727133a50f6f26c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:a5:04:09:fe:e9:94:a1:98:d2:1f:ea:e7:
c3:0d:94:b3:96:b7:3c:19:89:1d:26:48:2e:a2:af:
25:46:6e:c3:e1:35:2f:bf:a7:66:5a:55:90:4d:2c:
d9:2a:0c:ad:fd:9d:c2:a4:c6:6d:c7:06:7c:bd:94:
01:2c:0d:c1:d5:e2:61:4c:c3:2c:e3:cf:bb:b7:ef:
89:a3:64:3c:e6:bb:87:bd:11:7d:c8:07:6f:ad:49:
2a:27:40:ed:da:33:b9:1a:1c:cc:86:b7:dd:53:eb:
ba:4c:89:5b:50:65:5c:99:cd:c6:81:7e:0f:7b:f0:
1c:23:44:95:7f:15:be:2e:d5:79:e7:46:9d:be:a2:
42:d7:a2:be:db:a4:37:5f:a5:7f:63:02:d4:1b:8e:
74:31:18:21:76:5e:66:98:96:22:ea:f3:c4:ff:bb:
ae:28:2e:88:6b:b1:0a:b3:82:19:88:28:b4:e1:2a:
9d:27:ff:1b:cb:f9:ab:c8:e6:e6:d9:65:3d:1f:b1:
b1:b7:82:85:37:d0:e1:3d:72:fb:2e:ba:d0:b7:a7:
1a:ed:10:59:61:77:70:42:0c:c1:18:b5:27:dc:e8:
3b:2a:4b:00:f4:0a:5e:34:c1:38:d7:3b:fd:9f:3f:
01:d9:99:40:6e:46:19:20:a3:86:ca:85:75:7a:7a:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:9F:63:13:6B:E2:C7:81:CF:A8:D7:27:13:3A:50:F6:F2:6C:73
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ab:c4:63:2c:17:1e:b8:8c:55:fb:ad:20:9f:01:c1:da:4c:
00:e6:c4:4d:6b:39:3b:df:39:5d:57:5f:7b:50:e1:fd:09:42:
92:41:bf:65:61:0c:65:a1:ff:e0:63:cc:93:bf:f8:6a:2c:41:
2f:eb:2b:08:6a:27:fb:34:fe:95:62:70:dc:84:63:8c:dc:c4:
7b:ba:31:12:da:b2:1d:36:88:3d:fe:2e:9a:d5:de:3a:79:02:
c1:f3:2b:26:34:fd:68:08:c4:36:12:f7:83:e7:ff:a3:a0:32:
79:2b:9f:91:93:0e:03:2b:9e:81:d7:e8:e9:1f:53:57:3c:50:
81:b0:4f:35:15:52:35:33:28:9e:a3:6f:34:57:4f:f6:e2:b1:
73:06:79:4d:20:e1:c9:b5:df:c7:20:1e:cd:fc:14:51:c2:73:
16:d7:71:c4:22:91:3a:58:01:5f:10:72:ed:a0:44:ea:0c:1d:
35:7b:bf:8c:ec:e1:56:5a:cb:38:41:50:16:26:cf:26:05:35:
4f:8c:b4:7a:95:16:4a:9e:90:2a:67:e7:23:b1:99:68:a3:ef:
42:95:a7:d9:90:6e:00:5c:85:e2:cd:f2:a6:7a:0a:22:56:0f:
50:00:5d:3e:de:cd:70:1b:13:c6:3f:d8:9e:f9:c6:24:70:89:
20:a0:1d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:42 2025 by rpki-client