Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
File: OCeQLuylKp8IFACI9VjkUuDslV8.mft (raw, json)
Hash identifier: 6p8sMCrTWZDaftMShTB+X0YAa8LifOav6a+vpho9EBk=
Subject key identifier: 4F:C1:18:71:5E:DB:83:D7:4E:43:32:93:F9:DB:E2:FC:08:16:39:16
Authority key identifier: 38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
Certificate issuer: /CN=3827902eeca52a9f08140088f558e452e0ec955f
Certificate serial: 019776AE4889ED68DD96C286AAAE1128D9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
Manifest number: 59
Signing time: Mon 16 Jun 2025 03:00:22 +0000
Manifest this update: Mon 16 Jun 2025 03:00:22 +0000
Manifest next update: Tue 17 Jun 2025 03:00:22 +0000
Files and hashes: 1: 7nhLLpXwqJ1voHCkK-P1ueQH-PM.roa (hash: Y5wnVvyZMdqfWGL6r50VzIWMh6QnpnoTzvTu5ABQUTI=)
2: OCeQLuylKp8IFACI9VjkUuDslV8.crl (hash: aAZfkSojFsA8yChUgNGOQq5oZfewBeUj7Mn6AjcRC24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:48:89:ed:68:dd:96:c2:86:aa:ae:11:28:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3827902eeca52a9f08140088f558e452e0ec955f
Validity
Not Before: Jun 16 03:00:22 2025 GMT
Not After : Jun 17 03:00:22 2025 GMT
Subject: CN=4fc118715edb83d74e433293f9dbe2fc08163916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:36:64:0b:e9:ef:cd:6f:cf:d3:87:ad:a4:
da:c9:c8:da:08:cb:d8:fb:09:a6:a9:57:f4:c1:04:
34:67:44:74:0c:f5:10:f3:61:45:b4:66:e3:cf:f2:
88:db:63:3a:69:ae:d6:66:22:11:94:a6:d9:48:fc:
54:ed:8b:65:5c:02:eb:9a:94:46:30:52:8d:4d:a4:
db:f6:ea:1c:2b:ab:a2:e1:ea:73:2e:f9:5c:f3:68:
4f:f5:9a:9c:97:cd:1d:6e:97:04:52:78:0b:cd:77:
59:2e:49:e1:00:2e:0f:18:af:7a:b0:7f:44:f4:0d:
c2:31:59:4f:d3:09:6d:85:d2:a9:d0:25:fd:60:54:
b3:47:94:94:54:92:6a:89:21:61:97:3f:65:1e:b2:
76:12:6a:3a:c6:a9:ac:21:e5:c7:2f:fa:bd:92:b4:
be:cb:1f:9a:9e:3a:b3:3d:16:4b:86:2f:e0:76:6b:
91:58:1d:95:ae:6f:d9:a5:85:a1:7b:3c:95:60:28:
4d:87:55:a3:da:f2:42:4d:2b:d5:5d:a4:38:a0:93:
86:8b:b6:e3:48:d4:b1:6c:d4:dc:53:7d:b0:15:a5:
17:87:7e:33:c2:03:6b:5c:41:fd:82:34:63:98:3a:
30:9a:b2:55:12:14:6b:f1:0f:36:c2:e2:38:93:55:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C1:18:71:5E:DB:83:D7:4E:43:32:93:F9:DB:E2:FC:08:16:39:16
X509v3 Authority Key Identifier:
keyid:38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3b:98:2b:c5:04:8e:cd:fa:1d:af:42:b9:88:9c:0f:73:8a:
3e:7d:29:89:a1:29:99:60:28:2c:1a:99:dd:7f:65:6a:6a:0d:
86:f3:27:6d:d7:4d:87:ff:79:25:c3:4b:39:92:fb:d1:91:f2:
15:66:e8:dc:98:0f:13:87:e7:1a:f1:16:b2:fd:b8:5b:09:b3:
a4:03:e0:4c:88:2c:aa:d2:35:b6:2c:d3:0a:5c:be:be:ee:6b:
51:01:2f:45:34:6b:78:eb:be:19:f5:47:76:bb:91:af:5e:99:
f9:ab:08:9a:2c:cc:96:6d:b8:25:b5:f7:92:7b:df:ca:f9:a6:
da:dd:d6:50:7d:b2:35:99:6f:34:06:8d:60:44:84:38:96:f1:
f9:44:94:46:8b:ec:a0:b6:ab:68:f3:e2:df:90:7f:0c:5f:3e:
3c:c6:9a:42:7e:71:d1:e6:ab:98:11:76:40:5d:08:cc:f6:70:
8a:21:6c:0a:61:26:8f:dc:9d:b8:1e:7f:6d:a6:d5:42:e3:c8:
78:a3:a9:fb:93:63:cb:15:be:8e:6b:e4:a9:10:b7:e9:29:75:
64:0a:9c:dc:35:a0:e4:27:47:1c:04:d9:16:f2:9b:eb:7f:c4:
66:35:d3:de:1c:6d:6a:2f:f5:2f:0e:08:04:69:3c:88:58:56:
4a:0d:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:03:07 2025 by rpki-client