Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: g2BzKxvUuUpN0AIDYZNwwsa+pS4tl7IYyH65TaAc8DI=
Subject key identifier: 90:6B:8A:98:85:74:F5:F7:B8:F5:CF:0C:15:E9:CC:38:6A:EB:57:8E
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 019771BF7EE7BAE2055BEFB5C8B3B767675F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 1494
Signing time: Sun 15 Jun 2025 04:01:04 +0000
Manifest this update: Sun 15 Jun 2025 04:01:04 +0000
Manifest next update: Mon 16 Jun 2025 04:01:04 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: XtEBFRSljvxAb6sMxnPEID6tsodlQnVkfI92hL//Zm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:7e:e7:ba:e2:05:5b:ef:b5:c8:b3:b7:67:67:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Jun 15 04:01:04 2025 GMT
Not After : Jun 16 04:01:04 2025 GMT
Subject: CN=906b8a988574f5f7b8f5cf0c15e9cc386aeb578e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:cb:cf:8c:11:9a:be:e3:8c:cf:0d:70:b8:
00:06:1e:34:f0:d6:fd:26:52:c2:39:b5:0e:62:dc:
6b:f1:c3:a4:9d:70:70:a6:fc:1a:e4:2a:ae:92:02:
fe:40:30:b7:51:be:25:e9:79:3e:ed:6a:f8:12:a3:
90:f5:90:fd:fb:0b:8a:e2:be:67:89:9a:5b:76:d2:
39:b3:59:ab:5c:21:56:38:34:2e:f9:1f:49:f7:91:
83:80:49:1c:1e:fd:1a:78:42:a1:f5:e6:4e:3f:cb:
d7:d3:80:e7:0f:4c:ee:b7:b1:db:63:f7:61:39:fe:
58:b7:29:aa:72:c0:94:65:75:4a:64:20:c5:85:a9:
8e:96:d3:3f:db:69:30:ef:b1:73:e5:d9:fd:b0:91:
de:1e:a0:d7:ab:5a:40:d5:fb:85:96:9e:86:1d:8c:
cd:c9:46:53:05:ac:c2:b5:da:21:9d:a8:99:76:6b:
11:4b:ca:b0:93:d9:49:c9:20:b3:6a:e4:64:81:32:
92:d4:01:ee:40:a3:26:b9:b3:29:bf:36:87:19:c6:
19:65:88:85:47:e7:f3:36:4c:4e:4f:5a:c4:0c:1d:
7d:08:59:7c:ae:7b:3c:03:d6:9e:9c:ae:b5:43:5f:
d9:b4:2e:96:9d:66:9e:a9:54:90:06:ed:a1:54:de:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6B:8A:98:85:74:F5:F7:B8:F5:CF:0C:15:E9:CC:38:6A:EB:57:8E
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:63:a3:a5:86:48:23:e0:cd:87:76:ce:44:a5:81:57:ef:4e:
c0:a9:f8:81:d8:1e:9b:c5:3b:54:ff:77:86:dd:f0:b4:70:f6:
92:0b:1e:8f:5b:08:cb:00:46:b6:cc:5f:cf:76:8b:d4:19:a1:
44:cc:0b:bf:5e:73:db:56:45:c0:0c:2d:ef:76:86:b9:b9:45:
37:4f:7e:cf:65:a0:61:27:06:06:32:fa:b9:27:e6:29:86:d1:
ab:32:6c:0e:73:4f:e7:5b:9d:68:42:c4:5b:41:92:10:00:06:
41:b6:8c:19:e4:1d:b0:36:b8:14:f7:15:9a:4f:6c:1e:1c:d3:
5f:17:a7:73:6f:54:6e:8e:69:d2:5f:65:d8:64:2e:5f:9c:a5:
ec:23:eb:11:d8:15:89:31:ac:43:c0:22:b0:4e:f1:50:52:7b:
1b:27:c3:f0:83:d6:45:76:9d:72:02:09:14:fd:38:86:b2:11:
b8:e7:c1:e7:48:59:0e:c3:43:b4:57:09:67:62:c9:03:d6:53:
9e:b0:0e:53:3d:aa:a3:ee:11:b7:17:6a:84:2b:b5:78:63:dc:
5d:20:d6:6c:d2:9d:3a:ae:52:07:3a:44:5d:3c:4d:9d:ce:6b:
3f:80:18:0d:8c:68:42:20:3b:01:40:a9:6a:56:ec:b4:42:75:
e9:15:50:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:27:56 2025 by rpki-client