Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: hO/BadOFlLbcrnXUwK1h6/1lHWiUXOLH8NCQS4diGNg=
Subject key identifier: 8B:24:6E:43:F2:34:9A:DC:23:D1:F7:20:9A:8A:DC:77:EE:D4:20:49
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 01977AF97C495917B5AA4C982D00E580DA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 23:00:59 +0000
Manifest this update: Mon 16 Jun 2025 23:00:59 +0000
Manifest next update: Tue 17 Jun 2025 23:00:59 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: Yv82Mee3DJGgsU8QusWhFL7GqqEUz5z4pMx8iJDMjdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:7c:49:59:17:b5:aa:4c:98:2d:00:e5:80:da:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Jun 16 23:00:59 2025 GMT
Not After : Jun 17 23:00:59 2025 GMT
Subject: CN=8b246e43f2349adc23d1f7209a8adc77eed42049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:e7:a4:f5:a9:f0:7a:a7:1c:74:71:bd:43:
67:bd:2a:f2:a4:4b:46:8d:eb:4b:ad:cc:60:86:1e:
f1:3b:ec:8f:d3:e5:fd:58:58:91:bf:fd:63:99:3f:
3a:b7:d2:0e:b8:30:91:b7:51:bd:fa:76:38:22:bb:
7e:d2:af:2e:b7:7c:1a:ae:26:c4:66:70:58:64:76:
2d:86:6e:00:cd:04:9b:45:93:6f:01:2c:27:1b:77:
39:17:be:02:3a:96:12:d4:e8:3c:e8:25:32:f1:72:
9b:ee:37:f6:99:9b:7e:28:3d:23:e7:a6:d6:11:77:
66:02:77:e8:48:13:22:b9:13:51:54:94:28:1f:e0:
00:18:ee:8d:7d:16:01:19:f8:be:e7:f6:be:c0:bb:
27:f3:01:12:15:a3:75:ce:e7:42:83:d8:be:fa:8e:
a9:a5:fe:76:c0:54:ec:a9:3d:6d:7f:7c:de:00:4c:
7f:44:15:9d:c3:7c:e1:43:30:d8:eb:ca:d2:87:36:
43:95:89:c5:93:e5:b9:7f:31:45:b4:62:9e:65:b3:
dd:ec:42:fa:64:1a:18:83:d1:23:c3:88:83:ba:cc:
04:28:f4:45:5e:7c:fe:e6:ad:56:bf:ba:bf:6a:0a:
f1:ad:20:ad:aa:6a:e0:51:59:7e:ac:9f:b5:60:3d:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:24:6E:43:F2:34:9A:DC:23:D1:F7:20:9A:8A:DC:77:EE:D4:20:49
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:27:25:3a:43:1f:7e:91:75:e3:e9:b7:65:e6:47:1c:77:8a:
2d:ac:6a:8e:c6:a5:22:be:66:3f:14:1f:59:2b:f3:49:c7:7f:
07:3f:ec:c8:09:92:68:fb:e7:6f:4b:36:e9:2a:16:c5:8c:d5:
f1:3c:e0:87:03:3b:8b:66:5f:3c:1e:0a:0d:80:f4:42:60:a3:
26:33:9c:88:cf:00:f9:c6:39:60:e3:9a:07:e9:73:9d:c5:bf:
6a:dd:9c:26:37:17:c4:7a:d5:80:de:22:41:86:b5:88:dd:77:
28:9e:b4:b1:8d:bb:01:7d:38:95:a6:77:5c:89:ec:8b:4f:50:
9c:23:b5:3d:a3:9b:ef:8b:08:3c:95:ed:5a:c7:49:04:3b:cd:
68:32:d2:ed:77:89:03:08:5e:3d:5c:6c:c7:36:80:34:40:37:
7c:61:26:c2:68:82:97:01:09:ed:63:ba:82:4c:78:a7:3f:30:
68:c1:68:f7:8c:a8:0b:78:2a:12:ec:d8:e8:52:38:c3:b3:64:
39:56:87:0f:57:9d:3d:32:7b:f1:87:bf:48:4d:3f:28:59:16:
74:d1:6e:91:9c:eb:76:4f:e8:e4:c2:49:cf:2b:f7:22:9c:d0:
7e:b9:ee:11:a0:5a:ea:77:1e:c5:59:fa:ae:20:1a:39:3c:7d:
fa:03:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:48:57 2025 by rpki-client