Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: QH9rYIkiY/9C/vpsuZ+czi22jQtzdYY0UQdQjfa1dp4=
Subject key identifier: 77:EA:02:CE:6E:2B:B8:D0:17:6B:AA:0E:F8:59:43:32:CC:7C:94:42
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 01974DE9C2341E25E0287A45D91B2342AB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 11CD
Signing time: Sun 08 Jun 2025 05:00:54 +0000
Manifest this update: Sun 08 Jun 2025 05:00:54 +0000
Manifest next update: Mon 09 Jun 2025 05:00:54 +0000
Files and hashes: 1: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: kJ8dduiahK0sodylKQjXg0I1/24Ia5I4GJteJ3q1s3k=)
2: uvI_GRIq2GyJoG31og82hOgTWrg.roa (hash: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:c2:34:1e:25:e0:28:7a:45:d9:1b:23:42:ab:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Jun 8 05:00:54 2025 GMT
Not After : Jun 9 05:00:54 2025 GMT
Subject: CN=77ea02ce6e2bb8d0176baa0ef8594332cc7c9442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:b6:3a:f6:f3:b7:d3:ef:21:c4:23:1c:b0:
b0:f1:a5:d2:3b:63:76:d9:71:03:c1:53:48:b3:24:
ac:df:68:0b:aa:a0:62:c2:ef:fc:57:90:eb:0f:3c:
c6:63:cc:95:11:43:89:7c:2c:20:5b:c4:1c:89:23:
d2:9d:77:f2:30:99:69:5b:d7:d6:4a:b5:50:11:f4:
08:43:17:dc:9a:8d:ac:72:16:f6:fc:f3:97:a6:e5:
5d:e6:9a:3b:f1:d0:0a:8a:95:d5:58:66:4b:65:08:
32:fd:52:37:c7:d0:a4:b7:9f:f1:83:bb:5c:bc:1c:
45:db:d6:6d:51:03:e7:ff:88:09:73:15:93:b1:94:
11:08:1b:92:80:28:1c:a2:ae:60:93:70:f3:13:8f:
94:e8:6a:d7:bf:2f:23:96:b0:5a:65:5f:dc:c5:ad:
d8:7d:2e:ac:83:95:cd:b7:9b:c0:fd:65:5b:b1:26:
16:6c:f0:da:3e:88:fa:be:29:1d:4f:02:2b:7f:3c:
9b:ce:14:86:af:31:76:25:6b:ee:79:f0:43:2b:0b:
94:ff:95:29:36:6f:b9:24:6d:95:ab:b2:2f:0c:48:
da:bb:60:d7:b9:b2:66:c7:c1:0c:49:35:91:fe:1d:
9e:21:85:df:a3:b9:87:c7:e8:da:a0:78:f1:cc:23:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:02:CE:6E:2B:B8:D0:17:6B:AA:0E:F8:59:43:32:CC:7C:94:42
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a0:3e:cc:24:97:15:b3:bb:c4:0e:c0:8e:b3:9a:48:22:b8:
73:5f:21:cb:0c:f3:f0:0c:f4:89:c6:f1:97:a8:85:56:8d:ea:
dc:2f:16:72:a5:73:d7:df:30:36:de:96:32:18:0b:84:2f:98:
43:80:51:a7:25:e5:c3:32:8f:ee:6b:ca:ab:44:58:2b:c1:c8:
8d:6c:7a:4a:3d:76:0c:cb:a5:8f:33:24:88:f5:28:53:24:c5:
20:d4:ef:4d:7f:e3:e6:82:69:0c:5f:f1:2c:8f:1c:92:6e:06:
04:2f:1d:76:53:85:28:9d:5b:46:e2:7f:48:3c:97:8a:e7:60:
37:3a:8e:4b:0b:dd:a0:5b:82:ff:36:a9:4f:53:02:33:e6:5f:
74:6b:39:2d:da:24:1e:83:78:1e:b8:f1:2e:c6:aa:49:9d:20:
d4:9b:86:2e:bd:d4:28:6e:aa:cb:f8:60:39:52:1e:df:32:d5:
0e:eb:f8:f3:11:75:d7:89:6d:49:05:4a:5f:14:52:0b:47:05:
c7:e9:9a:b9:ee:85:6b:57:e2:a7:6b:24:3d:06:a7:11:e9:22:
0d:fc:5f:63:c6:8b:e8:49:00:31:ba:98:87:d7:2b:23:2a:a7:
70:18:e2:80:75:08:47:a5:bf:51:ff:0b:d8:eb:a6:5e:f3:a5:
1c:3d:02:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:35:06 2025 by rpki-client