Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: BlqPm9VKefcVZB4DmJzKR3ns534RB5Iqno6HbqrP7k4=
Subject key identifier: 21:65:20:54:BB:8D:ED:24:85:40:63:6C:F5:68:F0:2A:77:3F:64:D7
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 01976D3DB981B2B55CEC3B40638D1C85FB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:00:51 +0000
Manifest this update: Sat 14 Jun 2025 07:00:51 +0000
Manifest next update: Sun 15 Jun 2025 07:00:51 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: l/q0OaNdKv6Ca2/IuSGv+44DA59tj3FSqDGFt8YAX1U=)
2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:b9:81:b2:b5:5c:ec:3b:40:63:8d:1c:85:fb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Jun 14 07:00:51 2025 GMT
Not After : Jun 15 07:00:51 2025 GMT
Subject: CN=21652054bb8ded248540636cf568f02a773f64d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:16:cb:52:0e:25:1d:6d:f9:5b:b4:1f:d3:
a5:e9:2c:bb:17:ff:72:13:ff:56:ed:a3:7d:73:87:
d4:e6:60:1b:c7:1c:ce:4a:c4:26:2f:16:70:f8:a7:
ee:17:64:54:b7:e1:a3:00:83:54:07:17:51:c8:35:
cd:74:8d:96:db:90:b2:4e:34:00:c4:d5:87:76:d0:
ca:bd:56:e5:64:74:eb:98:de:88:c6:dd:62:e8:63:
f1:1d:27:ca:67:08:2b:2a:66:b0:2d:97:fe:82:fb:
98:86:fd:44:be:e8:b2:50:24:f8:37:09:fe:f3:34:
fb:c4:3c:15:03:47:cc:2d:c9:aa:56:01:b8:35:d0:
42:a3:5f:37:3f:d3:c4:ea:45:3c:33:3e:ca:5e:20:
f1:39:2e:1f:c2:02:53:10:76:df:70:dc:20:5b:66:
54:3b:40:f8:eb:53:bd:b6:de:d8:7f:63:f7:50:06:
ea:67:6f:dc:91:cc:b9:17:06:3d:16:57:a7:af:2c:
12:e2:e4:cd:c6:a8:0a:29:76:ed:17:6b:d8:00:bd:
ad:4f:5a:8b:72:aa:be:a1:24:c3:07:f7:2c:99:65:
10:d9:56:26:4f:98:b7:d0:b0:90:31:c3:58:c7:7a:
e6:c0:f5:29:38:41:c0:86:57:06:00:ad:c4:97:93:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:20:54:BB:8D:ED:24:85:40:63:6C:F5:68:F0:2A:77:3F:64:D7
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:43:b8:e5:36:44:c2:e7:94:19:64:94:f5:12:06:ab:dc:22:
30:e4:52:e2:44:80:97:ca:b5:8e:55:a8:24:54:ea:6d:36:8a:
c1:23:a8:0d:ac:7a:b3:fe:43:04:22:ad:e8:47:6e:a5:1b:a1:
b7:6f:6c:d3:0e:f6:cb:e0:6b:d6:83:35:d3:5e:4a:8a:73:68:
38:fd:24:16:21:f7:d4:fb:57:de:fe:db:40:d1:40:0b:12:95:
b4:9f:07:6e:45:74:ab:9b:5a:e6:40:a6:2e:ab:63:65:de:04:
fa:30:3f:1b:a0:af:d4:e2:57:56:25:8d:d2:91:67:eb:a3:a5:
f4:12:e4:29:68:89:ae:f6:9b:91:dc:94:85:bb:1d:91:3f:47:
42:fe:20:5c:4b:82:36:11:d7:19:78:4d:ff:3d:6c:ec:00:8b:
cc:79:c6:73:df:8f:1f:8d:f4:eb:b2:f2:e2:2c:16:23:29:69:
8f:54:95:45:94:79:16:bc:41:a5:5c:92:60:d4:4c:68:de:35:
7f:18:37:af:94:70:97:a8:4c:7e:05:e7:8b:6f:85:1a:7c:db:
fd:c2:25:49:13:3d:d1:d9:f2:7b:b3:e5:59:9e:4a:b7:40:8f:
92:f1:a6:49:0a:f5:c2:df:dc:40:df:f9:4a:78:a1:29:14:95:
40:98:7e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:32 2025 by rpki-client