Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: A1GCZwmrXb5wt+b/tXH+OOz5cZP3uveOcKtRhyUUNcg=
Subject key identifier: 38:A2:39:EB:BA:8A:0D:3D:82:5B:A9:5E:FB:B3:8E:42:FF:2E:0D:81
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 01976F2C38B01D8CDD900DB49609FC9BDBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 16:00:58 +0000
Manifest this update: Sat 14 Jun 2025 16:00:58 +0000
Manifest next update: Sun 15 Jun 2025 16:00:58 +0000
Files and hashes: 1: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (hash: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: B3adr1K4DWvJ7Gu5UdfZjPNUHbDM4uroZzZ6BYRz3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:38:b0:1d:8c:dd:90:0d:b4:96:09:fc:9b:db:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Jun 14 16:00:58 2025 GMT
Not After : Jun 15 16:00:58 2025 GMT
Subject: CN=38a239ebba8a0d3d825ba95efbb38e42ff2e0d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:a8:10:7f:c4:2e:6d:30:ee:73:12:1e:bb:
a4:d6:a6:cc:77:72:6e:c2:85:56:fd:a4:02:13:d9:
56:33:c3:ab:8d:44:7e:96:4c:f8:a5:6c:4e:8b:1b:
0f:f4:6b:bd:4d:3a:cc:7a:f3:e5:e7:83:31:0a:e2:
d8:75:ec:b1:01:ff:8f:ba:9b:ff:06:df:00:4c:31:
3e:c0:0c:3b:93:ea:3f:cc:09:19:10:f3:15:fb:5b:
e8:f6:27:bf:ae:c1:6e:2a:37:d3:4a:83:77:82:e7:
c0:5e:67:6b:bb:b5:6b:34:fe:b9:26:2f:02:87:6c:
56:ce:ac:e5:ed:36:d7:c3:56:f0:b2:a9:7f:26:a5:
b4:fc:b3:59:ae:58:53:30:32:5a:53:78:c0:76:c6:
ec:92:ce:34:c2:51:55:0e:26:87:1b:f3:58:d8:76:
7c:a9:08:b2:a6:31:16:0f:a4:cd:d1:b7:bc:18:6f:
3f:d2:e4:0a:70:7f:cf:4b:c8:fd:f5:0e:5b:83:54:
d4:a3:c0:83:ac:25:69:ae:87:a6:4b:4f:b9:61:88:
40:ba:0e:90:09:62:2d:ff:3c:a8:e5:ff:c0:c8:80:
98:60:ce:f4:42:67:d8:3a:04:6b:f8:74:fd:c8:eb:
35:81:1c:6d:83:58:4f:13:00:6f:a0:c1:12:81:b1:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A2:39:EB:BA:8A:0D:3D:82:5B:A9:5E:FB:B3:8E:42:FF:2E:0D:81
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a3:be:8a:bc:ed:19:34:23:e2:b2:76:8a:d9:4d:5f:f7:30:
bb:42:07:24:aa:d1:13:94:bb:b5:c8:56:f5:91:f7:46:61:1d:
76:65:f1:7d:41:e4:66:f2:9e:ad:20:b3:16:3c:31:7a:ea:92:
08:39:aa:c4:b3:c7:26:e7:c0:19:62:04:0c:1a:5d:95:7d:98:
70:b1:3b:49:5d:13:78:5f:be:60:04:c1:68:ea:79:09:e1:4b:
7b:28:ac:d0:8c:ed:a7:95:49:38:fb:3c:ce:42:58:8c:02:ce:
36:26:0d:e3:cc:24:9c:53:ee:1e:35:69:bb:5d:fd:02:bb:4e:
70:27:8e:97:28:a0:48:5a:43:1a:de:d9:53:d5:c1:31:c9:d9:
6a:f4:cf:60:18:ec:a0:67:77:78:9c:4d:9f:3b:89:e0:24:0d:
5e:7f:b4:f0:4e:aa:2a:e5:0e:60:0e:e8:e3:f5:14:32:84:8e:
0a:33:b0:3e:78:00:58:0e:64:42:85:d4:e8:8c:49:76:06:33:
34:b4:da:31:0c:7b:33:88:76:70:ab:c0:99:b0:33:61:55:2f:
49:4f:e0:52:6e:0b:34:3d:05:51:90:7b:09:f3:af:1e:cc:b6:
78:bd:c9:6e:8f:05:85:47:b1:de:ca:d5:d0:43:22:d6:e2:0a:
3c:f7:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:59:17 2025 by rpki-client