Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: JGlCjOI/Me3UHj4grw6t1WhO8hvm9COBQ2JoLgfTg+k=
Subject key identifier: B6:56:01:B7:55:58:2F:68:72:4E:53:23:CF:15:E7:F0:EF:7C:FC:BC
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 019770AC85641B8D912E6925FCBDBDEE87C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0DBF
Signing time: Sat 14 Jun 2025 23:00:43 +0000
Manifest this update: Sat 14 Jun 2025 23:00:43 +0000
Manifest next update: Sun 15 Jun 2025 23:00:43 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: abqOGs2qjtqtOFa/VbKWWLOmtXDPRrg6SjliLQbY0Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:85:64:1b:8d:91:2e:69:25:fc:bd:bd:ee:87:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Jun 14 23:00:43 2025 GMT
Not After : Jun 15 23:00:43 2025 GMT
Subject: CN=b65601b755582f68724e5323cf15e7f0ef7cfcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:75:9d:54:9f:fa:e4:a5:9d:5c:40:90:3a:
87:89:b0:0c:72:48:44:24:e7:45:2b:d6:f0:9c:d3:
fa:8b:ac:78:1c:af:e0:64:de:b4:52:6a:2b:3f:29:
6e:ac:f4:19:fc:2c:bf:1d:35:cb:a4:66:2b:da:bc:
28:55:6c:51:57:cd:c8:f4:02:01:bf:b7:89:68:75:
0f:b3:6a:72:24:ce:ff:f0:4b:69:f1:af:c2:82:ba:
6d:f0:18:08:41:67:ef:73:b9:7e:3f:65:fe:16:2e:
36:4b:60:ee:48:e7:f2:ae:2a:99:9e:f3:23:7e:6b:
0a:09:ae:99:4b:14:a3:8d:e8:70:cb:31:bb:e7:ea:
20:a9:3f:ee:08:27:e7:6e:e9:be:b8:7e:a8:3b:53:
53:bf:99:df:91:38:f4:25:be:37:7f:c4:18:0c:60:
71:b2:a3:26:a4:d5:6a:bf:0a:f0:16:c1:d2:63:3b:
d4:de:14:dd:4a:63:35:e0:48:52:06:83:9e:5c:70:
ff:6d:5b:75:32:73:22:fc:52:ca:c4:63:56:23:9e:
de:66:03:9e:c6:25:c3:82:54:b2:59:92:5f:e3:53:
85:88:60:8d:78:f6:58:cc:ca:a4:e8:37:5b:da:f0:
e9:48:8c:07:a3:ab:2e:bf:f6:7f:0b:b7:67:81:e1:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:56:01:B7:55:58:2F:68:72:4E:53:23:CF:15:E7:F0:EF:7C:FC:BC
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2b:b3:f5:0a:a4:63:82:d8:4d:73:33:17:dd:35:13:48:bb:
15:48:4b:35:1d:36:b5:84:44:72:88:9d:09:ee:d0:09:cf:92:
d8:09:50:3f:e2:b1:29:c8:43:be:b0:67:02:6a:eb:d8:37:6f:
0c:46:e9:88:6e:b2:80:ea:b2:0a:45:31:32:42:34:86:cc:02:
2c:03:14:3e:47:f3:03:5f:9d:ff:f7:a5:38:4f:fc:75:b9:2f:
73:f5:9b:75:44:c7:6f:61:34:cf:ee:b7:e7:e9:ec:34:b7:21:
c4:51:3c:92:9e:de:55:64:92:28:2e:42:e6:61:3d:6b:f1:48:
1e:52:8d:9f:d5:65:fe:da:c9:bd:b7:88:85:1e:86:3a:43:9d:
2b:90:28:76:5b:fb:89:eb:a3:a1:89:76:5b:04:4a:de:cf:a3:
c4:d3:1d:63:c4:44:c2:41:ab:2b:cd:1b:4c:e9:85:82:f7:e0:
a8:0c:10:4b:78:9e:e8:67:20:b4:27:91:c0:5d:4d:91:cf:70:
65:fa:47:f8:08:10:61:87:aa:b5:ec:b0:84:2f:10:2a:5d:83:
57:68:65:07:54:4b:5c:8c:55:43:12:3b:07:52:e8:c9:34:a4:
94:6e:fa:2a:b6:41:d5:9f:82:d1:6a:32:f0:8f:ee:16:92:91:
29:6e:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:33 2025 by rpki-client