Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: GjJGJhs5VkgNV/o8GT7xs+DpbQuDOtNo46os5vnTQpQ=
Subject key identifier: 2F:06:D7:B4:84:04:C3:F7:10:E0:C8:71:AA:0B:63:1E:C8:D6:6E:BB
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019745C25961EAEA34541CE92823BD118E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0B9A
Signing time: Fri 06 Jun 2025 15:00:54 +0000
Manifest this update: Fri 06 Jun 2025 15:00:54 +0000
Manifest next update: Sat 07 Jun 2025 15:00:54 +0000
Files and hashes: 1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=)
2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=)
3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=)
4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: 0dP7vvBJor6oGvlGxpNXOYMZvKQexxch47YMQjKNxAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:59:61:ea:ea:34:54:1c:e9:28:23:bd:11:8e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Jun 6 15:00:54 2025 GMT
Not After : Jun 7 15:00:54 2025 GMT
Subject: CN=2f06d7b48404c3f710e0c871aa0b631ec8d66ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:ca:74:c2:1a:1e:a2:7b:e7:ff:c3:31:af:
f3:10:f6:13:ca:22:83:da:94:b8:ee:ec:66:24:28:
11:68:e9:42:65:d4:fb:5e:af:27:a2:0c:53:a2:57:
e3:a0:e1:86:a1:fb:1c:9f:09:55:d6:0c:ba:23:1c:
a5:74:51:17:e5:2c:21:30:ac:bf:55:bc:f9:a1:17:
88:2e:4a:ff:ec:7c:19:10:f5:8e:8d:75:a8:d1:2e:
4e:c6:2f:9b:f0:5b:05:80:16:0e:f4:ab:cd:16:3b:
f2:da:59:23:2a:b5:d9:c8:e4:95:66:fd:f6:4d:7b:
50:cf:d4:72:6e:c0:e5:d2:20:60:c4:c0:60:c3:90:
d4:cb:99:46:e7:55:24:1c:e2:27:87:af:a0:4d:89:
99:1a:68:99:fd:41:c9:2d:d3:8e:8c:f0:b6:4e:f0:
93:17:01:39:1b:89:24:e0:cd:26:d4:fb:4a:e4:6d:
86:69:47:b7:78:aa:8d:9e:8e:88:cd:c4:a7:f9:58:
a3:d7:7f:0b:ab:d5:b5:e1:b6:fe:60:33:9a:46:25:
a1:e1:fa:5a:d5:56:54:65:fa:51:09:d0:d6:63:98:
93:8a:04:1e:60:6a:2d:96:4f:e3:23:40:c2:98:c8:
b4:3d:c3:e5:d2:9a:b5:07:20:5e:99:86:1e:ee:9f:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:06:D7:B4:84:04:C3:F7:10:E0:C8:71:AA:0B:63:1E:C8:D6:6E:BB
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ff:da:d5:bc:ef:cc:b0:17:a2:53:b1:22:c6:43:0e:d0:1f:
c1:78:1b:e9:4f:2e:e8:8d:a6:e0:45:64:2c:04:24:d2:16:39:
69:2f:ad:6e:2e:df:c5:d4:a1:18:e4:09:33:64:02:17:30:7f:
58:37:80:29:f8:44:35:10:b6:77:98:13:f7:65:3a:f8:70:3a:
92:f2:a5:ea:f6:95:8d:38:f2:98:fd:2b:1b:ea:d4:f5:e6:33:
b2:08:25:85:a4:e7:2f:6d:0c:a6:e5:8c:66:75:cc:71:d4:db:
ac:5c:7b:c1:2f:ac:21:be:7a:ba:50:4c:97:f4:53:5d:9e:3e:
29:55:b2:45:ca:fd:4b:a6:89:eb:e2:b8:ef:eb:48:22:79:de:
28:4b:7f:f8:22:23:8a:8b:bb:a4:99:a3:c8:69:cb:a1:f9:4a:
e8:45:63:c5:a5:00:91:8e:31:94:77:30:18:0f:45:c5:73:b0:
b9:22:09:f4:05:aa:5c:f6:ee:b1:d0:bc:78:80:27:da:79:19:
13:a9:f4:c8:11:c3:ea:c1:53:f1:00:a4:bc:bb:42:a5:aa:3e:
31:db:d9:d8:8a:2d:bf:31:1c:62:84:70:f2:a6:c7:50:cb:1d:
82:3c:84:3d:c9:34:fe:25:ab:9d:f7:6c:a2:1a:38:8e:68:50:
1f:03:f7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:27:43 2025 by rpki-client