
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: W5njPvngmCMobaPtEcldmx2j9X+NjNWaU4K9sliN3kI=
Subject key identifier: 63:70:28:21:3F:93:66:BA:5D:59:33:66:D8:0E:0D:26:9A:56:B2:41
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 01974A0C7E3C1529D77F2AAC34F34E27CBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 0E16
Signing time: Sat 07 Jun 2025 11:00:21 +0000
Manifest this update: Sat 07 Jun 2025 11:00:21 +0000
Manifest next update: Sun 08 Jun 2025 11:00:21 +0000
Files and hashes: 1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=)
2: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (hash: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=)
3: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: pazP9blIqTKySn37lr8bIDZ1mN+K5UxZw7fTmmnyybs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:7e:3c:15:29:d7:7f:2a:ac:34:f3:4e:27:cb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Jun 7 11:00:21 2025 GMT
Not After : Jun 8 11:00:21 2025 GMT
Subject: CN=637028213f9366ba5d593366d80e0d269a56b241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d4:5b:1c:61:2b:2f:f3:99:48:b7:34:18:dc:
19:20:aa:0a:c9:b4:1c:ca:5c:2c:88:ae:04:f0:a4:
77:43:83:a3:17:88:de:f3:8c:b7:4d:2b:11:0f:df:
ba:93:7a:e9:1f:75:a1:20:6c:54:ce:c1:6d:40:84:
fa:79:52:b5:ab:f9:ba:c7:61:43:d5:0d:0f:41:fe:
1a:31:37:55:56:88:8b:cf:c2:13:3a:5b:f8:71:c7:
62:9b:2b:e2:3b:6a:b8:89:8d:cd:82:a6:57:b3:2a:
bf:66:6c:7f:b4:46:cc:30:b1:74:cb:a5:ca:13:6d:
68:3f:7e:3c:a7:ea:87:6e:19:16:6e:f5:ea:eb:e0:
30:6d:d0:18:44:57:9d:e8:2a:d1:63:2d:80:ae:55:
a9:a1:35:1b:84:b0:65:b1:1b:97:a7:db:54:22:b1:
42:05:fd:aa:72:b5:94:7b:7c:e0:cd:8a:da:05:7f:
b3:20:7d:5d:d5:ec:9c:09:48:87:fd:d0:ba:a1:27:
fe:da:82:37:67:12:5e:20:72:c4:00:88:7d:68:9b:
f0:c2:4b:0b:20:da:53:ad:e8:23:20:6f:93:c3:3e:
bd:9b:01:ae:48:07:9c:1b:60:59:9f:94:40:5e:5a:
74:c6:85:f4:94:80:1e:d4:7a:a3:3e:d5:5b:e4:69:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:70:28:21:3F:93:66:BA:5D:59:33:66:D8:0E:0D:26:9A:56:B2:41
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:62:4e:da:72:19:f8:d2:40:0c:85:1b:17:06:9f:36:f9:c2:
75:a8:34:d0:af:55:85:f6:e2:8b:3a:34:3d:47:ce:42:6b:fa:
52:4b:4c:ea:0e:7f:ea:80:2f:7e:53:14:97:5c:e3:36:2f:10:
b7:37:96:1f:e0:f7:c5:a5:df:24:36:e6:14:f3:cf:99:ae:6d:
cd:22:7c:7f:d6:24:ac:d0:ee:58:05:1f:28:d8:88:27:29:06:
8f:1c:fa:7c:30:29:7f:fc:77:f2:95:3d:62:65:11:86:fb:48:
4a:93:ef:f8:5f:83:86:92:eb:22:28:fb:23:22:7c:3d:70:e5:
08:ac:20:ac:26:1e:29:99:fb:cf:de:a5:d8:9c:94:89:9d:3a:
87:90:dd:dc:2f:19:75:0e:3f:37:bb:91:d1:b4:4f:bd:e8:9d:
d3:b2:4e:bd:04:99:f8:78:9c:e9:b0:99:39:16:3d:3b:4a:e1:
93:68:c0:75:4b:0e:b8:99:f4:7c:f8:c1:54:c1:79:51:a1:c7:
59:15:33:f8:15:d5:7f:df:86:f6:6f:72:10:22:2f:e6:7d:2a:
9e:0e:7f:30:3b:4a:7b:44:8e:cb:66:36:34:69:d3:50:07:e0:
d9:eb:99:e1:52:5f:a8:ae:1d:2e:6b:ad:6d:18:b0:f3:5b:02:
9a:ee:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:37 2025 by rpki-client