Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
File: OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft (raw, json)
Hash identifier: lNV3vB0S+tz86VIqpgoFYG780LEBqC4D7d7hTl5mDz8=
Subject key identifier: 57:75:2E:3F:7A:09:EB:B4:6F:0E:36:EA:EC:F9:EF:5E:B4:F4:E7:67
Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858
Certificate serial: 019777F84064518AFA5B392FF0CEEDA59970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 09:00:47 +0000
Manifest this update: Mon 16 Jun 2025 09:00:47 +0000
Manifest next update: Tue 17 Jun 2025 09:00:47 +0000
Files and hashes: 1: I01Lo7qwhvaLI2U54ucZ10pkExs.roa (hash: mTrGRc4f1Skt/0lHfZ3XZbVEvrQ9mBUuWZXJpIXORz4=)
2: OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl (hash: J6qJepsrxZPpfnQyeXpph8/7kM6Qeqhbn4CcFpAmA3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:40:64:51:8a:fa:5b:39:2f:f0:ce:ed:a5:99:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858
Validity
Not Before: Jun 16 09:00:47 2025 GMT
Not After : Jun 17 09:00:47 2025 GMT
Subject: CN=57752e3f7a09ebb46f0e36eaecf9ef5eb4f4e767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:79:fc:74:0e:d0:7f:f5:8e:d7:f2:2d:9c:
4a:99:cb:72:94:d9:b9:67:5e:5c:13:27:0e:90:d3:
63:02:94:41:df:ec:85:7b:38:51:19:65:4d:4d:c6:
54:f8:92:d4:08:8e:6f:53:20:10:26:cb:c1:c1:a9:
e5:d6:26:d2:13:7e:60:05:ef:a7:83:38:d7:8b:25:
e6:a6:37:28:92:13:2e:36:3e:c8:4e:da:e0:dc:03:
92:44:c7:5d:c4:dd:91:1e:9a:1b:e8:17:b0:4e:28:
c6:1d:b8:b6:30:34:87:69:e7:07:0e:71:51:1e:ce:
28:8c:d8:74:53:7f:ac:3d:e8:4a:29:7a:e2:e3:e1:
84:35:b4:93:88:89:de:cf:00:e7:23:24:21:9b:bf:
b9:58:63:e6:ce:2a:8c:21:2f:38:a0:66:1d:a8:69:
00:df:95:3e:ef:a3:8a:64:df:39:dc:2f:bc:7f:cb:
ee:80:32:c4:c9:b5:49:7d:f4:39:a8:b3:26:8c:06:
36:ab:5e:8b:5d:2a:74:07:5d:57:8f:79:4e:a1:77:
4f:a0:0c:71:a4:9e:8b:f9:fd:c4:fc:38:d1:6c:d7:
83:c2:fb:96:ee:eb:6d:fa:aa:4e:25:45:7c:97:3b:
2a:47:b7:fd:96:6c:d6:2e:fd:38:59:ca:0f:72:1b:
e4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:75:2E:3F:7A:09:EB:B4:6F:0E:36:EA:EC:F9:EF:5E:B4:F4:E7:67
X509v3 Authority Key Identifier:
keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:24:85:1b:5b:12:13:93:a5:31:09:da:ae:6d:3c:c9:08:9e:
6c:e3:a1:62:08:86:dc:17:2a:82:de:ff:94:a0:73:e4:3b:6e:
0b:25:ac:9a:bd:c2:db:df:88:b6:a8:02:90:16:ad:7a:a8:f0:
bb:41:98:f1:6c:e7:5b:1e:fa:b9:00:3c:4a:14:76:ed:b4:7f:
66:51:b4:d0:26:6e:13:da:05:ac:8a:1f:c5:ac:d1:cf:c6:24:
66:57:ff:95:7a:d0:86:11:97:ce:b1:a3:12:80:28:32:51:6a:
10:2b:14:f2:f4:c3:96:c6:9e:ad:e5:81:e5:00:63:e8:a6:56:
69:04:ea:71:6e:2a:cd:49:22:95:d6:cd:66:39:20:0a:2f:a1:
02:c4:84:b0:48:a5:c4:d7:62:bf:f2:ec:9d:05:27:19:96:1e:
a7:f5:0f:70:79:3e:61:7a:60:f6:f5:a9:88:9e:2f:ca:8c:31:
6d:90:ad:ee:be:ef:f6:2f:47:5f:cb:9b:2d:90:cd:f2:aa:42:
e7:fc:64:f7:52:ba:1e:f7:0e:4f:4e:9b:75:41:ac:f1:32:3d:
e6:6b:44:10:ca:c9:1e:15:97:f8:4f:25:d0:c8:89:71:d9:01:
24:b5:ce:e4:7c:2c:14:7e:46:a2:53:7c:c0:80:25:e0:3f:68:
67:99:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:12 2025 by rpki-client