Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: ImNGaPqib2MFlkBDgHpsYQh/WMFq6G2vKe8ji8BiDFI=
Subject key identifier: 71:D6:DB:5D:49:C5:72:0B:45:3B:47:13:2A:3C:3B:F3:A3:60:7D:BD
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 0197398712FE45F7C3EA641205F781CB2B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 0EA2
Signing time: Wed 04 Jun 2025 06:00:42 +0000
Manifest this update: Wed 04 Jun 2025 06:00:42 +0000
Manifest next update: Thu 05 Jun 2025 06:00:42 +0000
Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=)
2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: SOpagMj+Yl1qXoKHtJU4Hxf3IRc4G21RenUyf3Iv274=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:87:12:fe:45:f7:c3:ea:64:12:05:f7:81:cb:2b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Jun 4 06:00:42 2025 GMT
Not After : Jun 5 06:00:42 2025 GMT
Subject: CN=71d6db5d49c5720b453b47132a3c3bf3a3607dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:43:98:c8:44:29:0c:06:67:04:86:8d:9d:
90:95:d0:62:37:2a:21:5b:d8:e5:18:82:b4:ba:fb:
fa:26:6d:7e:a0:16:a7:f9:b1:f9:c6:cf:94:85:c9:
10:74:c5:05:bc:1a:0d:9d:10:ca:60:7a:a9:fc:f9:
f3:cb:6e:06:5f:99:28:1a:d5:92:06:fd:85:15:cb:
a7:02:36:08:43:84:68:e5:fd:0e:53:09:f6:00:3c:
df:9b:62:e3:b3:8c:54:36:dc:3c:e2:bb:b4:e5:1e:
f5:7e:99:0f:83:34:10:e8:dc:55:46:70:93:2b:ef:
2d:ee:b4:28:28:c2:0b:61:b4:5d:80:d8:a9:c8:ab:
fc:9a:4a:2c:09:67:9d:57:72:19:f5:1e:52:c1:35:
e4:7b:f5:de:fa:13:f8:63:d0:1d:02:e0:c8:ec:ef:
7f:8d:14:62:ed:07:8e:89:a7:dd:b5:0a:63:24:58:
ab:1d:49:8d:93:db:1e:27:22:04:40:eb:6f:38:2e:
a7:8e:06:51:ef:9f:00:d2:18:f2:2c:3b:2f:74:1f:
a3:ea:e6:39:1a:94:bf:15:4d:87:de:79:d1:df:7e:
f7:6c:b0:1c:b2:96:8c:39:38:e3:51:3d:ed:85:31:
81:19:17:4e:ff:16:59:91:ed:dc:3f:65:3d:13:58:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:DB:5D:49:C5:72:0B:45:3B:47:13:2A:3C:3B:F3:A3:60:7D:BD
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:5a:d8:7c:66:36:7e:3a:f9:0d:0d:e7:2d:f4:95:36:15:00:
13:df:1d:a3:6f:95:7b:aa:fd:9a:2d:d2:83:67:54:57:2c:4f:
07:f3:0d:41:65:93:9b:9d:7a:67:84:10:05:13:2f:de:e8:7e:
f2:58:58:a6:42:af:6f:5f:ec:45:68:df:66:0e:9b:bf:b9:24:
9f:11:86:e3:34:df:dc:80:19:fe:5c:43:08:dd:92:1f:ad:9a:
63:c3:5f:37:98:02:fb:ef:eb:e9:1a:d1:d2:63:78:a2:1c:c9:
36:a4:8f:68:a5:b6:d3:8f:7d:dc:19:a5:f1:0f:75:7c:cb:3f:
f6:1d:8a:09:8a:01:55:63:db:db:aa:93:6f:97:c3:53:ec:e5:
b7:0a:1f:e9:c3:83:ed:bf:0f:b7:13:11:ad:cb:3d:13:bc:be:
84:1c:4f:95:f0:bb:53:9f:86:3b:9f:be:ca:e3:f7:88:d9:2e:
d0:ff:ca:7b:64:c1:07:48:a1:e2:3b:d5:c5:52:b7:db:ed:dd:
e4:7a:20:ed:ca:c0:d0:3a:a4:41:58:79:39:41:20:c5:e4:75:
cd:eb:c7:89:04:03:d7:7a:80:48:52:b3:6a:fa:49:8d:ff:97:
89:f3:d7:48:f9:11:88:f6:ef:ee:06:52:b7:20:38:47:14:29:
9e:fe:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:01:19 2025 by rpki-client