Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: yIO71Bp1gInqHu5lVjo3DXCnHXmTHEiOhQGtXuAwtys=
Subject key identifier: FA:0C:48:5A:FB:63:57:3F:72:41:C7:84:43:69:7F:80:18:83:AB:20
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 01977CE7AF76816DB22BC5ADAA5E2F2ABFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0ABA
Signing time: Tue 17 Jun 2025 08:00:47 +0000
Manifest this update: Tue 17 Jun 2025 08:00:47 +0000
Manifest next update: Wed 18 Jun 2025 08:00:47 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: pqwqa7ArQwSY6SP9wHjAmlGVWqt9G4vdsNl5FmYvZRQ=)
2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:e7:af:76:81:6d:b2:2b:c5:ad:aa:5e:2f:2a:bf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Jun 17 08:00:47 2025 GMT
Not After : Jun 18 08:00:47 2025 GMT
Subject: CN=fa0c485afb63573f7241c78443697f801883ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:47:a4:e3:d3:4f:9a:72:67:87:3f:6b:68:
58:11:5f:2f:1e:13:32:58:0f:42:b8:ab:82:fb:34:
31:5b:87:40:c9:3d:63:3c:20:43:13:95:8c:c9:72:
13:2e:4e:70:0d:b5:16:cc:33:39:8f:cc:43:a7:92:
f3:22:a0:f9:c0:61:1e:65:a3:9b:01:79:90:2e:f2:
17:49:99:32:62:b3:a7:5e:91:f5:d0:b5:18:0a:1a:
37:7c:93:ca:17:5b:b6:e4:ac:8a:e7:fe:c8:0a:ee:
12:54:c5:64:34:0c:eb:94:2e:ab:5c:f3:81:5f:b9:
de:44:6d:9c:8a:b5:b9:5c:e5:12:1b:6e:1a:7b:00:
99:40:43:5f:64:5d:ed:d1:22:07:70:18:4c:86:69:
f3:7d:64:44:b3:19:51:28:d4:4a:85:f4:a2:ec:da:
07:97:12:6b:92:03:41:82:40:27:3d:7e:d1:4b:74:
78:87:67:92:d9:5b:1a:11:dc:6c:ef:2c:70:b8:0a:
ac:68:86:5d:d7:da:12:c7:5f:6c:75:07:57:f6:45:
4b:2c:08:f9:a3:3b:3f:06:e3:9a:38:c8:1a:f9:07:
6f:37:85:fe:2f:df:54:64:fa:63:ab:8c:16:0c:af:
3a:ad:dc:31:90:6c:2c:c4:3f:4c:19:6f:52:56:d3:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:48:5A:FB:63:57:3F:72:41:C7:84:43:69:7F:80:18:83:AB:20
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:15:6f:a2:69:fc:73:4e:c1:ef:29:8a:b6:b3:f8:e3:ac:80:
66:30:31:bf:d4:2c:10:60:7a:d1:2c:3a:7f:79:f8:d3:80:ff:
25:5a:5f:db:d3:0e:32:a5:95:1e:d5:c3:91:ba:35:8c:50:f3:
45:64:dc:8b:84:70:19:cf:43:26:84:3d:ed:8d:00:5b:d3:7d:
87:40:cf:12:87:0b:63:42:0f:7a:21:5c:bd:35:4b:6a:86:e4:
66:ed:aa:11:2d:37:d2:2f:66:80:25:a0:aa:61:cc:4e:e2:5c:
60:90:21:ff:d7:7e:be:97:0f:31:5d:32:15:ca:85:05:ed:ef:
11:8f:ef:ff:5a:42:88:0c:e7:f0:c1:ec:af:59:3a:32:ff:cc:
1f:8f:2c:05:24:bd:9d:a0:25:00:3c:14:77:9d:06:4a:a1:3a:
bb:69:2c:ec:80:12:4a:19:2a:0c:d3:24:d0:60:b3:88:86:f0:
ae:aa:9e:49:4d:42:b3:7a:83:84:be:02:3d:18:b8:3d:28:87:
0b:42:e3:1e:e2:7a:33:ad:6b:5c:24:f0:16:2f:60:fa:56:d5:
ae:af:44:31:51:f9:ab:ad:a2:47:db:4f:56:6d:49:03:48:47:
f7:23:f8:f6:2f:32:a4:db:83:6b:96:3a:10:0e:1e:d2:f9:96:
e2:a0:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:12:02 2025 by rpki-client