Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: uT1yOm2x+gYP+3Y0J//vkqUWn7uJOjcpZx665DxS0Ws=
Subject key identifier: E5:E8:85:90:E7:BB:EB:BB:6E:1E:A2:A5:C3:A1:52:AE:28:05:45:62
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 01984287B1FA56D5C1ED188CCD60E72012B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0B32
Signing time: Fri 25 Jul 2025 17:00:45 +0000
Manifest this update: Fri 25 Jul 2025 17:00:45 +0000
Manifest next update: Sat 26 Jul 2025 17:00:45 +0000
Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: orzSFEQVbVDuLaGojKqZStxZOUsbPaQDTwK2GAzRLII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:b1:fa:56:d5:c1:ed:18:8c:cd:60:e7:20:12:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Jul 25 17:00:45 2025 GMT
Not After : Jul 26 17:00:45 2025 GMT
Subject: CN=e5e88590e7bbebbb6e1ea2a5c3a152ae28054562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:28:9c:af:bd:c8:d3:1e:96:5d:b5:4c:da:10:
a0:72:bf:e0:97:39:2c:50:86:47:78:f2:e8:52:32:
d5:13:4c:92:d7:9d:cd:0a:8d:67:77:00:9e:e3:73:
f8:5e:c5:be:19:3e:de:40:c2:23:5c:d5:b5:c1:aa:
f3:ee:4e:bf:82:44:53:37:d7:1b:9c:52:89:b7:64:
ee:13:f4:19:76:9e:3e:24:8a:8d:49:cc:6a:ee:4f:
a5:a7:bf:ee:77:0e:d9:f1:2a:a2:63:5f:7a:10:8b:
97:bf:b6:f3:82:f2:2e:05:da:4d:3d:80:eb:e9:70:
e1:58:2f:16:6b:f6:37:e4:6b:77:02:55:b8:5b:12:
08:16:df:4b:10:08:8f:03:a3:60:38:dd:58:c8:38:
e5:0b:b8:c2:3b:8d:ca:db:78:4b:e6:a2:15:4b:0f:
b4:13:a5:2a:78:14:f0:0f:23:bf:05:1f:f8:3d:09:
cc:84:59:c7:9d:3e:b3:e2:b4:77:00:19:c7:73:b3:
4e:ef:89:9b:4e:64:9e:1d:eb:fb:5e:b5:48:8e:fa:
64:24:4f:e3:90:54:c1:e5:d5:fd:f9:49:de:10:0f:
73:45:ad:fc:c8:b7:d3:8e:c1:7b:48:82:c6:34:16:
f6:2c:24:33:b3:9b:1e:0d:22:de:c6:90:c9:d1:4c:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:85:90:E7:BB:EB:BB:6E:1E:A2:A5:C3:A1:52:AE:28:05:45:62
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c9:80:78:9c:ac:c8:c4:b9:83:bc:cc:1d:57:a4:f3:fb:71:
e5:5c:aa:d4:e3:49:e4:cd:2e:f8:f2:ce:f9:b7:4a:a2:b1:6a:
e8:3e:77:3e:4c:7d:88:3f:da:71:a4:fd:fe:10:c7:95:dd:43:
99:ec:9b:b5:2d:60:ef:d4:03:e3:52:98:f1:a3:e1:17:d5:d3:
48:0d:c6:02:a7:16:0e:39:83:6c:3e:a2:1e:36:bd:14:db:3b:
31:ca:5f:cd:d4:cb:a6:e8:48:f8:d5:43:95:6e:3f:59:c4:07:
c1:a7:2f:fc:b5:16:73:69:6b:09:be:e4:d7:69:3e:0e:cb:b8:
67:47:b4:f2:ec:96:fd:b1:d1:31:5b:4f:77:ac:a3:8f:a0:b5:
25:7c:f6:30:78:ac:42:10:e4:14:16:36:79:49:3d:99:3f:49:
48:a7:ae:28:40:51:7e:4b:92:71:48:a3:f9:1a:d9:cc:37:c2:
17:b4:e1:57:db:7e:48:6f:7a:dd:40:97:c4:ca:91:bd:1f:ab:
f9:82:f9:93:66:2e:e0:ab:db:51:a4:02:94:42:b7:60:53:ae:
53:1b:36:17:b6:21:be:1b:ff:da:7f:29:3f:44:de:8d:41:81:
38:7d:e4:db:7a:7b:b1:f4:4c:f7:f2:33:f8:77:e9:3c:e6:95:
9b:e3:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 20:52:50 2025 by rpki-client