Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier: 21zFJV7hn0dMAUpUf9r8Y/YFeSNhPxMBnzwm3KXb3Do=
Subject key identifier: 28:A6:59:A0:70:14:F0:B4:9F:06:22:C7:52:B6:19:49:C7:25:29:B1
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial: 01976CCF85C6103B15430E04A348F1AA3376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number: 0667
Signing time: Sat 14 Jun 2025 05:00:28 +0000
Manifest this update: Sat 14 Jun 2025 05:00:28 +0000
Manifest next update: Sun 15 Jun 2025 05:00:28 +0000
Files and hashes: 1: hnLlF72Gey1RhDc5w20W5CDAULo.roa (hash: shW0FHDTxcWsn5y+FQlRP0Y7mcQwz41mLYft4nrAmSI=)
2: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: NvNjv7MyWjRfii7fLVjApg8Z3wWsPV8AFRdE2cb46/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:85:c6:10:3b:15:43:0e:04:a3:48:f1:aa:33:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Validity
Not Before: Jun 14 05:00:28 2025 GMT
Not After : Jun 15 05:00:28 2025 GMT
Subject: CN=28a659a07014f0b49f0622c752b61949c72529b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:fa:0b:19:85:85:98:96:07:85:5e:71:13:
0b:6d:f2:25:dd:57:d9:19:a9:40:33:78:86:41:dc:
1a:4f:5d:d2:80:b1:85:0a:31:4f:17:1a:6b:8d:a3:
f7:06:ed:b9:1a:73:47:d2:3f:28:5c:e2:aa:fd:ce:
ee:1c:28:cd:2a:2b:4c:5a:2b:cd:d2:54:75:68:cc:
b0:de:46:7b:81:a4:45:5e:3f:19:05:e5:25:26:31:
ad:4f:53:76:81:cc:fb:56:b0:c1:e9:c3:d6:c8:2f:
93:95:f3:e6:2a:8c:a6:01:5a:4d:eb:88:d8:9e:e0:
ba:dc:be:e4:76:05:45:68:6b:2e:e9:85:f4:b8:66:
62:b7:57:99:d2:ed:bd:96:67:8b:99:3a:a8:e8:0f:
fa:25:fd:e2:64:8d:d8:b6:73:56:59:24:d8:30:5a:
58:b9:25:f0:e2:79:6e:ce:1c:a0:25:ed:57:a2:34:
e0:79:a3:ca:f8:9c:08:4b:3a:2b:f5:cc:22:0e:da:
db:00:9c:b4:61:f2:57:43:6f:bd:d7:46:c6:5e:41:
8e:94:d7:4d:61:c9:8f:a8:4c:34:a2:b7:8f:cb:09:
65:a7:67:4a:45:2e:58:28:27:aa:6c:d5:f7:07:02:
fa:68:0c:9c:1f:9b:fc:f4:4a:95:1a:32:54:02:6b:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:59:A0:70:14:F0:B4:9F:06:22:C7:52:B6:19:49:C7:25:29:B1
X509v3 Authority Key Identifier:
keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bf:7f:11:d6:aa:c1:37:1b:b5:bb:25:0e:0d:84:e5:6e:ce:
ea:a1:5e:4e:73:b9:39:12:ae:91:9e:01:fa:97:32:98:2a:a2:
de:96:78:82:a6:03:d2:11:59:eb:51:33:d9:ce:58:cd:80:fe:
c8:12:c0:e8:fb:7d:26:39:95:82:c3:dd:89:80:f8:f4:d7:5c:
9f:72:8f:06:99:95:a1:6a:ca:59:28:95:77:c3:6a:11:53:00:
ed:ea:e5:43:47:af:19:d7:20:0c:de:bc:b4:1e:a8:7f:d4:e4:
10:4c:03:85:8c:05:b4:fb:6f:02:7c:20:f5:d0:e7:75:3a:1d:
09:8a:77:ab:3b:6d:3b:25:bf:df:d1:0d:4e:81:26:55:38:42:
de:20:0a:3f:80:78:2e:a0:eb:b0:95:52:3b:e9:6c:41:10:ed:
2c:bd:61:07:c4:b4:ad:9c:bd:f9:18:9d:ec:32:17:bd:d8:c5:
21:6f:5b:6d:91:47:8b:0b:36:40:8d:02:58:72:8a:2d:fc:fe:
a4:62:27:af:75:10:4d:7d:78:12:6b:cd:6e:61:ce:28:51:eb:
ee:04:85:58:b4:f2:6f:83:a5:f3:18:58:84:29:d4:ae:8d:47:
d2:a2:51:ed:e5:30:85:75:ef:b3:f7:9e:e5:12:9e:8e:2b:e2:
42:e1:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:11 2025 by rpki-client