Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: W/fZgGjf7pSAUXWU03zuNnCo9aJaHN2ctD6No847YnI=
Subject key identifier: 15:23:C3:D1:31:48:FA:47:A5:82:51:CF:04:39:B6:E0:77:33:BA:2E
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 0197820DFE3A1BE35FD12A972A1497375338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 1236
Signing time: Wed 18 Jun 2025 08:00:44 +0000
Manifest this update: Wed 18 Jun 2025 08:00:44 +0000
Manifest next update: Thu 19 Jun 2025 08:00:44 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: 71U+RtMjJaqTDZm9LSZXUpyWkugZZ7CwEnK7Ckccz6Y=)
2: PQhWLSkGUa_VMVGVuYBQSUZ_P_A.roa (hash: 3kRwsyvbLLbFqSNU/EJCsmBYkp3oO56TR7kGsRhAuv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:0d:fe:3a:1b:e3:5f:d1:2a:97:2a:14:97:37:53:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: Jun 18 08:00:44 2025 GMT
Not After : Jun 19 08:00:44 2025 GMT
Subject: CN=1523c3d13148fa47a58251cf0439b6e07733ba2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:a1:f6:ff:e7:ac:ed:fd:d1:9c:dd:27:ba:
26:5b:e7:ae:75:27:3a:56:a8:6f:e0:c7:fe:95:f8:
62:37:08:bc:77:1d:42:77:d0:73:4c:75:cd:72:44:
8e:28:dc:83:42:4c:84:83:28:f3:64:30:dd:37:9d:
01:f1:81:f9:c8:bd:23:0a:e7:60:2c:6b:89:cc:6d:
51:22:b6:ed:0f:f2:4b:71:7f:f0:41:b9:95:93:7c:
a7:c4:5a:f2:0c:40:36:15:2d:51:78:25:10:a0:11:
a8:3e:3f:15:a5:11:8e:ad:cd:dc:9c:bb:d4:ed:a5:
6a:1d:77:10:50:8a:91:9b:18:82:a7:3b:f3:e3:da:
d6:1c:c5:e3:58:ee:5f:4c:95:17:28:36:7e:46:fe:
f0:f2:29:5c:3c:50:5c:01:63:1c:a5:a4:bf:5a:99:
3a:3e:df:64:1d:bf:f3:3e:b7:1b:06:e7:cb:fb:e7:
06:5c:47:93:71:7d:0e:fa:59:af:06:6b:30:86:fc:
57:2c:9d:22:6d:af:d0:e1:e0:11:8d:95:cc:e8:24:
0b:d9:3d:d9:34:3e:39:f1:5b:03:96:43:70:14:9a:
7b:fa:c8:4c:eb:8a:f8:12:0f:3f:8a:ab:7f:3c:f3:
d7:cd:dc:92:67:41:6c:63:09:de:d0:ef:40:35:61:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:23:C3:D1:31:48:FA:47:A5:82:51:CF:04:39:B6:E0:77:33:BA:2E
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:38:d5:cd:33:71:48:12:b8:2f:40:d7:35:14:f3:d3:f7:f0:
08:a8:b9:bd:7c:db:11:72:9a:5e:d0:32:a7:c5:44:da:6e:9a:
cb:ad:0e:e3:21:88:07:50:38:c2:24:8d:3d:c8:5c:48:83:fc:
57:3b:a3:20:cf:06:86:6e:1d:31:95:5b:83:fa:17:01:a8:13:
2e:c7:2f:7e:69:75:46:c9:d6:ac:4d:ae:cc:d8:98:60:e2:c0:
21:42:43:7c:12:44:78:1f:6c:02:5e:f5:0f:9d:67:76:35:a2:
aa:33:d2:58:5f:20:80:a6:5a:3f:ff:7b:5d:64:75:14:b9:25:
06:a8:cf:e6:4a:37:e2:5a:b2:1b:aa:9e:cc:b2:20:ef:2a:87:
21:56:5f:24:bf:62:78:a7:c5:fb:47:4e:8d:5b:54:99:a6:d5:
09:f2:d8:97:30:63:fb:0f:52:dd:75:9c:b5:84:14:1b:eb:cf:
9e:dd:84:cd:0e:b2:22:cd:ba:9c:b6:34:fd:a8:ff:4a:dd:f9:
1e:ff:f2:6e:ce:87:71:8e:07:21:5c:ab:f9:8b:97:77:af:18:
ed:22:94:b1:ce:36:ba:90:99:9f:f1:07:48:25:6a:6c:5d:02:
df:aa:01:ee:45:84:ac:7d:6b:6b:43:d6:56:f3:37:f0:10:45:
6e:2a:78:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:52:14 2025 by rpki-client