Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File: OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier: rlZq7A+SZfA4oFiomcnHnta0iygeW2nDx1ovKPec3Rw=
Subject key identifier: 62:A1:EB:E2:34:62:4B:DF:F4:DA:7C:20:06:32:F4:1A:D0:5B:18:F5
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer: /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial: 01976F628F7809E0AD2C03B4D90FF2837FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number: 0FAA
Signing time: Sat 14 Jun 2025 17:00:19 +0000
Manifest this update: Sat 14 Jun 2025 17:00:19 +0000
Manifest next update: Sun 15 Jun 2025 17:00:19 +0000
Files and hashes: 1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: wgw4y1VMd48434d0rVtg35LWgiNMiog6xdnfdvXs2FU=)
2: fmsKsNJsScyYZyH8RUfSLeG-UJA.roa (hash: XWgPxzT1eqv4he1A7biAZG6QqWis59ng7mldQueWS0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:8f:78:09:e0:ad:2c:03:b4:d9:0f:f2:83:7f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Validity
Not Before: Jun 14 17:00:19 2025 GMT
Not After : Jun 15 17:00:19 2025 GMT
Subject: CN=62a1ebe234624bdff4da7c200632f41ad05b18f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:ba:77:fe:b9:0b:0f:95:d4:0f:fa:e6:02:
42:50:f8:76:6a:85:1b:4a:8c:89:ce:2b:ec:ac:5f:
8e:20:a1:fd:56:ee:d5:6d:d5:69:8b:2d:dd:1e:c3:
8f:cc:08:a8:99:22:11:62:88:d1:bc:27:39:98:7c:
5d:24:a6:8e:56:db:69:d1:f1:e5:4d:24:76:7d:f1:
9c:48:59:27:8f:d3:c6:ef:0d:2a:27:b5:24:dc:85:
5d:f0:63:97:c3:9b:7d:b8:5b:91:45:54:ae:36:33:
ae:5d:2a:52:df:3b:55:9e:ab:ff:46:d1:b9:fb:52:
1a:ba:13:fa:2d:e8:72:84:6a:b2:3c:be:30:b9:81:
bd:45:10:24:7a:3b:2c:56:a0:a4:0f:eb:d3:2d:3d:
f1:9e:5f:5c:fa:97:24:7b:20:71:50:9d:36:21:99:
f6:4c:09:93:bf:ad:b8:20:0f:7d:17:3e:51:f5:c5:
2f:64:84:55:fe:43:e8:34:1c:20:c2:69:9a:fd:ad:
94:0f:54:b7:db:39:6f:bf:cc:17:12:84:64:52:50:
3a:1a:0b:08:8f:87:1e:da:ab:ad:d0:6b:73:cc:14:
8a:70:11:ca:8f:2a:ed:c2:5b:bf:05:0c:a3:6b:75:
f1:fc:ba:62:38:fc:9b:62:7e:82:1c:32:3e:bc:d0:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A1:EB:E2:34:62:4B:DF:F4:DA:7C:20:06:32:F4:1A:D0:5B:18:F5
X509v3 Authority Key Identifier:
keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:2d:6f:57:e8:a1:63:5e:86:c6:90:12:b2:12:8d:37:aa:d1:
98:50:62:07:8c:65:69:c8:15:bc:bf:0a:91:fa:62:d4:e3:fe:
c6:4c:8c:01:d9:4d:3f:35:d4:a7:d5:6b:2e:be:93:7b:70:a9:
e3:a6:cc:79:00:62:2d:d6:19:b3:18:5d:e7:30:e7:4b:74:92:
f8:be:fe:dd:5e:74:e7:07:a4:fb:1d:cb:66:d4:5a:e7:79:f1:
c8:d9:05:cc:ad:25:98:a3:c3:41:db:6e:3b:03:9b:9e:32:94:
12:9f:14:ba:31:89:fb:24:36:5c:22:43:ab:78:88:6d:48:ed:
d6:0d:22:d4:99:de:72:5b:f6:0a:a6:1f:64:ce:d5:aa:be:15:
83:b8:ef:31:e2:a1:23:94:27:9b:c6:d3:d1:a4:a4:0c:2a:20:
52:5d:cf:13:94:a0:90:08:75:33:7c:1e:5c:fb:f2:af:47:14:
7d:41:d9:86:b8:b9:d9:5d:1e:f4:d1:11:84:71:e7:96:6c:7f:
7e:ee:b3:ed:e0:53:e0:50:19:a5:fd:04:68:87:9a:3e:13:10:
ac:ec:6a:7d:3e:28:54:b7:6c:f7:80:1c:d7:bf:84:79:1f:b9:
1a:55:b0:e5:67:65:5d:73:ed:51:50:a5:82:be:0b:a3:95:ac:
79:c4:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:40 2025 by rpki-client