Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier: uUmDQ5Q4WiOmYbv2Gr7NeBlX2xEQUm5IQNJIy5gKOxM=
Subject key identifier: 56:F2:61:EE:B0:F2:47:21:1C:39:5F:8F:5F:68:2D:24:C4:A5:BA:D1
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 019749314642093421F51CD1ED308AE8CEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number: 0DB7
Signing time: Sat 07 Jun 2025 07:00:55 +0000
Manifest this update: Sat 07 Jun 2025 07:00:55 +0000
Manifest next update: Sun 08 Jun 2025 07:00:55 +0000
Files and hashes: 1: WVEl02tR4FpSWGE0ahJdvTx1Yno.roa (hash: 5NNyoAtIIwqGJh3NNq7YS6x3xdzErX6ICXLZ0eVA/9g=)
2: Z259DsTig8t3A9cd7HAu8mMPpR0.roa (hash: JRmS+LkkqmTVluxufvzadoY4Pc8kUr0Ok9oaH67NvH8=)
3: _ltzxuGkz6znSaa7SgLi6XMBftU.roa (hash: +kNXhyoqNb3mbEFSERmsDLNGdx3dBqclzBGCcZo07A0=)
4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: hPPVvC3lCv/p2Tt9gbJTblUWOPGDEAwgrxI3opz1Mok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:46:42:09:34:21:f5:1c:d1:ed:30:8a:e8:ce:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Jun 7 07:00:55 2025 GMT
Not After : Jun 8 07:00:55 2025 GMT
Subject: CN=56f261eeb0f247211c395f8f5f682d24c4a5bad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:5c:c0:d0:ce:80:c8:c1:41:ff:16:f8:f1:
7b:0b:5a:54:c6:42:21:6d:a5:c8:62:25:ed:db:b4:
8b:19:b1:c2:ae:6c:7b:2c:49:8f:2d:1f:52:c4:a3:
14:45:00:89:3f:4b:ae:49:f5:5e:d3:ad:19:cf:36:
db:9f:db:aa:0f:d8:ad:4e:25:05:46:2d:c2:5a:42:
ac:4a:2a:a6:2e:73:2d:b0:fe:9a:d2:a9:08:b6:69:
1b:54:6d:c2:00:06:db:5d:1e:23:84:2a:f6:7a:5c:
c6:cc:8a:71:1e:9c:14:f6:70:15:e9:49:9f:7b:27:
55:c1:48:13:71:57:22:ef:92:96:bb:96:b4:a7:c8:
f1:1d:12:d1:93:a0:36:7e:74:49:15:3c:83:85:80:
38:dc:32:70:a1:c8:3a:55:8f:0c:25:66:b0:a8:0f:
b6:08:88:aa:33:76:df:42:e6:1c:04:e3:95:6b:0a:
a8:a0:94:16:97:84:f6:4f:6d:89:a1:06:3a:23:93:
fa:11:ba:f5:da:ef:8d:b1:87:81:01:92:a7:35:eb:
5c:81:a6:12:db:25:58:b7:04:85:33:eb:2f:36:23:
2a:c0:91:95:48:65:0f:78:71:60:6c:fc:2b:87:99:
8e:3f:f9:19:24:3f:f5:bb:7e:e4:c4:2d:fb:7d:fb:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F2:61:EE:B0:F2:47:21:1C:39:5F:8F:5F:68:2D:24:C4:A5:BA:D1
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8f:66:77:31:25:89:2e:92:95:ad:ab:6f:bb:f4:63:5c:83:
ff:6a:d2:bf:9d:15:a4:f8:3f:1c:e5:f3:d5:bf:9a:8d:ff:5f:
61:5d:f7:6d:b1:14:2c:c0:6c:4e:24:b4:03:95:24:a4:19:36:
df:56:35:4d:23:40:32:b6:b5:fa:44:bb:ee:1a:23:88:2b:6e:
6d:66:bc:d7:4c:77:df:86:74:10:fe:7c:16:05:07:87:74:80:
3b:25:12:f4:85:03:26:dd:c6:48:88:7d:d2:1b:1f:53:53:94:
a9:5b:ca:ab:7d:a6:21:a4:de:53:70:32:d3:c9:e9:8a:b6:18:
c5:db:85:62:f4:1c:5a:c0:14:ee:87:cf:f6:3d:94:c8:3a:8c:
56:d4:d1:6f:71:ac:fc:58:22:71:b1:8c:43:4d:97:69:66:4e:
de:6a:d3:8a:b6:78:42:45:65:44:d0:2b:25:0f:77:b6:a1:2e:
3c:89:ae:ce:bb:eb:4d:f4:14:91:7c:bd:a1:d1:fc:11:f9:3d:
81:da:3a:c9:f3:a3:94:eb:32:de:cf:e4:59:37:73:1f:03:cc:
d7:c1:09:12:e8:74:fb:5c:48:c6:9e:6a:9a:54:ba:89:13:e1:
d5:69:4c:c2:6f:9e:b0:77:d7:36:14:ad:a1:9b:60:1a:82:43:
53:ce:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:39 2025 by rpki-client