Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: vWSnWw49qmRWNYz29eVLAW8ZxdfMnJ4Td7ZvpVMQYOk=
Subject key identifier: 29:C0:43:24:C4:B5:B4:65:4C:12:E6:2D:6F:C7:28:79:5A:9A:38:49
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 01976C624FE06817D9863C016632E2E4CFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 03:01:11 +0000
Manifest this update: Sat 14 Jun 2025 03:01:11 +0000
Manifest next update: Sun 15 Jun 2025 03:01:11 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: K0WWCWuI9p1swfXZVd8FOkjI79dB9nqPW1w87rCz/yM=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:4f:e0:68:17:d9:86:3c:01:66:32:e2:e4:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Jun 14 03:01:11 2025 GMT
Not After : Jun 15 03:01:11 2025 GMT
Subject: CN=29c04324c4b5b4654c12e62d6fc728795a9a3849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:53:26:27:57:ed:8e:a7:a5:e7:9f:f8:73:
1f:42:d2:80:db:26:44:1a:a4:33:3b:92:55:90:b7:
61:a2:d5:a1:1e:0e:99:fc:a0:26:30:33:a6:12:85:
f6:d9:2d:79:a5:77:61:bb:86:6e:74:1b:c6:ae:09:
9a:14:20:bc:7a:21:14:8c:7b:bb:53:0c:ed:f0:f6:
da:31:2d:78:6f:f6:85:72:bf:19:5e:ec:f4:cb:e0:
a0:a9:dc:36:4a:72:b2:cc:cc:c0:9f:02:78:1f:9f:
66:32:f5:ad:4f:85:7f:35:4f:08:44:8b:24:21:95:
a0:c5:d3:9d:62:e9:56:7d:12:24:a5:9b:a1:10:39:
37:dc:72:b6:67:a8:32:ca:96:4c:d2:f7:0f:35:c5:
f6:36:6b:d3:07:64:5e:28:7c:11:fc:24:3e:ad:fe:
df:61:68:e7:64:d8:1f:36:17:c8:bc:44:79:36:38:
82:98:dc:35:2e:c7:e8:12:4b:8b:fb:73:16:43:a1:
c5:e4:35:9e:ea:91:43:56:de:ee:79:75:3b:a0:f2:
bc:15:ea:7c:0a:2c:f7:a3:68:bf:66:c3:8f:75:ed:
bd:fe:a5:c5:bd:e0:04:2c:38:a4:39:ef:aa:64:74:
6c:b4:d4:72:ac:bb:47:51:84:f4:ad:e8:7c:bf:fb:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C0:43:24:C4:B5:B4:65:4C:12:E6:2D:6F:C7:28:79:5A:9A:38:49
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:e4:58:18:89:18:74:c7:8f:80:f5:c5:28:41:75:38:01:
f1:e7:28:ec:03:fd:8d:5d:03:e9:af:2d:61:05:9c:dc:ca:b5:
fd:be:0e:4b:04:09:49:4c:96:ec:65:b9:0e:60:f4:b4:44:ef:
90:3e:e3:8c:26:55:22:45:2d:bf:bb:16:f5:89:a3:45:0c:4a:
a0:55:10:0d:c4:33:7a:6e:89:d1:c1:e8:c9:29:fa:24:91:d6:
1b:6a:5e:44:7b:5c:ef:f1:32:d4:2b:17:b6:a3:8d:fd:eb:a4:
20:9b:cd:f9:81:a0:7f:cb:e0:c5:1e:57:dd:d4:b1:52:81:4d:
82:fa:c7:fa:73:d0:94:bf:e0:ee:dd:fb:25:19:13:f4:49:28:
f6:c0:a0:4f:82:0a:f5:24:d4:6f:28:e2:f4:b2:35:b7:84:df:
9a:14:5e:81:fc:c4:23:14:75:2e:98:ac:7d:f6:4f:e3:6d:27:
7b:72:3f:e7:f3:fb:60:13:66:0f:f5:86:c9:bb:0b:92:a0:8d:
66:f4:2a:28:f2:5f:76:5e:40:7f:c6:1b:b0:1f:8e:63:9d:85:
99:48:8f:c1:ae:6b:d5:68:70:7a:75:b5:ec:e6:f3:f3:c8:9d:
34:be:ba:cd:af:b3:a7:72:cb:b4:99:a8:ac:9b:31:04:56:13:
0c:34:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:39:19 2025 by rpki-client