Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: HTfgq7W7817ppzfVq6X6yXzyaud3jpzIrtp/n7eK0kY=
Subject key identifier: 15:72:35:5C:46:F1:71:D0:72:FC:43:86:41:56:8C:2F:11:83:6C:4A
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 01975235194176D238400551C5D9F83C10F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 077E
Signing time: Mon 09 Jun 2025 01:01:40 +0000
Manifest this update: Mon 09 Jun 2025 01:01:40 +0000
Manifest next update: Tue 10 Jun 2025 01:01:40 +0000
Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: HMJ0sdE0ZPqA8XNnV7G49KD5g53d8GVeuFb/c5whb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:35:19:41:76:d2:38:40:05:51:c5:d9:f8:3c:10:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Jun 9 01:01:40 2025 GMT
Not After : Jun 10 01:01:40 2025 GMT
Subject: CN=1572355c46f171d072fc438641568c2f11836c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:c2:ec:18:80:40:52:5b:be:9e:cc:5c:67:
be:ae:01:55:40:90:28:e2:ed:b5:ef:8e:9e:84:a0:
21:d3:48:c8:87:e6:96:bd:98:aa:2c:a1:c8:ca:37:
94:5b:d7:36:1a:5f:0b:62:6e:a8:c4:b3:45:63:e5:
c4:03:96:83:32:c1:93:28:2d:5d:ba:cb:e8:5d:fc:
d4:e0:7e:69:22:97:fb:ab:94:84:13:b4:28:12:ab:
5b:a7:03:57:f0:5e:73:b6:7e:d6:04:c1:02:95:08:
38:a8:e6:3b:84:5f:72:da:f4:53:fb:74:69:40:0a:
31:67:da:b9:78:86:93:44:8d:81:4e:ee:e0:bd:8e:
30:81:58:65:f1:d4:61:e0:c6:03:ef:f6:cc:f8:ef:
cd:73:d5:a6:f0:49:1a:8e:b6:48:be:96:4c:8a:3f:
7f:ee:e9:12:91:02:65:25:21:ba:f0:3f:6e:45:fb:
27:ed:c3:98:83:86:32:3b:a9:1f:b2:54:7c:2f:92:
2a:8e:5f:22:cb:29:bd:ca:69:48:2f:32:dc:04:e2:
28:ec:81:1e:60:8a:65:80:c8:a2:53:a2:1b:3b:76:
16:f4:4b:51:94:af:49:4c:1b:6d:2b:42:37:af:8b:
e2:54:6d:c1:50:03:50:f8:d4:f5:d1:84:1f:e4:64:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:72:35:5C:46:F1:71:D0:72:FC:43:86:41:56:8C:2F:11:83:6C:4A
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:35:dc:a7:a4:aa:11:43:e5:35:1a:35:ab:af:5e:ec:3e:d1:
93:00:1b:d4:20:de:de:3a:e1:c9:48:a3:c3:5d:36:62:96:b6:
0d:ba:63:f3:08:1c:3c:b8:97:f4:a0:67:33:f1:c5:f7:ed:b1:
9d:bc:c3:53:04:81:59:a8:4d:9a:d9:0f:f8:ef:29:fa:02:a7:
15:fc:5c:0e:55:ee:22:20:fd:6c:d6:ab:bd:0d:01:15:83:d7:
b5:db:19:10:6d:c3:1b:34:76:84:09:12:34:6f:18:94:4a:24:
a5:51:54:fa:5b:34:e2:02:36:2c:15:5d:0c:0a:02:5b:63:df:
62:e1:9d:95:a8:34:8d:d2:99:f5:ef:0e:a4:28:d2:cd:d1:bb:
33:44:b3:0a:0f:73:85:20:6b:54:33:3d:76:fc:bc:a6:09:7d:
b9:69:4a:e1:3d:31:5c:eb:6d:f0:38:68:66:ac:22:c6:4f:4a:
0f:95:46:47:a5:b6:0e:7d:79:fa:a0:f0:4b:6d:85:0d:f0:59:
4c:c7:fd:9d:33:dc:03:6f:41:85:7f:21:c6:a1:b0:ad:27:4e:
b8:05:ec:1e:76:de:7d:1b:4e:42:38:c1:3d:e1:38:ce:bf:73:
56:36:bc:90:2a:98:f8:0f:9c:69:dd:23:a9:24:26:de:87:e8:
8a:85:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:06:04 2025 by rpki-client