Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: qH3VrHmnTV3KG34clJ+itqC+yxW0Kn+a4RWvgCTUGfg=
Subject key identifier: F6:99:D5:12:09:85:B0:F1:7D:AC:6D:F8:39:E3:7D:3A:EC:94:F2:5E
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 01978990F6F598F281876FA9791DAA0130B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 05EE
Signing time: Thu 19 Jun 2025 19:01:08 +0000
Manifest this update: Thu 19 Jun 2025 19:01:08 +0000
Manifest next update: Fri 20 Jun 2025 19:01:08 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: URst2c64K8DnAyOe/NgmUtYgXaGgjUipMckFeYiMlYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:90:f6:f5:98:f2:81:87:6f:a9:79:1d:aa:01:30:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Jun 19 19:01:08 2025 GMT
Not After : Jun 20 19:01:08 2025 GMT
Subject: CN=f699d5120985b0f17dac6df839e37d3aec94f25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:65:02:de:5b:07:bd:2d:e4:ca:1e:ae:59:
f7:e0:da:25:76:a1:4d:22:fd:0d:00:ee:44:a6:c2:
7c:8c:e0:a8:ed:6f:d9:c1:9a:da:8f:44:72:00:91:
73:2c:5b:07:28:4a:b4:c8:28:fa:ee:14:79:a5:c6:
a1:c5:a1:f3:6b:66:60:18:ee:0e:5d:6b:88:78:8f:
20:3a:81:d7:35:48:59:b4:2d:63:48:b5:37:7d:2d:
d6:65:a6:c7:1a:dc:20:3c:99:7c:4e:ac:ab:f8:c0:
99:67:d5:ff:d1:5a:aa:b5:59:15:41:7b:35:af:82:
c9:b2:c4:e5:41:80:d0:9c:55:ad:a8:9a:f9:13:55:
0d:57:ea:81:e4:d7:8d:c0:2b:72:ce:3a:39:90:a0:
41:67:bb:b3:19:72:f8:ca:68:8a:50:22:b3:f4:d4:
64:5a:fa:5b:14:77:55:91:a8:a9:40:0b:81:f0:6d:
ba:0c:39:47:7d:f1:64:2c:f4:52:7d:16:f8:12:59:
69:59:b9:33:45:0d:6e:ac:64:81:d2:8e:bc:26:c9:
80:34:db:4b:7e:ae:91:57:c9:e5:af:9f:15:19:c6:
8e:c2:29:dd:d2:c3:d8:58:93:e0:42:f4:5f:78:39:
1b:3c:b8:8f:de:40:66:02:69:ae:87:71:47:ce:4c:
7b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:99:D5:12:09:85:B0:F1:7D:AC:6D:F8:39:E3:7D:3A:EC:94:F2:5E
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3e:27:b9:c3:85:ec:64:05:86:e6:b9:01:21:31:a3:18:2b:
dc:46:3e:2e:77:dd:50:ae:7d:0e:c3:85:ec:00:fb:48:b8:85:
17:5d:26:55:97:47:f5:43:5a:bf:76:f7:35:4a:44:8b:d8:94:
87:5e:a5:6c:22:3d:fd:d1:68:2f:cb:e1:ae:78:74:3c:d6:4d:
5f:48:99:13:28:03:67:37:50:ec:04:bb:e5:71:59:b7:1e:1c:
1f:91:4e:31:7e:c8:2f:73:19:2b:b4:7f:1b:ba:4a:90:02:00:
69:e2:8a:3e:39:ff:a0:90:e2:41:57:11:5c:be:65:ab:e2:50:
e9:ad:b6:05:e7:0b:95:c0:cb:32:37:a2:de:9f:2b:24:0b:5c:
fe:cd:ea:e2:7f:59:f8:72:06:eb:09:26:a6:53:4c:f1:e3:e3:
73:59:f7:50:4c:83:41:fe:25:ca:0e:b3:2c:58:fa:be:8e:57:
5f:74:1d:78:ff:10:e8:a9:e3:9e:1b:89:ba:b0:4f:67:76:45:
e2:93:76:2b:c2:74:03:ce:5e:f3:e3:1b:ba:8d:33:2f:1f:14:
1a:77:4f:fc:76:60:af:b9:52:07:25:6f:20:a7:be:13:a0:69:
fd:2e:cc:16:a3:07:17:0b:6c:39:2f:32:88:12:0a:50:08:bc:
a4:6c:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:10:10 2025 by rpki-client