Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json)
Hash identifier: pU0fVoKdtLuq8NL1u1LnJDKpwKoQ9fgcilZawJbvYqw=
Subject key identifier: 14:EA:27:29:49:7D:BE:07:33:24:93:15:03:3F:43:F7:41:0D:54:5C
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial: 01976D748561E9CAAA00C62204B879F4B318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 08:00:42 +0000
Manifest this update: Sat 14 Jun 2025 08:00:42 +0000
Manifest next update: Sun 15 Jun 2025 08:00:42 +0000
Files and hashes: 1: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: Xo/TVB8bbZrELV7Ob6xiMZhVXJ7tWFfyZJKyqF70fgE=)
2: bS8D5tTeBAXDkMQSy-j-MAcdPro.roa (hash: R+yA1y5Nb8S44doc/dttKyd8pVatx4WMIyAI41rpB+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:85:61:e9:ca:aa:00:c6:22:04:b8:79:f4:b3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Validity
Not Before: Jun 14 08:00:42 2025 GMT
Not After : Jun 15 08:00:42 2025 GMT
Subject: CN=14ea2729497dbe0733249315033f43f7410d545c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:29:4a:94:8a:6b:ac:26:05:a4:d4:15:fa:
47:d3:56:d3:89:31:8f:90:f0:07:04:bd:06:bd:17:
0a:8f:f9:e7:bd:90:5e:fe:33:b9:2e:df:d1:86:a5:
04:22:f1:e3:e2:26:92:19:00:22:c5:bf:db:e8:73:
72:ad:0e:e8:f9:36:f2:76:1a:ac:61:c7:0b:99:50:
ad:c2:0e:fa:0a:d6:03:d3:d5:a3:dd:91:54:58:20:
8f:c9:91:2b:3b:2d:fc:09:33:6e:38:3e:49:f9:73:
e2:60:26:14:9e:53:71:61:1b:ad:e8:7b:16:58:b2:
2a:3d:78:5f:cb:99:f6:9f:88:57:98:9b:73:c1:aa:
fa:b1:4c:d9:ed:54:bf:7c:87:a3:d4:2f:4b:de:9c:
af:4b:72:b5:9e:8d:06:84:75:63:73:6b:97:03:ac:
ad:b1:40:0f:80:75:5f:1f:ea:41:21:26:fc:e4:08:
29:d5:10:93:fc:a0:4e:00:c7:38:a8:ec:a7:91:41:
04:a2:8a:46:63:e0:45:fe:22:80:e8:6d:1d:cf:22:
62:b3:84:0d:49:23:41:ca:f9:41:21:fc:95:84:e2:
48:b4:53:41:fe:fb:56:bb:c4:6d:1d:17:2f:ab:38:
9d:0f:c4:63:24:83:3d:cf:c1:04:a7:56:d2:16:dc:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EA:27:29:49:7D:BE:07:33:24:93:15:03:3F:43:F7:41:0D:54:5C
X509v3 Authority Key Identifier:
keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a7:d6:93:da:c7:f1:e1:2b:1f:d7:f1:8b:65:ae:f5:19:8a:
83:06:fa:e1:fb:5f:c5:15:db:d0:1e:ea:a9:1e:6d:a3:f2:1a:
3f:d4:de:d5:ff:fd:d4:b8:05:ad:71:e7:c3:12:04:b8:69:f7:
da:38:1f:14:7a:f1:d0:bd:af:33:9c:d3:14:c1:20:87:cf:4d:
fb:46:5f:a7:fd:1e:0c:27:a4:62:d2:60:27:33:9b:60:22:de:
f1:ca:ad:1e:b2:d4:f8:8f:ad:93:39:6f:a7:81:2c:b2:0f:e3:
f6:ab:b4:0a:78:72:40:73:f7:9b:c1:c9:b5:b7:4d:dc:2d:f3:
91:52:ed:e9:7a:bc:a8:42:36:5b:11:b1:3a:3b:c9:30:4e:9d:
97:93:0e:d1:ad:83:fe:6e:13:96:e3:51:b5:e7:0a:2f:4b:c6:
dc:a3:33:34:8a:92:df:d8:ee:50:ea:64:8a:77:dd:ba:51:c2:
1c:b8:10:32:7c:cb:78:0b:b8:14:0a:85:7f:30:d1:97:81:5e:
a1:e7:0d:55:d8:33:0c:d0:38:2f:e7:5e:b0:7f:36:71:47:70:
b3:d1:72:20:26:13:29:64:be:17:e0:5e:6e:bd:13:26:b6:49:
b8:ea:b5:a9:03:37:78:1c:94:21:d8:80:46:d0:9e:1f:8d:58:
bc:40:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:44 2025 by rpki-client