Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier: 8Fk77k8pFV5oiWdYjJCTEjo2YVnirIHUZOjSbAH71k4=
Subject key identifier: 8A:4D:A4:27:FE:B2:90:D0:7E:9B:C8:08:01:19:97:50:77:CF:23:FD
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 01974D7C278572D24AA840E1A6CEFA4CB732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 03:01:11 +0000
Manifest this update: Sun 08 Jun 2025 03:01:11 +0000
Manifest next update: Mon 09 Jun 2025 03:01:11 +0000
Files and hashes: 1: MxdOOGKjf3TwBVC6lvhNhwB4_8Q.roa (hash: 5fj9W4zcJFTLUMtVyudn5yxVF316NgWFNmNlngfvVcI=)
2: dDjpKlcdmauXOkT6m9CWK4-kpis.roa (hash: G6ujxWSW0sYQE7gy/Nuu88UGg9rwT78FpEnJjrgOwo8=)
3: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: jHjgD+jNGIWeqkXRtRzX5A9UZoKki6zCtVnpi2jdDFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:27:85:72:d2:4a:a8:40:e1:a6:ce:fa:4c:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Jun 8 03:01:11 2025 GMT
Not After : Jun 9 03:01:11 2025 GMT
Subject: CN=8a4da427feb290d07e9bc8080119975077cf23fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:f4:19:68:d8:75:bd:df:bd:40:c0:c5:31:
fa:9f:0b:02:67:30:b2:75:8c:ea:72:53:a0:99:6e:
11:3d:b4:ec:df:c0:a0:62:49:c4:cd:77:55:ec:b7:
c2:08:e9:b9:4a:f1:ad:5f:25:2c:62:ae:14:53:30:
ee:69:73:87:22:50:02:40:db:58:2f:a6:1a:c0:b5:
67:44:a4:a4:fa:05:2d:8f:70:dc:33:34:4c:cf:42:
8d:5d:89:f7:e0:2e:8c:8f:a3:18:81:d6:6d:64:ef:
8b:b9:12:09:d6:85:49:b1:7b:75:d7:60:9b:ef:c0:
3f:fc:0d:ba:a6:3b:c5:15:bc:5b:c3:77:66:b4:35:
39:60:38:66:24:32:77:af:7a:5e:8d:bb:f9:1d:77:
f5:49:9f:f5:40:75:23:fe:69:0d:e9:ad:e0:51:cf:
e6:75:12:97:97:5b:4f:21:15:56:67:0a:e7:8e:f0:
cd:47:af:bc:3a:46:86:8f:08:98:e4:1c:06:bc:f6:
b4:13:b2:00:bb:2b:85:dc:30:8c:62:23:d7:b8:64:
cb:4b:07:d2:1c:a5:c2:bb:37:c6:e1:50:d1:91:24:
f7:fb:11:a7:57:35:fe:92:75:a7:40:89:f9:0c:62:
5a:9b:d3:66:51:18:e8:78:52:54:90:3e:56:0d:82:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4D:A4:27:FE:B2:90:D0:7E:9B:C8:08:01:19:97:50:77:CF:23:FD
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c5:8f:76:c1:13:21:13:d1:59:0d:4e:3d:fc:8d:2a:e2:87:
70:39:88:e0:f6:44:8b:26:98:f6:ec:ea:d4:eb:24:9b:d8:1a:
35:0a:cd:b8:6b:96:63:37:8c:ee:0d:b8:7b:7c:39:83:91:2a:
1b:08:fa:0d:95:f2:6c:4b:1f:6d:67:47:34:a4:14:66:d7:7c:
84:80:db:4d:20:c6:c6:78:4e:a4:47:ac:c7:56:30:6c:ee:35:
21:5c:3a:84:6f:55:f2:d8:e5:0c:c2:09:6c:e1:5a:40:bd:e4:
0d:08:ab:d4:b5:01:1d:94:d5:c3:9e:4b:0c:3a:37:43:79:61:
77:25:46:a9:c4:c1:24:d3:62:42:8e:79:de:b8:c2:0f:52:76:
65:44:6f:3c:b7:33:ec:47:99:1c:1d:8f:04:54:4e:e5:e3:65:
7d:34:0e:bb:b2:73:f0:ce:31:fb:60:2a:51:fb:6b:3e:fe:de:
d5:d4:10:0b:f6:46:5c:4a:08:f0:de:d3:71:45:e0:16:2d:98:
4a:f5:39:21:72:2d:0e:93:5b:6b:65:98:ea:3c:1f:c4:06:ce:
df:5d:1e:e4:fe:a5:67:56:2f:90:e9:16:d9:23:5f:8e:3f:c3:
fd:ee:4c:e9:68:93:c5:7f:f0:80:08:73:0d:a4:39:7f:75:4d:
49:3c:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:53 2025 by rpki-client