Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: u+6Stgc17WjTtlUvJh9TNqYGSi35vSO4gME7fUpUW3c=
Subject key identifier: 71:07:82:11:B6:26:D1:C9:48:A3:BC:AE:59:18:FC:01:1D:16:CF:A2
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 01974AE83B72E05B5AFF6E04A30A948A1D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 15:00:22 +0000
Manifest this update: Sat 07 Jun 2025 15:00:22 +0000
Manifest next update: Sun 08 Jun 2025 15:00:22 +0000
Files and hashes: 1: AXdtgA9HD_eEgv2xOauCB5PRPTI.roa (hash: eE91r99J937Hp1PJua6WE3j9iIacTvevX68FK66M1mQ=)
2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: Z6lHRW0wWF86l5S8TPZj0h+1wYPax+oVs5WGuDvRULk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:3b:72:e0:5b:5a:ff:6e:04:a3:0a:94:8a:1d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Jun 7 15:00:22 2025 GMT
Not After : Jun 8 15:00:22 2025 GMT
Subject: CN=71078211b626d1c948a3bcae5918fc011d16cfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:39:4b:0d:d7:f8:77:67:6e:21:0a:3a:79:
00:a2:f4:46:43:b7:0b:25:35:97:2f:bd:a4:ab:0b:
4b:01:2e:02:75:33:43:bb:63:4c:d2:f3:34:0b:da:
ae:d4:7b:6f:71:be:e6:9b:0b:d1:a7:11:39:b9:c7:
1f:a7:33:02:0d:40:3c:54:d2:d0:26:82:8a:54:c8:
55:97:85:8c:15:cd:84:6a:cb:ef:ed:e9:f6:bc:12:
68:c0:88:64:ae:88:a4:6e:d1:46:7e:9e:64:21:04:
b5:e4:96:d9:2b:bd:37:65:1e:07:26:10:69:3a:b2:
45:53:6c:e8:24:5e:f9:9e:5a:19:9e:bd:5d:fb:f7:
ce:18:a7:c9:b6:2c:ef:44:90:c3:4c:3a:43:d4:99:
b3:df:35:f2:49:f6:7c:fe:81:1b:0e:d6:e3:95:bc:
59:68:ca:d9:e9:10:15:07:40:24:01:b6:62:d0:35:
3a:9e:89:e9:c5:a6:75:f4:be:11:cc:68:ef:87:25:
43:36:fe:5e:f9:a8:55:03:00:87:ee:b5:33:05:7c:
9d:84:14:d0:8a:a7:fa:10:e6:db:79:ca:c3:0f:e3:
78:ee:26:79:b4:b2:85:53:89:d4:bb:d4:bd:a2:f8:
e1:87:83:39:f8:f0:0f:27:e0:3b:60:8e:bb:fd:4a:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:07:82:11:B6:26:D1:C9:48:A3:BC:AE:59:18:FC:01:1D:16:CF:A2
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f8:46:3c:9e:36:d3:34:10:93:97:ad:bc:ee:ac:5c:3a:c6:
70:ca:bd:ef:ac:ec:0d:6d:ab:2c:fa:3d:09:80:80:1b:93:4d:
69:11:ea:c1:db:5e:74:c2:91:b8:ce:48:b3:bf:74:cb:6e:7e:
1e:8a:d3:5a:01:de:9a:65:1b:4b:1e:ec:67:ea:54:ae:ea:4a:
2f:e2:2c:9b:37:cd:0b:8e:fc:8b:41:b5:0a:2e:54:fb:6c:de:
c1:2b:8c:8f:4f:1f:d5:1f:14:fa:d9:c4:8d:0a:a0:e3:1d:62:
1a:09:dd:bc:86:70:93:9a:33:5a:5e:2e:7e:96:14:ab:95:2b:
09:a2:a3:8f:f3:06:34:60:0e:cf:28:c4:df:ff:88:9b:e8:fe:
5d:4e:70:a1:82:62:cd:43:14:a4:c7:8d:59:75:1f:88:b1:f8:
79:d7:3e:ae:45:f3:da:ea:78:ea:09:7a:a3:c2:ec:bd:32:f9:
7e:b2:b0:df:bc:e6:6d:9c:26:53:e4:3f:42:6a:d6:1b:1c:e0:
2c:b7:c3:d3:a6:ab:f2:5a:b2:e7:22:61:39:f7:3e:0d:b5:27:
6d:6a:78:8c:07:9d:f4:b3:20:64:51:0a:cf:98:c8:71:4d:49:
06:42:83:0d:6e:d6:60:25:73:9a:4f:66:ee:f7:8b:04:73:a8:
99:a5:26:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:55 2025 by rpki-client