Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
File: oynU0nVy71pqbb7NeS7vmM6QcW0.mft (raw, json)
Hash identifier: nSFJNeVo/gMe0AxB+i/J63PjDtD+dvG5Pja5e0VnH8g=
Subject key identifier: 94:83:AA:13:7B:4B:8C:5E:A0:04:39:03:4B:E1:CD:A8:15:BB:F4:76
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial: 019779E6886000AD0C6EC5B836B43E51CDD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 18:00:40 +0000
Manifest this update: Mon 16 Jun 2025 18:00:40 +0000
Manifest next update: Tue 17 Jun 2025 18:00:40 +0000
Files and hashes: 1: blse6v5EH2fVrElwGZmlrK99XJk.roa (hash: otAVsYT9s6hCs6g9uAr3ovy061yRH8/KdKxwyyD5qvk=)
2: oynU0nVy71pqbb7NeS7vmM6QcW0.crl (hash: IxE8mcCznFs/Ufb2lLPNSEGZ892YtDjQhfxPrfyRBT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:88:60:00:ad:0c:6e:c5:b8:36:b4:3e:51:cd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Validity
Not Before: Jun 16 18:00:40 2025 GMT
Not After : Jun 17 18:00:40 2025 GMT
Subject: CN=9483aa137b4b8c5ea00439034be1cda815bbf476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:35:7e:d5:dc:38:c0:0e:9e:40:2c:50:3e:
0f:fd:74:d4:e8:da:5f:fb:f0:30:c7:c3:93:8c:2a:
6d:e6:fd:52:a7:f3:35:4b:2b:aa:48:0f:0d:1e:68:
a5:3e:bc:31:e3:48:51:b5:7b:5f:75:2a:ee:c8:2a:
8f:fb:73:74:01:a6:f0:1b:4d:62:65:7d:eb:ed:93:
54:cf:7f:9d:c4:e3:67:34:78:79:65:e0:e6:73:47:
2b:50:25:e9:fe:d1:80:1e:65:b6:18:a0:35:2b:56:
74:cf:83:a8:0a:25:1d:4b:36:d9:b9:c3:97:67:3c:
5a:10:ce:99:70:f6:d9:65:0e:52:b6:9c:99:b8:eb:
5f:1a:ca:c1:9d:c2:79:ef:ca:ab:27:34:6c:7d:a8:
9c:e5:a1:c1:aa:0a:a6:0c:c1:2d:04:f2:4e:ad:78:
15:5f:c6:92:1d:f8:9d:6a:d0:95:ee:ec:3b:82:13:
85:2a:9b:24:36:91:2c:f4:5a:93:c5:02:46:1e:5e:
17:38:b2:ec:9c:8e:40:a1:4d:11:1f:07:02:83:14:
e6:42:ff:77:98:b0:00:a7:9f:cd:45:29:53:01:59:
f9:12:be:f6:38:32:d3:b2:93:7a:a6:40:27:ea:2a:
a5:34:39:05:6b:7f:60:1f:ac:37:99:62:cf:bb:a2:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:83:AA:13:7B:4B:8C:5E:A0:04:39:03:4B:E1:CD:A8:15:BB:F4:76
X509v3 Authority Key Identifier:
keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2e:16:20:ae:87:64:81:a8:36:e2:37:93:f1:be:99:73:33:
5f:22:ca:b2:5c:18:11:e4:1c:8b:53:30:86:19:99:7e:d6:4d:
b3:d3:c9:64:83:ef:f9:bd:c6:68:61:4d:97:f1:df:24:47:0e:
94:e6:37:40:87:4f:91:df:57:17:c6:b5:ba:d9:72:03:00:2e:
31:62:82:21:90:44:3b:1d:04:2f:59:64:e7:30:fc:99:40:b2:
77:91:33:73:57:c9:84:61:f9:ab:8e:6a:91:d0:4b:d2:b0:9c:
0e:68:0a:ae:a7:5e:52:2f:49:20:95:34:16:02:14:40:59:9a:
ce:ea:57:73:f2:6a:e5:13:fa:c8:5d:dd:b5:a0:db:ff:03:e4:
56:dc:bb:ad:cc:1b:04:d5:24:e3:bb:0d:c0:70:3a:c0:5f:fb:
26:4d:50:ac:3d:d5:e2:10:70:bd:4f:3a:17:25:7a:3a:5c:c4:
d2:07:0f:a3:0e:eb:6c:06:9e:a5:a6:84:4e:89:90:31:0f:85:
34:57:92:4a:4e:48:9a:7c:cf:c3:6a:e3:54:4c:ac:63:84:ef:
11:35:94:d5:17:e6:00:ed:07:fb:18:e7:b8:34:f3:8c:22:da:
83:cc:bf:c6:5f:27:d9:31:ec:ec:10:e6:58:0d:3d:23:4c:cd:
d1:db:be:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:24:04 2025 by rpki-client