Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: roV8Sq+6YVMqO3pn+4NV0ZXBFCSPxO1SvXK4V1XMZE0=
Subject key identifier: 0C:8B:41:B3:58:61:55:69:F1:00:E2:E8:FA:CE:7F:81:2D:89:89:20
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 01975BDCD82DE8F9E849BB47CF0B65B5919C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 034E
Signing time: Tue 10 Jun 2025 22:01:29 +0000
Manifest this update: Tue 10 Jun 2025 22:01:29 +0000
Manifest next update: Wed 11 Jun 2025 22:01:29 +0000
Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: rzojFU+vWZmbKfrW7xTMZRHaMMKeqwecRXxAoBA8FlI=)
2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:d8:2d:e8:f9:e8:49:bb:47:cf:0b:65:b5:91:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Jun 10 22:01:29 2025 GMT
Not After : Jun 11 22:01:29 2025 GMT
Subject: CN=0c8b41b358615569f100e2e8face7f812d898920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:02:83:b9:5b:25:d5:5e:61:c2:c6:45:93:
2e:8c:3e:bb:60:76:75:39:54:ae:ad:7a:0d:71:61:
8d:19:2a:ce:3e:ef:c1:b5:67:11:40:e7:05:d8:07:
50:14:a4:75:9e:64:df:62:bb:a4:47:79:3e:74:dc:
2d:6a:31:9e:ec:68:1e:ed:9e:98:7f:1a:48:dc:3f:
0f:c6:95:0f:bc:d6:ef:f2:5e:e4:37:6f:08:f7:11:
6d:2b:41:39:4c:86:41:4b:d0:b0:4b:56:93:35:56:
84:90:26:99:9c:af:59:50:b9:4d:60:b8:e8:87:9a:
a6:f3:d4:63:f3:49:1b:a7:c5:af:c5:63:c0:42:85:
a6:d0:ee:67:c6:3e:65:40:02:6b:70:cc:12:99:5c:
5a:4a:91:51:0d:a2:ba:59:a4:e4:bc:be:68:1c:3d:
9c:c7:05:9d:92:a3:c6:c9:f3:89:41:47:74:da:26:
40:d7:4c:84:da:ea:ee:22:89:46:48:9a:d6:c8:7b:
4a:c6:9d:be:e2:22:a2:d9:d4:98:99:91:68:d4:97:
b0:ec:15:46:0d:44:f5:e5:ae:7e:91:e0:97:01:da:
03:d1:3a:f3:8d:29:70:6e:59:50:b8:c8:0a:8e:0f:
a3:38:22:ea:16:c6:0b:c6:35:c1:9c:89:c7:be:e3:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8B:41:B3:58:61:55:69:F1:00:E2:E8:FA:CE:7F:81:2D:89:89:20
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2b:be:39:39:34:51:da:72:dd:0c:dc:fd:ad:a5:e3:28:eb:
e2:c7:a6:3b:e2:f6:2f:46:26:1c:ba:ac:b8:44:47:04:cc:82:
b6:8d:85:d4:1f:1e:76:e7:c9:a5:42:c6:1f:c1:82:51:d6:a7:
06:8b:4e:17:be:16:13:cb:f8:bf:f9:1a:58:eb:55:da:9c:f5:
0b:f0:e5:a3:df:32:89:a3:86:2c:21:7a:ec:84:ff:bf:61:c7:
b2:f6:9b:c6:4d:f4:db:75:e1:f7:35:f0:da:f5:15:46:08:b9:
1a:77:7c:92:d6:d0:5b:e2:30:32:17:d4:38:74:82:2c:7c:bd:
54:4f:e7:9f:c0:cb:2e:4b:53:34:d9:ba:f8:68:97:a0:7f:74:
0d:8a:c9:a1:5b:46:41:58:27:2d:c1:cf:28:3f:63:22:68:07:
e6:da:32:37:fa:5b:27:23:1d:62:33:67:bb:23:62:6f:9c:68:
98:ae:2a:19:e1:5b:00:f3:5b:82:c3:85:de:cc:e3:53:9a:e4:
f5:75:5b:d0:a8:5a:21:93:2b:69:8b:6e:e4:6c:01:6a:67:73:
e3:67:b5:c7:d0:61:c0:9f:15:ce:a2:12:53:12:7d:1e:1c:c7:
22:34:af:5f:c6:ff:66:13:ad:df:36:0f:09:3c:c4:95:b5:99:
0b:8a:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:54:45 2025 by rpki-client