Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
File: oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft (raw, json)
Hash identifier: GAtnXaPegi6rGzGr8Qk+NAi5dGSZUNZAC3fNfweptes=
Subject key identifier: 59:EA:74:BE:66:20:2B:C0:85:69:34:EA:06:2B:AC:95:B3:49:F7:59
Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Certificate serial: 01976F99C3349C2023CE4A02B56C3B81E2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
Manifest number: 11DC
Signing time: Sat 14 Jun 2025 18:00:37 +0000
Manifest this update: Sat 14 Jun 2025 18:00:37 +0000
Manifest next update: Sun 15 Jun 2025 18:00:37 +0000
Files and hashes: 1: cGnnbkiVLX_2V8eckMDBKTSh5es.roa (hash: 17Bbtx++8vEIOl6usyCHj+Kebb1Ac8VgiDnBmWVz9UM=)
2: oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl (hash: RAISthKkgMutsPX9aNzS9D834s6sNuS81uAPQI6k/bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:c3:34:9c:20:23:ce:4a:02:b5:6c:3b:81:e2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Validity
Not Before: Jun 14 18:00:37 2025 GMT
Not After : Jun 15 18:00:37 2025 GMT
Subject: CN=59ea74be66202bc0856934ea062bac95b349f759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:d0:99:00:4a:76:b1:f8:a5:b9:84:73:61:
29:72:bf:6f:e9:e7:a1:55:54:f6:32:ad:22:38:b9:
0c:83:e3:c8:1c:4a:7e:00:d9:46:4f:97:38:6a:16:
80:e4:2f:e1:81:ab:39:fd:f5:e8:e2:44:68:56:fd:
58:a4:91:af:f8:d6:d6:86:28:cd:6b:7c:1f:9e:0b:
60:c3:33:83:ef:04:2d:fe:c4:c0:06:c2:15:d9:c8:
f5:78:1b:ed:81:77:31:15:fc:eb:1b:b0:d4:ec:cd:
18:60:a2:67:72:d9:87:94:35:32:85:0d:7e:6e:54:
4a:90:be:05:ed:65:52:56:75:e5:df:39:d4:b3:cc:
74:d0:07:44:47:f4:95:55:c1:bd:a6:5c:55:a8:c0:
5b:20:dd:0a:6a:a4:bb:d9:05:cb:be:a5:a0:43:82:
74:77:df:e6:68:77:b6:fa:da:92:e0:ec:b3:32:d6:
6b:8c:9b:fd:9f:5d:bf:8e:44:2b:5e:8d:6b:1f:be:
94:b0:1d:5d:43:90:a6:8e:bd:8c:49:05:49:06:31:
c6:52:26:17:ec:68:5c:7f:04:b5:cb:eb:34:97:a5:
1e:5d:29:32:62:cc:32:98:bb:23:41:fc:f6:b4:62:
73:00:2a:39:b8:b7:4a:e8:c0:98:c8:f4:d8:4e:45:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EA:74:BE:66:20:2B:C0:85:69:34:EA:06:2B:AC:95:B3:49:F7:59
X509v3 Authority Key Identifier:
keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e0:5c:a3:82:2f:8f:1c:61:d1:b3:0a:02:0f:51:b1:6f:f2:
e7:ac:26:e1:79:40:e6:4c:a5:10:14:26:4f:55:84:56:89:78:
ce:78:2f:9d:60:1c:d8:26:04:ab:23:72:82:ff:28:f4:48:46:
35:c6:7b:51:db:e1:75:b4:ed:cb:82:f8:55:d1:66:42:c7:57:
08:ec:3d:ea:c0:56:bb:c5:5d:bb:37:25:e9:0b:1c:ef:35:22:
69:67:5a:8f:33:76:ff:34:c1:12:27:15:ce:16:40:05:3b:1d:
df:44:ac:66:1a:f9:db:5f:37:5d:d1:71:e8:db:ea:6b:7d:fd:
37:8d:36:83:94:2e:fb:86:61:6f:1c:5d:aa:c7:29:a5:3b:17:
6b:98:d8:b6:c7:38:fd:e7:a0:88:77:26:9b:92:f5:76:43:a0:
a8:dc:5b:f3:28:3a:bf:99:23:88:ac:c2:e4:f3:f1:bf:50:ac:
33:3c:2c:9b:ac:69:bb:74:a3:d1:25:ef:18:3f:bf:3a:21:7c:
66:ad:d7:3d:7a:eb:2a:5e:f7:04:10:85:e0:2b:20:cf:7c:65:
5a:1a:c3:99:59:21:08:e9:f3:c8:52:ba:15:18:11:1f:b5:0f:
92:4e:6c:67:3c:a5:e9:24:c8:dc:3d:ad:a9:66:c8:6f:78:01:
eb:fd:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:17:53 2025 by rpki-client