Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: KpfRsnH+RoFR6gc4uM7MI3UqY5c/zkbG05eIs43k3eo=
Subject key identifier: 57:CE:E7:8A:E4:68:20:3F:CB:B3:1D:BD:01:96:05:A6:A6:B0:44:38
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 01976D3DA5A0BDFEF292017A81A0B494A427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 094E
Signing time: Sat 14 Jun 2025 07:00:45 +0000
Manifest this update: Sat 14 Jun 2025 07:00:45 +0000
Manifest next update: Sun 15 Jun 2025 07:00:45 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: bAi7dQgpMd4OI/lOwHK6kUm8aLaAlvo3/8jaVo2I44w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:a5:a0:bd:fe:f2:92:01:7a:81:a0:b4:94:a4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: Jun 14 07:00:45 2025 GMT
Not After : Jun 15 07:00:45 2025 GMT
Subject: CN=57cee78ae468203fcbb31dbd019605a6a6b04438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:b8:fb:e6:b5:d5:ac:07:b2:2d:9e:3a:67:
76:de:88:85:81:26:08:7b:ac:e9:5a:e8:73:2e:78:
57:d1:0d:fc:c8:11:e4:bc:cf:b3:c5:2b:01:fd:41:
63:1f:cf:61:2c:0b:22:af:d7:5c:fd:ad:f3:b4:90:
35:70:fd:10:47:34:7b:31:70:59:e7:d7:39:ed:45:
18:bd:79:e1:63:57:e7:f7:d4:44:bb:a1:87:7c:91:
bb:6f:cb:d5:f3:8c:1a:21:23:cb:9c:b1:52:4a:54:
de:06:d3:cb:82:30:be:59:d0:71:05:99:dd:f1:ed:
29:1e:12:ad:bf:1a:80:c7:8d:7c:10:66:2b:4d:f3:
b2:92:da:4d:fe:66:07:00:9e:28:f6:2d:fa:15:11:
82:95:5b:04:f4:3e:a5:b1:e4:c9:d5:a6:14:67:0b:
71:6c:73:ef:60:41:e9:e1:dc:42:14:c3:93:a7:80:
75:89:5f:a0:a9:7d:56:cf:10:c1:d2:e3:07:26:02:
62:69:85:62:aa:15:fb:85:68:58:6b:5a:08:5a:e8:
7e:cc:fd:cf:a6:bc:03:51:cc:07:74:09:97:b3:ea:
4b:6e:23:7b:d9:ac:9f:c7:b8:b5:84:f2:72:c7:4c:
2a:4c:ab:71:07:76:cc:cd:10:1e:09:99:56:ef:ec:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:E7:8A:E4:68:20:3F:CB:B3:1D:BD:01:96:05:A6:A6:B0:44:38
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a5:ec:59:60:ce:dc:92:b4:f6:75:b8:f3:8c:52:a8:6b:22:
d8:d5:14:40:42:07:94:0a:e5:a9:c2:fe:3c:e8:f3:73:c5:ff:
15:6e:87:55:cf:93:61:52:da:bd:31:1f:0a:21:2b:a1:a5:7e:
9b:7c:72:ba:b3:e1:84:5f:d5:71:ee:05:35:ca:f7:77:6b:24:
e8:59:7d:53:e2:a1:d2:b0:0f:c4:89:8b:b4:43:5c:0b:71:43:
ce:4d:c4:65:ae:e0:a8:e4:c2:ad:75:92:0a:5a:e9:34:14:76:
16:2c:5e:dc:dd:a1:82:70:31:e2:c2:bf:40:83:f0:0e:91:9a:
5f:75:7b:b2:26:ce:be:de:62:8f:0d:6a:1f:45:4d:10:c0:1e:
bb:b1:af:e9:8e:1c:af:dc:d6:31:ae:27:9b:0f:f2:70:34:27:
fb:c5:90:d5:2c:69:67:b0:51:b8:1e:2f:87:1d:cd:fe:a3:de:
1b:0c:65:52:dc:65:b9:d4:c7:94:7c:42:b6:81:6e:53:5a:5d:
fa:df:69:62:d8:30:ab:d0:ca:51:54:71:64:ba:b7:6a:aa:37:
ee:c8:e6:eb:60:a5:2d:66:5b:3c:f7:9b:f6:70:ab:d2:9d:34:
eb:41:bd:79:b2:ad:68:b5:dd:c0:2d:25:0d:3f:b6:26:ce:bd:
fd:e9:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:04:20 2025 by rpki-client