Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: qbZdE14h6vZy4jp3wT0tuHhUbbOwAuGZk8TA4RtNMBA=
Subject key identifier: 2F:35:03:84:9A:99:E0:25:00:70:65:E0:55:30:34:30:22:60:6E:B6
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 01975DCB2A9BDF8577AF6DCB225FE4D78B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 034F
Signing time: Wed 11 Jun 2025 07:01:25 +0000
Manifest this update: Wed 11 Jun 2025 07:01:25 +0000
Manifest next update: Thu 12 Jun 2025 07:01:25 +0000
Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: KS0baYcd/NQzjibBzb/7U042h44FP+moDURQY+0P2Fc=)
2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:2a:9b:df:85:77:af:6d:cb:22:5f:e4:d7:8b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Jun 11 07:01:25 2025 GMT
Not After : Jun 12 07:01:25 2025 GMT
Subject: CN=2f3503849a99e025007065e05530343022606eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:de:a9:8a:31:1a:56:a5:44:b7:35:8f:56:
fa:a1:28:b3:9c:f9:51:2c:1d:70:65:3b:63:85:b2:
a7:c4:8d:7f:0c:cc:af:3c:05:35:06:07:ec:91:84:
46:12:26:6a:e8:d3:1f:3c:27:43:f4:76:81:35:2f:
ea:49:fb:37:66:9c:ec:6f:07:a9:40:37:66:04:e1:
9e:00:b3:a3:15:f8:f8:9f:6f:be:99:0a:09:cb:f9:
8a:44:a6:48:7b:f7:79:c7:5f:b0:15:8d:bd:6b:23:
57:70:5a:8d:04:bf:1b:b5:23:56:27:dd:40:fc:56:
a8:8d:a7:00:f4:79:77:e3:d5:e5:65:57:70:6d:ee:
89:6f:f5:88:c1:ba:1f:ca:05:bc:a8:b3:99:07:01:
8f:30:61:af:14:d8:d1:de:b5:e8:57:c6:f7:ce:2e:
a4:d2:4a:34:8d:49:c6:df:96:63:23:de:71:7f:9d:
73:1f:a0:03:c2:ae:f4:8e:18:43:89:12:93:c2:08:
81:7d:cf:9a:1b:0c:af:47:71:2f:2b:71:af:16:c3:
cf:ad:8a:24:06:1b:a8:6a:36:58:fb:34:fb:3c:28:
2d:5b:6d:f2:a5:c2:75:66:15:ac:0e:52:35:92:3b:
87:21:32:ec:4b:fd:32:37:30:23:e0:5e:1c:20:56:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:35:03:84:9A:99:E0:25:00:70:65:E0:55:30:34:30:22:60:6E:B6
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3e:bb:b1:de:06:a2:6c:a2:d2:47:25:b7:28:b4:cf:5f:1d:
77:df:76:cd:d4:bf:d3:1c:10:5f:16:9c:fb:08:f8:09:f6:32:
9e:e8:79:10:87:7a:16:ae:38:1c:f3:43:5f:37:2c:6c:14:a6:
a6:81:3e:16:07:e0:2e:e2:f6:79:8a:99:51:40:e8:cb:d9:21:
0a:ca:14:52:b3:8c:be:15:16:3e:b4:61:be:46:e7:3e:f4:ba:
33:a8:d3:6b:93:e6:0e:df:ee:0c:60:8f:fe:83:b3:27:2f:a0:
59:df:a0:5f:14:b4:7c:c6:d7:9d:16:ae:2f:9e:dd:01:fc:65:
86:1b:59:5a:3f:38:b0:ae:22:cc:c4:af:2f:60:ac:9c:3e:8d:
f3:94:05:01:a2:95:33:53:23:0a:2c:b7:88:c0:d1:27:a8:82:
5f:45:9e:df:7d:3c:f8:13:8e:2d:14:f3:7c:57:e8:f0:07:7b:
43:3f:eb:55:05:58:9e:92:3d:6d:8d:1b:f0:b5:5e:e8:c3:b0:
4b:da:69:09:95:8b:21:8b:59:dd:2b:44:2d:64:f4:89:2a:bb:
61:97:61:46:39:f8:41:9c:5b:08:ea:26:13:4e:1c:78:3d:db:
e1:e7:74:5c:93:de:9f:c0:47:c0:c1:5d:ab:2b:25:51:76:6d:
a7:e9:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:03:55 2025 by rpki-client