Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: hN3m4tBGhJqpep2eR9bVB/y9Sqhxosf7b8fxE15K2MQ=
Subject key identifier: 86:6D:06:C0:61:33:54:FF:B1:EE:0F:33:EF:45:DD:AD:D6:26:A4:F0
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019776E56373D567826951AAF4B105F684A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 04:00:34 +0000
Manifest this update: Mon 16 Jun 2025 04:00:34 +0000
Manifest next update: Tue 17 Jun 2025 04:00:34 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: KyAYtgbF4ldp+fI4JzGRQi1kjfgR9tsApnn6jepvZRE=)
2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:63:73:d5:67:82:69:51:aa:f4:b1:05:f6:84:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Jun 16 04:00:34 2025 GMT
Not After : Jun 17 04:00:34 2025 GMT
Subject: CN=866d06c0613354ffb1ee0f33ef45ddadd626a4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:29:73:d6:57:da:a2:f8:7e:b3:69:bf:af:
9e:11:db:e9:8b:8b:b1:ec:04:f8:a5:e8:28:b1:11:
54:6a:45:0a:55:cd:16:9f:29:10:74:4d:6d:cc:2b:
85:08:03:59:4b:b8:01:82:fd:eb:8f:55:2d:5e:1c:
36:c9:37:ba:09:11:0d:5b:93:c7:a0:a4:27:0f:c2:
de:e0:da:8f:a5:f3:f6:02:04:cf:ae:c8:40:f8:f7:
13:4e:3d:4f:8c:f2:90:55:ed:06:08:89:6f:74:2f:
f8:bb:fa:f8:93:61:48:7b:ff:ba:aa:14:59:7a:10:
49:90:f2:fc:86:95:1d:a2:9c:e5:68:1e:a4:d7:65:
5b:27:95:18:0d:6c:39:c4:fd:77:5b:5a:b1:49:a2:
f9:b2:e3:31:e1:f9:bc:3c:de:ef:60:ae:1d:0e:43:
6d:42:d3:ee:59:f3:e1:b7:a5:e5:31:49:3a:49:60:
ff:49:63:9e:1e:26:6c:a6:ef:9b:07:03:56:cd:79:
5b:19:ee:4f:ca:49:1a:19:ba:7f:b4:07:fe:21:0e:
19:bc:08:be:7f:d7:a8:50:1b:71:a4:62:cf:0f:d6:
c3:f4:e3:aa:cb:14:1f:3f:74:c1:04:00:86:8a:c5:
65:e1:e2:bf:ba:e8:28:89:50:2d:3d:d9:54:ba:f4:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6D:06:C0:61:33:54:FF:B1:EE:0F:33:EF:45:DD:AD:D6:26:A4:F0
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9a:1e:c7:81:96:0a:6e:79:91:c2:ac:3f:e9:3c:b4:45:f2:
fd:37:dd:53:43:52:cc:fa:a2:32:08:a9:82:ee:41:f0:34:6a:
bc:2d:17:76:ad:c9:4c:98:67:a7:8a:a3:d6:4a:5b:c6:22:2e:
b4:4e:e6:f3:5a:c3:33:8b:38:56:4d:c5:50:8e:0e:bc:ac:52:
e2:3d:78:7f:bc:cb:3d:b5:7a:1f:42:2c:96:5f:87:38:67:cc:
90:e0:c3:7b:9e:b3:94:a4:85:47:49:ce:d3:02:31:3e:72:6b:
2f:ec:98:35:97:59:2b:b8:8b:9d:66:e3:23:b7:9b:b7:51:fe:
52:e3:bb:ff:d2:1d:31:29:b7:50:c2:73:f4:3a:55:ba:6d:a6:
a3:57:29:bf:4f:cc:a4:09:bb:68:5d:7b:e4:17:95:4c:a1:da:
e6:11:92:05:a7:1b:13:11:3a:12:83:79:95:d1:49:dd:fe:2e:
e9:bd:67:e1:c3:77:41:25:80:42:e8:f0:c9:31:86:83:18:48:
d6:c5:54:41:d3:d4:6f:3e:c5:59:72:7f:06:06:2e:fb:af:3e:
3a:f2:bc:d0:ab:b2:98:db:20:36:64:ce:ef:c4:06:89:dd:91:
59:72:bf:c3:40:3d:f1:51:6a:7d:c6:8d:5a:6d:59:75:4b:3f:
eb:cb:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:39:54 2025 by rpki-client