Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: VvJA3usrBAolkFmt1T+QmwAuwVnWHFJhVUAWQqsmuc0=
Subject key identifier: AF:C4:34:D5:3A:32:15:B2:16:3A:85:2B:45:EC:04:39:E6:E6:3B:D6
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 01974E8E481955E540312056A874AF3BE19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 05B5
Signing time: Sun 08 Jun 2025 08:00:36 +0000
Manifest this update: Sun 08 Jun 2025 08:00:36 +0000
Manifest next update: Mon 09 Jun 2025 08:00:36 +0000
Files and hashes: 1: 8072Aeh0vfDGSJ8vyXnId-hQKJc.roa (hash: 5j4g+dxrUkP8XBx9ZA5/gKCWYOvbCcLIrcUnkZa+hD0=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: iKUOSi2Ijk80bPXAaQUb8DjVeghPxc1ONXPjNZXbuqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:48:19:55:e5:40:31:20:56:a8:74:af:3b:e1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Jun 8 08:00:36 2025 GMT
Not After : Jun 9 08:00:36 2025 GMT
Subject: CN=afc434d53a3215b2163a852b45ec0439e6e63bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:af:8f:ec:01:73:21:76:77:42:de:17:be:
b6:1b:9e:54:db:88:62:bb:e1:b7:d2:f9:2d:21:1e:
dc:cd:84:d0:8c:ef:e8:65:03:41:5d:bc:a9:bd:06:
d4:33:39:bd:70:4f:7c:a8:9c:cc:be:7d:62:fd:24:
24:a3:cf:32:8f:a5:8e:84:23:10:bd:d9:8b:fe:8c:
cc:9e:d4:84:8b:62:cd:ad:88:54:37:66:3a:5b:d5:
a9:98:d5:40:f5:e5:09:9e:ae:ec:54:34:ed:17:2e:
7f:87:e7:ee:4d:6b:ac:b4:c5:3f:b7:a2:cf:90:75:
90:20:c5:9c:8b:9e:e4:87:ae:2c:65:39:d3:3a:6a:
9e:75:58:7d:90:02:dd:e5:08:52:c7:ed:aa:68:40:
8a:54:cc:84:44:1b:d3:bb:cd:e1:6b:c2:5c:67:bc:
22:b7:bf:53:df:f2:e7:d4:f5:b0:eb:ca:26:4c:58:
b5:7a:78:34:69:fc:04:b3:50:41:e9:71:de:2d:be:
0e:20:44:a0:79:35:5f:d4:ba:e8:36:8d:94:04:07:
58:8b:69:98:a5:3e:d5:9b:6d:d0:32:5a:5a:5a:a4:
46:f7:4e:f7:7b:cd:90:e2:0a:15:70:a5:a5:05:6a:
3d:14:18:25:fb:c9:e4:e2:33:0f:ec:6d:cc:0f:bf:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:34:D5:3A:32:15:B2:16:3A:85:2B:45:EC:04:39:E6:E6:3B:D6
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:88:6a:d2:3a:29:55:00:4d:6c:0e:57:41:f3:0c:08:90:cc:
d4:06:4f:58:ac:e9:85:c0:89:e2:d3:9f:17:66:8b:ba:31:04:
23:ba:69:26:3b:f4:1f:1b:e9:48:25:1d:9c:0a:6f:25:3a:f1:
86:5e:47:2e:43:a0:6f:a3:04:f1:c2:d1:d0:73:cc:9f:42:47:
93:20:35:6c:66:cd:97:7a:a8:c5:91:72:b8:80:ec:15:b8:34:
c1:96:4e:3e:6b:17:d6:04:a5:be:72:a7:06:a2:a7:58:a4:6f:
45:85:41:53:93:05:67:f2:5d:e9:bf:99:73:69:e3:b6:e9:51:
cf:85:1a:24:70:08:de:37:a7:37:e7:66:01:b6:8f:5f:16:97:
5e:0d:35:12:a5:a7:51:55:e1:22:07:86:a7:ec:53:79:5b:82:
79:8b:5a:eb:c0:9e:7a:8c:6a:33:3a:79:26:bf:ac:c8:37:1b:
a9:24:1f:d0:c4:54:07:39:54:03:a7:64:31:62:b8:1f:5b:4e:
bc:f7:98:80:92:84:35:a5:43:ab:1f:82:17:5e:38:74:0b:59:
43:2e:93:49:3d:56:a6:22:2c:88:93:f1:92:71:79:d7:01:b2:
da:f3:e2:59:2b:91:9e:e5:0d:63:ee:49:ba:91:23:3d:60:74:
bc:a7:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:54:42 2025 by rpki-client