Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier: oKgSKd6Qfb+9fJ5BxtixBOi5k3gDOYQVSVe9SCyvVNg=
Subject key identifier: 35:D2:7E:07:82:45:D1:4F:CB:F0:DF:05:A1:58:D8:92:4A:16:28:10
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial: 01974B1FBA33D37A033837DE1E8C195558D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number: 0FB3
Signing time: Sat 07 Jun 2025 16:00:59 +0000
Manifest this update: Sat 07 Jun 2025 16:00:59 +0000
Manifest next update: Sun 08 Jun 2025 16:00:59 +0000
Files and hashes: 1: SK-KQGjpFxAKGGZG9gSs78w75A0.roa (hash: /f4qVORCandIpf7G2G6ex0CoHR+bR91wiJ0+KeMblkM=)
2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: I6QBUYi5phftNxm4R0jS0uMIRZPyE5T90sSRgVzQU4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:ba:33:d3:7a:03:38:37:de:1e:8c:19:55:58:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Validity
Not Before: Jun 7 16:00:59 2025 GMT
Not After : Jun 8 16:00:59 2025 GMT
Subject: CN=35d27e078245d14fcbf0df05a158d8924a162810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:73:93:0a:84:35:d1:c7:84:e4:51:db:b7:
2f:35:b7:25:a2:04:5a:d0:58:e5:24:5f:7d:96:51:
3e:2b:e6:26:eb:44:ea:8b:02:f9:8f:c3:f4:f4:06:
71:1a:f7:ac:e4:93:52:dd:50:d1:6d:b5:f9:d3:ff:
cb:1e:32:ba:f4:e4:fe:fd:b2:cf:a6:85:64:2c:df:
6b:10:4c:82:1f:65:bb:47:72:7a:ff:a2:9d:ed:69:
21:91:f6:5e:01:8d:8c:33:1b:e9:54:6f:84:6f:ea:
cd:ae:27:46:41:6e:46:00:e1:dd:c3:71:03:9b:ae:
71:34:9d:d3:f6:84:ef:db:7d:d6:e7:de:79:fd:2a:
f7:14:37:50:b7:0b:d8:62:f9:14:98:40:bd:ce:5f:
2e:f5:41:67:ff:66:0e:62:ef:43:4a:09:37:9d:e3:
63:76:78:09:29:83:d2:a4:27:c1:06:2b:44:28:db:
49:51:7b:dc:42:b9:1c:9b:f8:d5:10:27:5f:f6:c2:
e0:80:a6:4c:ee:f9:6c:b1:e8:4b:2b:24:87:84:40:
a4:79:62:d8:a9:7f:ed:76:03:87:30:41:e1:f7:81:
1e:d1:76:29:ec:a2:dc:f1:2a:9f:4b:88:ef:8c:8e:
c9:a9:83:f8:1a:40:02:84:07:49:c8:5b:31:16:d3:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D2:7E:07:82:45:D1:4F:CB:F0:DF:05:A1:58:D8:92:4A:16:28:10
X509v3 Authority Key Identifier:
keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:2c:62:51:38:ae:22:d4:30:16:b2:54:44:a0:32:aa:26:
c3:0e:8d:e8:a6:bb:c7:af:e4:b2:66:fb:a9:c0:21:f7:07:24:
4e:72:7e:97:8a:b3:e1:c5:4e:1a:99:8c:4a:68:44:95:1e:fa:
4f:6e:8d:7e:d0:86:b7:ae:e3:71:d7:29:da:fe:4a:ca:a1:c6:
ba:97:1b:81:84:c1:43:4b:16:53:54:4b:e8:d6:b6:0f:6d:0a:
b3:cf:f5:35:be:bf:de:08:31:1a:70:99:95:62:e8:ac:df:5a:
29:58:ed:9f:30:4e:41:f2:22:11:ac:1d:e0:c4:84:05:c3:a9:
48:a9:e8:38:fc:ef:74:f1:ae:4d:5b:5b:f5:0d:21:4d:e1:e6:
97:f1:d2:3a:50:8e:e9:55:07:e1:56:f5:32:8d:f3:7f:28:a7:
a1:3a:bd:c0:ed:fa:01:41:e1:56:ff:3a:40:9e:70:0e:71:c2:
7f:bb:9b:89:6f:f9:9f:36:4e:49:9c:db:d4:df:5c:1a:65:bc:
49:00:4d:27:55:ed:f2:26:8a:4d:b7:dc:97:66:5f:1a:bb:ec:
29:04:97:1e:30:d3:4a:d4:ea:68:67:88:2d:ed:d7:9e:30:d3:
55:b3:50:9d:24:2a:0b:41:f0:5c:56:3e:94:36:54:1f:08:51:
5e:8d:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:07 2025 by rpki-client