Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
File: OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft (raw, json)
Hash identifier: e04FiYufIT7U/3K0Oox+IxfOoLf3HQ8zijTIOXFpJ5A=
Subject key identifier: 8E:B5:E6:AB:67:44:8C:AB:84:B9:A8:CF:69:61:CB:47:E5:9E:AD:8B
Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
Certificate issuer: /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Certificate serial: 0197684E92498539E0A8E0AB723E6020E7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
Manifest number: 0AD3
Signing time: Fri 13 Jun 2025 08:01:08 +0000
Manifest this update: Fri 13 Jun 2025 08:01:08 +0000
Manifest next update: Sat 14 Jun 2025 08:01:08 +0000
Files and hashes: 1: KI_OzKHWNWDApgfZA8fhKRHWYNw.roa (hash: KgInzOYraW/0zKTqbj1OirpA4x6saReBh+LdfK4ZXdI=)
2: OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl (hash: B4g1jv2oTJIDBmLvJXzCdp7YJxo5ou9lhBCYygMst0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:92:49:85:39:e0:a8:e0:ab:72:3e:60:20:e7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Validity
Not Before: Jun 13 08:01:08 2025 GMT
Not After : Jun 14 08:01:08 2025 GMT
Subject: CN=8eb5e6ab67448cab84b9a8cf6961cb47e59ead8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:79:79:8d:68:b1:f8:36:be:1c:ac:cc:13:0a:
ab:33:1f:f8:ab:03:3f:40:b5:41:69:c9:ef:3a:de:
47:c6:0e:8f:3b:c8:fc:0f:0c:a8:1a:8c:c9:8a:5c:
73:e0:77:53:08:bf:5d:98:b9:1f:83:f2:ad:70:85:
4b:b3:37:34:8d:88:b9:3a:1b:64:26:ee:51:39:3f:
73:56:2e:bf:da:46:7c:9b:45:5b:4e:e0:95:5c:f1:
1a:be:51:2a:05:05:ec:c8:e2:96:91:a8:0c:ec:14:
d1:8f:a3:db:dd:45:f1:89:e5:b2:c6:29:dd:2d:1c:
40:76:d8:82:56:ba:2d:e2:ce:43:6b:42:47:7b:15:
bb:84:4c:47:9b:ad:4c:2b:02:9c:79:56:a6:3e:5b:
c9:c8:61:e6:b2:43:f2:f5:30:76:05:cc:2f:a1:61:
e8:e3:0d:7d:9b:19:26:56:68:72:dd:94:09:e0:50:
c4:8a:11:8d:88:36:72:40:f9:b7:38:f1:69:33:0a:
5e:70:36:be:62:6c:a2:07:8b:6f:c5:5f:1f:75:c8:
b2:b5:00:c6:0c:a0:6d:0b:e5:fe:a1:d2:6f:15:28:
ad:0c:64:12:52:25:c1:2c:a4:2a:a6:15:71:30:d0:
3a:0e:a1:18:d8:d8:2d:7d:58:bf:6e:e2:58:c5:4c:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B5:E6:AB:67:44:8C:AB:84:B9:A8:CF:69:61:CB:47:E5:9E:AD:8B
X509v3 Authority Key Identifier:
keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dc:d8:39:fd:c7:7c:3f:f8:71:5a:45:49:2f:3f:86:d8:46:
c9:ec:ff:2f:dd:0f:f9:d3:fd:b3:53:ae:ad:d6:79:9d:32:34:
cc:d6:06:03:e3:3a:0b:e9:05:6a:f3:c5:17:4f:35:a2:27:56:
08:92:78:9c:11:2c:75:53:9a:2c:5b:7a:8e:c1:40:12:56:9d:
a9:f6:92:c2:7e:a4:5d:c5:56:f5:f3:3b:6c:01:54:51:d2:3f:
2a:88:a5:f4:76:79:04:17:7d:b3:bd:92:b0:cd:16:e1:da:8d:
52:9b:92:27:80:48:7f:cb:08:02:c3:7c:67:93:3f:f7:cc:63:
07:f4:03:01:06:54:04:f5:aa:4a:57:30:40:dc:8d:23:03:f2:
5a:f0:fb:94:6a:ac:97:b5:dc:b2:ae:3c:b9:9e:0c:ae:3a:da:
34:77:fe:26:9e:cb:56:11:f4:30:fe:bb:c3:63:62:77:68:fe:
a5:14:4c:f8:cf:c5:9c:d1:4f:ae:0e:90:fc:eb:11:15:75:bd:
7e:dc:96:ec:d3:d6:1c:d2:fb:e9:b7:0c:37:3d:7a:3a:9f:5e:
6f:84:3b:d1:d7:b7:7e:ab:0d:bf:73:de:10:1d:73:4e:6a:b3:
0d:85:95:67:b7:61:87:32:e1:e6:19:cc:20:6e:56:d6:b2:29:
1c:4b:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:35 2025 by rpki-client