Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: oj61WJpPJTF9tvwbHjyYFNfIFGrAYpQYwiELVEdVTBQ=
Subject key identifier: 29:FF:75:A6:A3:2F:63:5C:B7:6D:43:8E:1A:EC:B2:12:CD:25:F4:0A
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 01975EA645A2FA33543F94713B2B55CE8D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 116A
Signing time: Wed 11 Jun 2025 11:00:44 +0000
Manifest this update: Wed 11 Jun 2025 11:00:44 +0000
Manifest next update: Thu 12 Jun 2025 11:00:44 +0000
Files and hashes: 1: 3oKx6h0eBr3yZ2nfockvN65K1_o.roa (hash: geWao+6sgTP3cLFpfRuFIKY1lyLCLqYJA9Pcg4p46Gs=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: 3gLrrVJx1zQ6WmynO6sWQb8XXHZgs3DRuml8j4x3un4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a6:45:a2:fa:33:54:3f:94:71:3b:2b:55:ce:8d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Jun 11 11:00:44 2025 GMT
Not After : Jun 12 11:00:44 2025 GMT
Subject: CN=29ff75a6a32f635cb76d438e1aecb212cd25f40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:a3:78:71:c7:f3:f2:f3:9f:e5:db:53:99:
be:a7:ee:bb:34:3a:a2:78:a6:64:d1:a0:eb:df:df:
fb:ec:18:f9:b6:aa:ad:83:84:99:2d:78:cb:c9:0e:
31:e7:17:ff:78:d2:62:0d:c4:5d:79:65:c3:53:dc:
71:47:45:36:a8:55:fe:43:fc:b1:f5:3c:d8:f8:d3:
e0:6c:1a:66:11:45:47:b6:1c:9b:29:68:95:3d:76:
b8:f8:79:20:a8:84:22:98:b2:db:11:62:72:d8:91:
c9:ad:1a:f5:0a:e9:c1:71:92:ed:10:56:6d:56:eb:
ea:4d:ea:c9:79:ef:25:ed:3d:02:32:aa:2e:5f:9f:
27:59:34:72:0c:e6:b5:61:d8:91:0b:86:77:d9:93:
b5:3e:90:78:35:e5:a7:29:f6:26:88:65:7f:87:07:
ff:de:30:27:f4:c4:7e:a9:63:3b:80:3d:04:bb:6b:
cc:4d:41:e9:86:c8:19:d2:cf:cf:f1:8b:ae:6d:8a:
5e:d1:1d:f0:a1:27:0d:a9:17:bf:cb:98:2f:41:c9:
e2:8d:3a:e4:6f:0e:d3:4a:26:ea:2f:44:5f:e4:e2:
60:01:92:74:df:1e:8a:f9:43:59:20:53:2f:84:34:
a8:0d:a3:b7:f5:c0:1d:a8:68:c7:6e:17:69:9e:8b:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FF:75:A6:A3:2F:63:5C:B7:6D:43:8E:1A:EC:B2:12:CD:25:F4:0A
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:63:21:fc:33:9e:16:a4:34:ac:2b:9e:c5:a7:1b:c3:4c:d0:
c1:a6:54:3c:7c:7e:c6:23:57:7c:3a:a4:7d:c0:0d:4c:c0:21:
79:b1:cc:40:8d:d2:cd:03:79:5d:cb:fa:46:2d:7b:cc:79:80:
96:18:18:fa:e3:dc:29:3b:9b:4e:5f:6a:e7:60:27:7f:29:b7:
26:84:90:b7:80:0e:dc:9d:7d:1b:92:35:97:7e:1b:1b:d1:d4:
29:c7:82:51:c4:f1:87:5a:54:73:ea:73:aa:bb:02:c9:20:e0:
a7:6c:62:7e:ab:bf:66:38:83:4b:47:ef:c6:ce:14:c1:b8:0d:
f8:3a:54:80:cb:19:5b:ca:b2:c2:e9:c1:85:6c:21:db:62:87:
28:61:74:6e:9e:c4:8b:c1:bf:6a:66:d9:67:69:bd:4e:29:d7:
43:bd:8c:a1:fb:c7:7e:d2:4c:d4:f0:28:75:60:a5:14:b4:0b:
15:f8:51:14:b8:6f:72:e1:98:6a:26:4a:66:f1:24:46:9b:eb:
e1:50:b9:ff:b0:48:dc:c4:65:92:2a:c6:0d:fc:04:3b:db:c2:
5a:47:10:a7:8a:57:d1:34:0c:b3:02:12:e9:8d:ef:ad:ce:3c:
d2:ab:24:cb:e9:f7:27:b4:3b:ab:93:84:5c:b4:55:c5:06:3b:
9e:6d:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:57:48 2025 by rpki-client