Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: hEl3+OPCkgJ4xGQXhtU+yUwoWwGqKLsY9AKEPzGVVPU=
Subject key identifier: 32:4E:6D:39:8C:AB:AC:F5:B7:FF:01:4F:A9:2A:79:FD:01:AD:65:EF
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 01976F62ED6D480E1C6A9C3FCF98BF758A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 0675
Signing time: Sat 14 Jun 2025 17:00:43 +0000
Manifest this update: Sat 14 Jun 2025 17:00:43 +0000
Manifest next update: Sun 15 Jun 2025 17:00:43 +0000
Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=)
2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=)
3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: Q2A3sTcGzUXqrBCRxUyXvT8FpEHNESNUOjexADr8I+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:ed:6d:48:0e:1c:6a:9c:3f:cf:98:bf:75:8a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Jun 14 17:00:43 2025 GMT
Not After : Jun 15 17:00:43 2025 GMT
Subject: CN=324e6d398cabacf5b7ff014fa92a79fd01ad65ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:fc:60:9a:b2:94:d3:8c:16:76:d0:4c:0c:
3e:c5:0c:65:8f:53:f7:63:d1:b3:84:46:29:7a:d5:
94:ec:11:26:02:db:83:b9:43:29:f6:22:bb:ec:d5:
7f:e5:3f:51:3f:2f:be:03:ce:d9:f6:5c:4c:22:f1:
3a:5e:19:38:62:46:18:05:a9:ef:dd:a6:b2:cc:4a:
9d:fc:bc:81:9f:d8:24:d1:a6:bb:39:d2:29:ad:79:
04:13:c9:a5:89:97:d9:b2:f0:64:19:be:69:9c:46:
7e:3d:bd:02:a0:69:1d:2f:ce:9e:9a:a2:c5:8d:04:
bf:18:c1:53:e7:f5:f6:a0:2e:23:d3:18:c5:6f:3a:
03:d5:1f:8b:b6:a2:2c:aa:13:31:9f:6d:45:98:b6:
10:2a:02:d6:32:97:2d:cc:09:79:56:47:24:c5:bd:
2a:ce:97:dd:74:42:16:17:d7:50:3f:95:f4:e7:62:
e6:b9:7e:54:52:09:3f:25:c0:d9:5a:5e:b1:0a:af:
c8:cd:45:7b:bc:65:e1:ff:21:53:73:80:d1:69:14:
72:98:03:1e:72:37:20:51:4f:44:19:2e:b7:7f:a1:
c6:6f:be:af:b9:eb:69:00:3b:96:1e:76:04:05:79:
b4:82:b4:5c:1e:6e:ce:c3:f6:fd:d3:8c:ea:31:9a:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:6D:39:8C:AB:AC:F5:B7:FF:01:4F:A9:2A:79:FD:01:AD:65:EF
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:21:8f:ec:92:5e:bc:c2:6e:b9:85:b8:0d:21:fc:29:19:6c:
49:7f:5b:d4:b9:ea:b3:4f:f6:cd:89:78:6a:fa:54:ac:59:a5:
c7:16:83:66:a2:cd:77:de:54:03:b6:a1:e4:2e:e4:5f:b3:71:
4a:27:fd:d7:3a:ad:c5:e8:13:9c:da:af:48:f3:8d:0b:bf:1c:
47:c8:a1:fb:3f:72:d6:e3:3a:5d:b0:91:0c:f3:7a:4f:24:3a:
5d:ee:2e:09:4d:fb:a4:5d:2b:2d:ea:fb:16:5b:b3:22:69:d2:
e8:6b:5e:44:e4:10:f9:1c:68:f8:80:09:e6:75:af:79:74:bb:
72:07:e0:17:df:95:20:c3:2c:25:4a:65:66:a9:0e:5c:be:51:
2e:29:8c:c1:34:6c:d5:4a:4d:fc:46:4e:f4:e7:1e:b4:78:95:
2c:e9:80:ca:e1:7f:7c:97:26:19:d4:57:3e:4b:f2:28:6e:2b:
69:7e:33:37:cb:5c:ed:61:cd:f8:d7:0f:d6:91:87:3c:e0:ba:
cc:57:23:92:4c:5f:5b:73:b7:08:1d:26:8d:c1:f3:d1:cd:f8:
70:bc:5d:1b:c0:e3:d9:61:19:29:0e:6a:58:cc:4d:77:cb:01:
ec:e3:b4:1e:5b:e3:3d:6d:57:82:3e:d1:6d:b5:eb:ba:2b:80:
b9:98:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:15:01 2025 by rpki-client