Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier: vzjat82DnIPA3nSAhb5At+wAr1XVej2I8fH+4KIM2oM=
Subject key identifier: 5F:AD:20:1A:A0:40:A2:55:51:BE:CD:08:4A:F4:3F:6A:A1:CA:B8:14
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial: 0197B8908E055422D29785187CA87576C911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:02:50 +0000
Manifest this update: Sat 28 Jun 2025 22:02:50 +0000
Manifest next update: Sun 29 Jun 2025 22:02:50 +0000
Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: +wD5EaJZ+ZFdgM+ukfrKEoxJHggdDwgYE2LuVDvnvaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:8e:05:54:22:d2:97:85:18:7c:a8:75:76:c9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Validity
Not Before: Jun 28 22:02:50 2025 GMT
Not After : Jun 29 22:02:50 2025 GMT
Subject: CN=5fad201aa040a25551becd084af43f6aa1cab814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:8b:26:7b:49:e9:2c:99:8e:52:e6:51:f0:
03:7e:4c:54:58:ac:dd:50:c9:9f:d5:28:1c:c9:1c:
10:99:4c:e9:73:6b:fd:07:d2:ef:10:b2:31:71:9f:
09:3b:ab:e5:88:6f:d6:c5:f6:81:e0:8a:14:af:6a:
ca:04:cf:c9:67:35:b0:c2:eb:be:d9:fd:94:83:f2:
df:e7:58:39:28:e7:31:4a:1f:83:16:e0:63:86:a8:
8e:60:c5:b8:d6:11:85:36:a1:ef:13:06:f6:36:cc:
77:13:9c:84:ab:ae:94:ca:ca:90:ab:9a:b4:e4:23:
d6:7c:ff:14:c8:84:06:8c:7e:9b:83:3d:41:59:cc:
a3:e9:7d:ed:91:22:23:76:65:4b:5c:66:55:6d:63:
aa:bc:e7:ed:76:38:77:7c:54:d5:77:56:93:58:90:
3a:1f:b1:33:42:80:c7:29:53:7e:12:b6:41:be:c1:
d1:89:43:ea:44:e6:93:43:43:14:7b:16:8c:40:d8:
79:15:1f:11:16:a2:03:f6:52:4b:ef:7d:33:b0:de:
0b:43:73:61:5c:e8:fd:fc:ef:cc:9f:88:14:09:17:
20:36:36:9a:93:90:14:ab:c8:88:b8:59:9f:69:b3:
fc:d4:6b:1d:0a:6f:34:cf:2a:3e:f2:8f:fc:e4:ef:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:20:1A:A0:40:A2:55:51:BE:CD:08:4A:F4:3F:6A:A1:CA:B8:14
X509v3 Authority Key Identifier:
keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2a:bf:04:e0:83:a5:74:5d:55:6f:d9:f3:98:ec:0d:c8:11:
93:3e:1d:49:d4:a8:e7:1b:e3:cc:1b:45:75:27:b6:8e:ff:30:
81:b4:ae:85:15:72:21:57:06:a8:87:c6:2e:9e:84:97:01:ad:
20:b5:bf:42:9a:be:e5:43:0c:51:95:d2:81:da:cb:9f:47:41:
0f:e0:af:d9:4c:2a:74:7c:69:d7:59:c5:da:ca:8a:31:dd:ab:
87:74:5b:17:15:48:f2:81:40:4e:61:c0:54:23:f8:9a:0d:80:
f7:12:d3:06:04:d1:6d:aa:d8:22:b9:4e:f2:59:33:93:a2:8b:
d1:99:13:27:2e:54:d2:1d:f1:b7:ca:ec:9a:20:44:39:5e:9a:
9b:4a:5d:a7:18:91:93:c5:13:63:86:33:5f:ce:23:ef:02:4f:
32:06:0d:2b:c5:10:b6:fb:cb:f3:87:cc:38:1e:1d:2c:a6:42:
91:8c:8d:7a:3c:7d:e5:5e:ca:87:49:31:b2:b2:35:37:d3:88:
3b:43:b8:58:c0:0d:44:83:cb:87:80:f0:74:11:7a:15:5c:4e:
5d:53:66:85:fe:24:17:c6:db:de:16:bd:98:29:1b:1b:3e:59:
79:9b:b3:6c:15:93:ec:d9:21:a5:b1:61:9c:2c:08:f7:7c:59:
fa:d9:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:12 2025 by rpki-client