Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: 6JHPnNf2FcU5eE1K0z4m12Pf/1Eb52J04TXYmtJMEI4=
Subject key identifier: 83:6B:0F:39:0B:6E:5A:8A:36:32:65:CB:6C:09:39:7F:00:E7:D6:42
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 01976D3E4AD798CCA49100B52458E358A02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 15A0
Signing time: Sat 14 Jun 2025 07:01:28 +0000
Manifest this update: Sat 14 Jun 2025 07:01:28 +0000
Manifest next update: Sun 15 Jun 2025 07:01:28 +0000
Files and hashes: 1: D3uFNp_uUSHt1YSi-2IaHiDrRag.roa (hash: s8c53hlFJRAlFwJlOpAFaiZbwpviv1EIugwd2PuQcZA=)
2: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: vKVsz/cSom7PtLhWhqfrunHzwV62Jg8oiK6TH+TY0oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:4a:d7:98:cc:a4:91:00:b5:24:58:e3:58:a0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jun 14 07:01:28 2025 GMT
Not After : Jun 15 07:01:28 2025 GMT
Subject: CN=836b0f390b6e5a8a363265cb6c09397f00e7d642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:5d:33:7b:27:ee:ab:94:34:c6:fd:97:fc:
4e:a1:ef:99:b6:1c:71:97:fa:af:24:52:60:2c:41:
b6:cf:b7:cb:36:8c:53:4c:d6:fd:8a:6f:9f:03:32:
13:f3:c5:29:e2:c8:c7:25:de:49:de:e8:13:ef:56:
68:cc:0b:a9:04:89:1b:66:61:ce:5f:e8:73:a6:b9:
00:8f:a7:c2:cc:ae:fb:c8:e7:16:87:2d:46:c1:70:
f3:26:11:7e:d2:0d:29:ee:57:82:21:36:78:ae:1d:
31:2b:d6:5a:4d:f4:c7:e3:9a:84:84:5c:fd:18:3e:
27:62:c5:e2:c8:a3:b4:2e:6f:f8:31:0f:31:49:35:
0a:32:2d:1c:5e:2f:ad:07:bc:f6:5c:70:da:52:d8:
7c:05:3f:d3:a5:0c:7e:3a:ce:11:0a:9b:1a:56:ae:
a4:f2:c9:86:d6:22:aa:33:31:36:a4:9e:48:4a:f1:
45:3b:2f:37:4e:58:0c:9a:99:cd:d6:98:74:43:3a:
c8:81:3d:2c:cd:ba:43:51:01:35:ca:30:28:f1:59:
4d:f2:78:a2:b8:0d:27:de:2d:27:b4:8e:e0:6d:3b:
ce:7c:6b:07:10:18:7a:30:b4:42:a9:e4:d6:99:5b:
30:5f:e3:b2:4d:38:f4:6e:74:45:ea:b3:e5:2a:b9:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:0F:39:0B:6E:5A:8A:36:32:65:CB:6C:09:39:7F:00:E7:D6:42
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:64:5a:b3:d7:98:48:4f:ee:95:83:3e:c3:02:e9:af:0f:12:
4b:d2:09:51:32:bc:c4:3e:c0:5c:38:d4:77:a4:3e:67:c5:81:
f5:63:3a:cc:2c:d0:09:11:46:eb:a8:9a:77:bc:1b:2b:d0:02:
e9:60:8f:88:a0:6d:89:94:b4:60:2c:b8:b9:74:46:9b:dd:73:
e0:08:31:ae:d8:1b:d5:a3:0d:5a:f0:75:31:52:17:dd:54:4f:
41:c2:70:49:26:43:51:70:2d:7d:6d:33:84:eb:d4:01:e2:41:
9b:0f:d2:bd:eb:35:2d:b3:77:51:4a:b3:23:7f:eb:6b:db:c9:
93:dd:94:21:33:f5:29:cb:de:db:06:6f:bc:cf:26:27:51:d7:
78:2f:c6:88:c2:d1:23:a6:ea:6e:37:52:79:73:1f:a6:33:50:
fb:23:0c:c7:47:04:2d:d7:e9:35:d1:c6:1d:25:f1:c6:eb:2e:
0a:71:74:51:bb:b5:c9:63:76:38:fa:99:51:fe:02:64:31:40:
6f:dd:8d:2a:30:3d:e7:e4:da:4c:4b:5f:0d:e8:b8:9d:6c:c1:
8d:b8:ec:66:2b:a4:86:ed:bb:67:74:81:5f:1f:bd:7e:df:96:
12:10:3f:ef:fb:a0:9d:82:cd:6e:65:84:1b:c9:6b:ad:a9:ed:
51:31:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:48 2025 by rpki-client