Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier: vQX/L1UMMUuGiVVPIz42n1XONEQRlZ2xePwwjYndU/A=
Subject key identifier: BB:8B:93:4E:23:4B:2D:11:91:8B:B8:59:A1:03:90:75:C1:FA:5E:6C
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 019789C78D16468EF864AA454A3178079F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number: 0F98
Signing time: Thu 19 Jun 2025 20:00:45 +0000
Manifest this update: Thu 19 Jun 2025 20:00:45 +0000
Manifest next update: Fri 20 Jun 2025 20:00:45 +0000
Files and hashes: 1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=)
2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: 40bcrcL+kb5H7Acbp8R+ajLFU2JEjKVtl0Leq6o31Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:c7:8d:16:46:8e:f8:64:aa:45:4a:31:78:07:9f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: Jun 19 20:00:45 2025 GMT
Not After : Jun 20 20:00:45 2025 GMT
Subject: CN=bb8b934e234b2d11918bb859a1039075c1fa5e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:46:59:e6:22:9f:83:93:92:ef:c4:b5:6d:
5d:b6:24:f4:2f:99:b9:41:2e:5c:b4:2c:c9:e1:49:
3b:11:6b:70:f2:db:fa:30:b1:1d:e0:b2:a4:dd:2a:
86:a3:e6:6a:7a:6e:b3:f6:83:b3:f6:ef:58:c2:f4:
2a:92:a4:ef:b1:6b:03:89:0e:4d:fc:c1:85:c4:50:
b6:da:13:86:54:26:16:06:aa:fc:19:c7:d5:45:17:
2b:b4:12:99:1b:24:7a:92:16:e2:c1:13:7b:15:61:
8c:ad:7e:2d:73:b2:bb:99:4a:b6:b3:82:ea:4a:7d:
76:90:f9:76:86:c1:32:8e:1d:14:cc:44:1e:60:05:
d3:37:a1:de:66:10:47:94:23:83:bf:f8:bc:5d:f6:
f6:4a:56:95:ab:34:7c:a4:61:03:93:ff:fa:4e:6d:
67:8c:05:d1:1d:c1:fe:05:0a:1c:8d:0a:84:ae:d5:
d8:7c:00:f9:67:c3:45:5f:7c:ce:80:1a:97:dd:9f:
bd:d1:a7:5f:a1:38:8b:50:d3:32:aa:e2:30:5c:cb:
9c:05:ae:c6:82:a3:6a:ca:26:e9:78:e6:99:1f:18:
ac:51:40:71:da:46:a5:ea:dd:66:6a:fd:f2:8c:76:
14:33:41:2c:d5:d7:5d:1a:8f:79:94:b5:0a:5a:a4:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:93:4E:23:4B:2D:11:91:8B:B8:59:A1:03:90:75:C1:FA:5E:6C
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:26:40:59:5d:e6:6b:a5:0f:c6:85:dc:bb:16:91:8e:74:0a:
9c:4a:83:ac:40:c0:8e:53:93:a8:92:2d:cd:57:f3:9a:e7:59:
57:b4:d2:09:a3:82:33:2b:7f:05:48:ad:74:08:3f:9e:52:0f:
5f:f7:b6:60:a5:72:bf:e7:fb:37:94:1d:ef:27:d3:2c:b4:fe:
a4:d4:93:3a:0b:21:cf:cc:9f:26:75:4e:cb:1f:95:2f:36:59:
20:09:ed:a3:3e:7e:9f:cf:3e:e1:6c:c4:4b:b7:bb:00:e7:5b:
2d:2d:e3:cd:4a:7c:67:1f:2d:27:e8:c4:6b:e4:e9:88:d8:46:
62:2f:9a:6a:f4:4c:f6:f4:bc:09:58:3a:48:06:94:e6:a5:3d:
db:fd:e3:ca:20:21:2c:56:d7:ba:9e:b0:db:5b:e1:a4:27:87:
e2:21:8b:95:45:87:dd:5e:ca:a9:26:b8:23:02:32:c4:6b:ac:
4d:6f:42:86:6b:b0:ab:16:a7:bc:ca:2d:30:2c:4f:4f:d4:35:
72:6b:0c:55:4c:51:35:50:8d:ee:92:12:94:a7:e3:be:4c:ab:
8b:65:47:e2:1e:65:8e:c5:2e:a1:43:27:9e:3e:8c:10:7a:0a:
fa:09:7f:ea:18:f5:4d:6b:9b:74:c5:1f:f0:77:e5:c1:e8:a3:
d2:25:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:49:58 2025 by rpki-client