Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
File: oInHIR6wy6D9k84xaziVOM4aywA.mft (raw, json)
Hash identifier: g7PxOcvxu3MS3WTXQ/tZYd6bQ06x1DrOMFIgcN+oULo=
Subject key identifier: 04:D6:DC:36:EA:9B:C8:7F:C3:BA:C9:BF:6D:1C:59:EC:D7:BB:20:45
Authority key identifier: A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
Certificate issuer: /CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Certificate serial: 0197530FDE3004EBB6A17A54C5758D0FC315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
Manifest number: 0DF1
Signing time: Mon 09 Jun 2025 05:00:38 +0000
Manifest this update: Mon 09 Jun 2025 05:00:38 +0000
Manifest next update: Tue 10 Jun 2025 05:00:38 +0000
Files and hashes: 1: 07n12IDxKPAxIxs90Uxv2kiE_p8.roa (hash: onmuGRswCBPJXmNtk3krWUPKECPDIYJbgKGbyF0Mw3c=)
2: oInHIR6wy6D9k84xaziVOM4aywA.crl (hash: eQK6ViBKFCPoapurpuOPO9UW+1HXocfIingHJqdEq64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:de:30:04:eb:b6:a1:7a:54:c5:75:8d:0f:c3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Validity
Not Before: Jun 9 05:00:38 2025 GMT
Not After : Jun 10 05:00:38 2025 GMT
Subject: CN=04d6dc36ea9bc87fc3bac9bf6d1c59ecd7bb2045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:b2:d3:fa:ca:55:34:5a:52:90:e6:fb:7e:
a2:a0:a0:d9:18:b2:8b:f1:33:3a:28:bf:88:47:24:
41:d0:67:c7:dc:1b:87:b9:cf:0f:5f:95:fc:19:b1:
f9:fd:0d:b7:65:ee:6d:50:2d:30:a8:90:aa:73:9e:
c8:42:4f:28:9a:88:b4:22:d4:97:6d:66:b8:51:a5:
f3:7e:dd:6e:85:c5:08:d1:32:f5:96:56:cc:8f:29:
dc:8e:c9:c5:47:85:9a:62:b0:63:d4:e8:af:07:de:
11:92:25:f4:c9:06:89:f7:02:27:95:ad:1d:19:cf:
fa:bc:a0:d6:b1:cc:b1:5b:06:e4:05:0e:c5:5f:db:
dc:b0:fc:c1:d7:bc:3b:6a:71:f8:23:94:30:68:82:
df:7b:09:58:2d:a9:7e:45:85:27:e8:14:19:0f:ad:
8b:27:1c:fd:9f:bd:10:45:84:70:db:af:01:48:d3:
a6:b4:81:2d:02:24:6d:f9:b2:07:26:2a:55:d9:fc:
5f:64:07:b3:a7:52:9a:b8:a7:bc:01:b1:f4:d1:7d:
69:6d:c5:da:e0:79:c0:21:97:b5:e1:eb:48:12:81:
97:0a:fe:9b:67:9f:12:48:32:a0:b0:0c:38:c2:76:
b4:52:1b:c4:31:8e:41:d4:94:6c:9e:5a:9c:61:9e:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:DC:36:EA:9B:C8:7F:C3:BA:C9:BF:6D:1C:59:EC:D7:BB:20:45
X509v3 Authority Key Identifier:
keyid:A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:de:06:25:10:9f:23:76:f6:23:d8:b5:59:a2:6f:cd:44:36:
8a:5b:82:6d:1a:7c:a0:e1:f2:8f:ab:07:cf:24:54:62:ec:f4:
46:9c:7a:4f:b3:b2:3b:cd:5d:68:0c:33:0a:a7:62:50:84:48:
c9:52:8c:e4:41:2e:0e:df:4c:3a:3d:e3:a1:1a:bf:7a:33:5a:
d6:b5:a1:49:f2:f2:32:3d:76:30:48:55:43:4d:de:bd:e0:30:
c3:52:ba:bb:a5:00:2e:1d:72:90:db:c4:05:43:37:b1:ae:15:
5d:d3:23:5e:17:72:9b:be:7b:6b:8b:3e:b4:02:f0:93:d6:9f:
dd:9b:26:db:e2:0e:70:a2:76:19:e8:c2:11:85:db:f5:9e:a4:
31:9f:6d:f2:bf:1e:55:86:2c:17:a9:6a:0e:01:7e:52:ae:a4:
04:8f:23:73:85:1f:ce:2c:25:03:d8:f6:e1:f1:94:25:40:de:
dc:1b:be:25:8a:98:0b:28:76:cc:22:b8:42:1b:a2:c1:e5:eb:
69:98:9f:f8:3e:d1:00:c9:90:0f:8b:f3:9a:e9:0a:cc:3c:d5:
82:a5:22:4e:aa:e9:72:e0:60:0a:45:6d:56:7c:f1:1a:25:9e:
63:b0:b3:f8:3a:87:00:ae:e7:04:df:63:b4:34:f8:c1:da:50:
dc:e0:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:39:43 2025 by rpki-client