Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: Bd1mN2VjTkTNjUx03Z9KwaVCejc8cI0ykMuCAPZLRMQ=
Subject key identifier: DF:EC:DA:54:45:1B:6A:B4:7C:3E:04:AC:1F:D0:EE:6F:F0:CD:36:83
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 0197715106F4DEA8CD127650D1DEC6D0C858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 02:00:24 +0000
Manifest this update: Sun 15 Jun 2025 02:00:24 +0000
Manifest next update: Mon 16 Jun 2025 02:00:24 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: 7WuqEo80HvVs3+f682LQnCvAAb+2Tnck+KrKRXjVOMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:06:f4:de:a8:cd:12:76:50:d1:de:c6:d0:c8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Jun 15 02:00:24 2025 GMT
Not After : Jun 16 02:00:24 2025 GMT
Subject: CN=dfecda54451b6ab47c3e04ac1fd0ee6ff0cd3683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:48:4f:fe:bf:ea:e9:ff:22:b4:c7:b2:00:
5e:08:8f:75:8c:45:63:b4:e5:b2:25:6c:41:93:44:
b7:04:82:d2:f0:37:7b:47:18:93:cb:a8:99:aa:cd:
d7:b7:24:34:cd:a1:ab:48:d1:9c:40:9a:20:a3:ca:
8e:8e:9a:e5:3f:b8:5a:f1:46:d9:0a:db:c0:32:9c:
9b:74:ed:e2:a7:2f:aa:3a:df:b7:c8:5f:04:55:5d:
31:6b:7b:b7:1d:73:38:e7:71:3a:4b:be:cd:d9:ef:
5d:23:e9:e1:d9:e8:b3:28:9b:ce:53:96:4c:d0:fa:
30:f9:ff:af:b7:e5:a5:c5:30:66:29:5a:db:0f:3b:
9e:14:b3:7c:0f:ab:71:a5:76:08:da:f1:03:63:0c:
34:a5:d1:15:a5:36:aa:48:08:0a:1f:75:5e:bd:fd:
dd:69:ed:39:bd:ba:e0:f3:06:e7:9f:d1:ce:16:fc:
18:bd:9f:12:86:97:b4:dd:75:a3:5d:66:8f:db:75:
2a:f0:df:d5:41:1c:72:84:88:95:87:19:ba:b9:60:
99:0a:6c:ab:d9:78:ea:b1:3f:cb:6f:3a:13:62:9d:
16:4c:8a:29:33:ab:89:f5:b5:f6:63:7d:f3:2b:52:
c6:cd:53:a7:31:1a:b0:b2:b6:f0:3c:90:10:82:38:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EC:DA:54:45:1B:6A:B4:7C:3E:04:AC:1F:D0:EE:6F:F0:CD:36:83
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1d:ef:a0:41:fe:dc:d3:72:d3:1f:99:86:bc:0d:f9:a9:06:
c5:af:19:db:19:2a:db:68:f8:e3:de:f4:99:c2:69:38:88:0c:
85:e9:f2:0a:82:a3:94:1c:b3:93:1a:a4:ab:d8:54:52:a2:66:
fa:1a:b6:02:99:70:39:f9:21:6f:4f:ab:56:aa:63:3a:ad:3f:
09:3f:5a:88:c6:54:19:f0:d2:2f:1c:20:12:58:9a:12:f1:21:
d1:92:79:15:c9:42:32:96:f5:0a:40:e6:84:3d:f2:5c:f8:2e:
f9:5b:76:92:69:37:47:bd:9e:cc:5f:49:e0:a8:be:65:2d:a6:
02:50:2c:60:5b:c5:c6:14:e7:9c:cd:3a:8a:17:25:b0:3c:57:
69:92:65:40:8b:f2:8a:b9:82:fe:d8:98:eb:1b:9c:5c:9d:f5:
6d:b0:39:44:66:0e:d4:85:8c:2d:ae:a9:c1:81:96:e6:00:a8:
e9:1d:99:4d:e5:41:17:8f:b6:ac:58:3c:45:af:bc:6e:f7:b9:
2d:f6:50:2c:a6:cc:62:92:95:96:88:f4:22:eb:1f:3f:a6:45:
80:10:18:22:33:c2:13:e8:b5:93:b5:54:26:2a:96:c0:7a:dc:
9c:b1:23:37:d5:a3:f8:72:6d:e2:66:ba:d3:38:b5:3f:43:00:
8d:59:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:04 2025 by rpki-client