Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier: ruJJ3ecKqX1VgWstR6TTffIUBkeJfZVoY4yi6Lq0VAU=
Subject key identifier: CF:28:AE:89:4B:54:BA:C8:7D:6C:CF:43:B8:C2:5D:67:81:E1:64:0D
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 019768854B4D05727CE35C3CD899C1B82F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number: 0F54
Signing time: Fri 13 Jun 2025 09:00:55 +0000
Manifest this update: Fri 13 Jun 2025 09:00:55 +0000
Manifest next update: Sat 14 Jun 2025 09:00:55 +0000
Files and hashes: 1: _RMv1Q7O2CnoWhcrAcn90ZX5USk.roa (hash: I2FYErDanPUJADaKO92Q6jyRK2EK15cN4Qdxt/bs9vQ=)
2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: wTpTkVkmfcV9rF8yjsRw8iwIjPvRlB6Nh6jtTRtMDCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:4b:4d:05:72:7c:e3:5c:3c:d8:99:c1:b8:2f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Jun 13 09:00:55 2025 GMT
Not After : Jun 14 09:00:55 2025 GMT
Subject: CN=cf28ae894b54bac87d6ccf43b8c25d6781e1640d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:6e:44:b9:ff:b2:5a:9c:75:b2:31:07:fe:
73:72:db:33:2f:69:31:98:e2:72:bd:dc:29:3a:1b:
93:07:30:72:10:ff:e8:b2:97:81:f3:6a:e3:6c:2d:
7d:c2:4a:e4:2b:63:d4:f8:f6:4d:4e:e9:0c:1e:ae:
2c:2c:82:dd:94:b9:5d:48:69:32:25:1a:74:87:f4:
8c:5f:a4:85:1d:3c:e2:eb:6f:30:0a:4f:31:8d:dc:
4c:1d:96:6a:d2:a7:d5:04:3c:42:ae:5a:29:ae:bd:
95:a3:be:71:c0:f7:cc:11:fa:d9:26:42:32:a8:0d:
e3:56:11:5f:67:6e:0e:8a:e1:b3:e2:be:0f:24:ac:
e9:99:44:e4:ff:10:df:55:59:51:93:17:19:20:16:
64:33:1d:01:7a:d9:31:4f:dc:1a:c8:11:9c:54:00:
6e:70:54:40:7a:01:8a:82:83:b7:94:15:e1:21:13:
bb:e8:57:3b:10:b1:6a:91:0d:d4:60:b8:93:e0:dc:
c7:79:e5:bb:52:26:96:cb:d7:4a:5b:e8:56:9a:df:
49:1a:9a:30:92:f2:6f:c8:cd:85:5f:9c:cc:30:75:
db:9f:a4:48:9a:ce:06:74:8b:a6:c3:55:ca:c0:c3:
bd:e1:40:18:70:7c:df:9c:b7:97:b8:08:60:8d:bf:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:AE:89:4B:54:BA:C8:7D:6C:CF:43:B8:C2:5D:67:81:E1:64:0D
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2f:61:41:1e:be:0e:ce:51:b8:2e:17:bf:66:64:de:a1:46:
01:e5:99:14:58:99:3a:d3:85:98:15:49:fd:f0:26:87:a6:4a:
a1:bb:4f:b7:35:00:37:5d:47:e0:1a:78:04:83:51:59:f5:13:
c8:1e:71:cf:1f:71:90:04:b9:25:d0:74:28:4b:31:e7:cf:e4:
cc:7b:42:08:61:11:8c:49:f8:d9:15:28:19:9c:8d:61:7d:bc:
21:7b:6b:76:f5:c8:a7:e2:10:52:fa:83:f7:30:31:34:04:52:
32:c2:72:af:79:8a:43:27:07:4d:59:e7:09:13:57:3e:2e:1b:
cd:8e:6f:15:37:03:9f:7d:53:56:54:c8:11:d2:06:f2:a2:ce:
dd:d2:8a:0f:30:37:7c:d8:ae:cd:4d:97:9b:05:a5:6c:9e:48:
70:52:4c:34:09:83:5c:b3:cd:72:6b:d2:13:8e:43:3a:3b:f1:
8c:27:f6:f7:36:91:19:45:ba:4c:10:cd:27:6d:7c:17:97:a0:
6a:ae:4e:be:15:8a:0d:ac:5f:65:20:1d:53:2e:28:90:ec:29:
52:55:9a:45:99:09:82:d9:0d:83:50:0e:2d:d6:8e:0f:de:de:
9f:91:7e:42:60:1a:28:b1:7e:f3:33:8a:af:4e:24:2d:b2:b9:
91:7c:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:26 2025 by rpki-client