Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: R+m17cmOrFoFy5jbxBHbQWm87BR2fsVkQf063v2T/LA=
Subject key identifier: D6:95:EF:7E:E4:E5:99:A3:C3:E5:7E:70:2E:5A:34:38:5B:35:B4:82
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 01976CCF65C546887598D573A80D2813C022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 0FB3
Signing time: Sat 14 Jun 2025 05:00:20 +0000
Manifest this update: Sat 14 Jun 2025 05:00:20 +0000
Manifest next update: Sun 15 Jun 2025 05:00:20 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: n12t4GhFEAM3v4YeSY0EJX8HoYY1MsIaFXOgOmzDOCU=)
2: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (hash: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:65:c5:46:88:75:98:d5:73:a8:0d:28:13:c0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Jun 14 05:00:20 2025 GMT
Not After : Jun 15 05:00:20 2025 GMT
Subject: CN=d695ef7ee4e599a3c3e57e702e5a34385b35b482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:84:cb:c3:63:77:1e:16:75:6b:41:53:1d:
8a:2b:8b:8a:b9:3e:27:e5:ce:46:da:e9:ec:86:68:
b4:89:3f:2a:d6:e3:a3:e5:32:97:86:5c:08:f0:99:
ea:c6:65:2d:95:94:7d:05:ef:ee:da:59:80:2b:b6:
6c:b3:b9:b6:aa:91:df:9b:43:45:f4:08:9d:94:e1:
06:19:f8:fd:08:10:34:35:2c:3e:8c:f5:93:d1:7c:
63:c6:30:c7:be:d5:24:b9:93:e6:b3:09:8f:bd:02:
af:36:17:fe:83:51:ce:13:73:1d:2c:e3:74:04:44:
c8:0c:60:86:6a:37:fc:a2:25:64:16:60:60:a3:f8:
4d:19:3d:a0:e4:16:5d:42:11:9c:48:21:42:71:84:
81:fe:3c:0e:d3:b0:41:87:1e:27:9c:1e:33:00:b2:
8e:cd:e5:2a:56:08:a7:ed:73:70:4f:60:38:c1:d1:
30:6b:ce:fe:5e:be:e4:9c:7a:3c:55:b6:6a:9b:82:
be:c3:97:e8:2a:fd:11:7f:e7:a7:6a:ed:93:cb:e2:
1e:7d:aa:65:45:d5:4a:c1:c3:54:1d:bb:f0:8c:67:
79:1d:27:c9:33:50:c3:dd:e2:e1:c8:ac:d0:f6:4e:
b5:a4:fb:e9:6d:b1:c0:2c:d5:f2:7f:06:4c:ca:13:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:EF:7E:E4:E5:99:A3:C3:E5:7E:70:2E:5A:34:38:5B:35:B4:82
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:11:7e:a4:e0:41:cd:5b:04:b9:45:3d:7c:ae:5b:dc:46:
9b:2a:f1:d2:69:21:47:f5:68:41:d2:ab:6e:05:8c:06:0c:62:
0a:2e:97:63:f9:e7:dc:64:9d:08:cb:a1:b6:c3:1e:09:a5:bc:
05:f0:49:7e:f9:a3:9a:46:11:01:79:b5:74:1e:65:69:c4:e4:
19:76:bf:51:71:83:12:04:7f:af:fd:74:07:1b:ce:bb:d7:73:
46:14:60:e9:17:ea:50:eb:5f:a4:29:28:e5:7b:d7:bd:46:70:
2a:9b:a8:6b:1c:c9:6e:e8:58:79:82:74:e0:db:d4:63:1e:f8:
ac:b6:e4:a9:bc:c6:20:e2:04:9e:c3:79:cf:05:8b:7c:55:83:
a5:c2:f6:5d:c5:d8:d5:11:ee:68:27:2d:63:eb:3e:81:42:11:
5d:e1:ea:4d:64:2d:8c:d6:09:a8:19:5d:89:e6:55:18:8d:84:
83:08:a5:39:28:68:f1:6d:32:aa:37:de:48:a8:e0:1b:86:4c:
db:2d:26:21:01:06:a9:29:dc:c5:fc:91:a9:f0:dd:7a:34:05:
ce:db:b8:6b:b1:4a:72:4d:c1:5b:84:d1:c1:1e:9a:8b:0e:3d:
d0:8e:19:33:25:d4:1c:fa:44:57:bf:c7:6f:29:12:1c:b2:fb:
9e:64:1e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:05 2025 by rpki-client