Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: RPo8bOiEA6cqzWdOk6Rbi+NUtfTAF6JPcLrQdKheHGU=
Subject key identifier: 8B:23:71:6D:99:17:55:4C:C9:D3:78:43:22:CB:57:05:C2:05:2E:64
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 019769CEE32B348DB54F14E7325082C2FADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 04D2
Signing time: Fri 13 Jun 2025 15:00:55 +0000
Manifest this update: Fri 13 Jun 2025 15:00:55 +0000
Manifest next update: Sat 14 Jun 2025 15:00:55 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: Jj4MluZFuKzavrpyJnQcxeFCyiHbDT/BC3uM4cecyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:e3:2b:34:8d:b5:4f:14:e7:32:50:82:c2:fa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Jun 13 15:00:55 2025 GMT
Not After : Jun 14 15:00:55 2025 GMT
Subject: CN=8b23716d9917554cc9d3784322cb5705c2052e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:ee:5d:f9:47:3a:5f:fa:e6:39:b0:34:8b:
fd:58:6d:7b:50:0e:10:2d:eb:0c:70:b0:2c:a1:7a:
4e:96:99:2d:a7:78:26:d9:7e:8c:49:5f:83:1a:e8:
92:20:48:6f:f1:91:93:c8:93:ae:49:7c:31:5c:de:
27:ca:6e:01:80:d9:53:db:32:a7:29:76:96:42:ea:
91:21:ac:54:03:89:e6:0d:05:c8:ab:b3:6d:61:3e:
e2:49:65:69:0a:cb:8f:c6:8d:6d:6a:e0:20:3f:89:
c8:ea:49:48:fe:ea:64:cb:df:82:f8:32:42:8f:71:
db:58:9e:bd:b0:d9:cc:35:3b:e3:f7:43:ef:39:c4:
e9:5e:93:8e:b8:98:6f:9d:ee:b4:92:f7:8d:11:2c:
22:2d:5f:4d:6d:2b:39:fa:c4:e0:97:fc:67:18:40:
42:36:a2:5b:b7:a9:5e:fb:22:66:1c:c8:bf:90:d4:
f1:f4:b2:1a:70:cc:3e:e8:0b:d2:2c:69:8b:88:25:
83:ac:2b:e0:d2:9c:ce:8b:9a:5a:63:bb:4d:02:d4:
9d:88:a5:96:36:98:94:79:ee:8c:06:6b:ef:82:b8:
03:2a:e4:d8:ce:25:20:be:a7:84:6d:f3:5c:02:30:
54:31:68:0d:af:df:78:23:59:d8:ad:a6:95:c7:ef:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:71:6D:99:17:55:4C:C9:D3:78:43:22:CB:57:05:C2:05:2E:64
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:40:76:b6:f9:3f:17:eb:e2:f3:c0:e1:9a:ad:94:36:f3:15:
41:af:f4:fe:c8:10:b9:cc:72:3e:4f:90:6c:d9:50:24:53:11:
0a:e2:2e:42:d1:01:24:13:6b:1a:79:e8:f3:10:5e:06:90:90:
7f:87:2e:d1:2b:ef:e4:93:74:ca:53:19:bc:11:9e:f4:14:9d:
4e:0a:0e:55:b0:c1:a8:e6:d7:bb:39:cc:8e:bf:59:95:fc:75:
8b:5a:4c:ed:35:b1:8a:f7:59:89:d1:10:85:2b:9d:2a:e2:c3:
13:39:23:b3:7e:4a:f2:d5:1f:9d:a9:88:8e:b8:05:f1:05:62:
08:14:10:e9:c7:75:8c:fd:98:51:09:cb:e5:55:5c:21:b1:e4:
60:82:ee:d2:46:d6:8f:65:e6:83:5a:c8:52:dc:53:cd:36:8e:
a3:b0:64:dc:39:80:fa:54:0a:6a:3c:1c:0e:ca:38:5b:b8:b2:
ab:4c:b6:93:59:49:c7:12:eb:db:81:ce:98:49:61:bc:4f:d0:
d4:01:15:24:9e:af:ed:18:4f:30:45:17:01:bd:46:e0:5a:72:
b3:d3:be:6d:5c:2b:29:ff:90:6b:2b:ca:5e:21:25:28:b4:89:
c1:42:f5:47:f7:40:57:1f:75:0b:8a:2e:e9:cc:5e:f9:7d:80:
72:bb:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:09 2025 by rpki-client