Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: Fqn8QcJeyOB4PSAEqKg+lBsvRm2tNmzNQdqWzJ+NtJw=
Subject key identifier: 00:F0:82:29:2D:7F:99:E6:47:BA:AF:34:0B:77:97:27:DE:68:9E:73
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 01974AE8E0CD2A4FB48310F45199B36A7EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 15:01:05 +0000
Manifest this update: Sat 07 Jun 2025 15:01:05 +0000
Manifest next update: Sun 08 Jun 2025 15:01:05 +0000
Files and hashes: 1: cdMOuRF7uOMr3eiWtLluBITicTo.roa (hash: 2zf3i/TaVgEDUbWisH1c3bo8xEvWjGA35Bw+WbjbFqQ=)
2: gPmJ919io92zLM0qUcMa5dmkecM.roa (hash: m1AiD3SH7JRse/Y0z+yKore/EQyRkJUXQ2NtfWymxSY=)
3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: aWOIxNHHWXpvHjYGGwiWIINaOC8YfmFebOvnmNVvKLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:e0:cd:2a:4f:b4:83:10:f4:51:99:b3:6a:7e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jun 7 15:01:05 2025 GMT
Not After : Jun 8 15:01:05 2025 GMT
Subject: CN=00f082292d7f99e647baaf340b779727de689e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:c7:23:9f:34:58:22:e8:60:91:8b:02:4b:
ba:a8:5e:52:f8:80:08:af:96:d3:bd:9f:52:f0:d9:
5e:1d:18:d8:02:9a:3b:1f:89:9f:70:98:ef:ff:46:
6d:7e:d7:da:13:4b:55:1c:0b:a7:72:01:21:85:f6:
31:29:ec:67:b6:41:19:e5:8b:90:e1:4f:d6:51:bd:
e6:b0:63:16:c8:08:b5:70:73:2c:bf:cc:5d:cb:3d:
2e:9f:48:6c:b0:8a:d4:1c:18:c7:53:61:4d:66:43:
8b:e2:08:2b:cd:72:61:14:8d:3e:50:f9:b3:82:0d:
e5:f0:d1:4b:8e:8c:79:4c:1f:2a:00:d9:81:c9:b5:
e9:bd:57:4c:0f:46:05:bb:ae:46:46:71:d0:f4:84:
4b:b4:95:ae:28:45:fe:18:f6:70:a4:40:6b:08:fc:
93:59:0d:9a:d4:d2:24:fe:3f:3d:4d:9e:22:7f:3a:
fd:5d:f4:47:e3:99:2e:bf:33:6d:13:67:7a:dc:70:
b0:7d:83:a8:a7:77:fb:a9:67:21:bd:c9:ff:28:a6:
98:7f:f6:25:dd:fb:87:07:78:39:cf:90:11:56:61:
b5:5d:e9:0b:be:db:38:d5:de:7c:75:1c:16:97:f3:
ad:a3:2c:36:9e:fd:86:5f:9a:12:3e:88:f9:70:68:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:82:29:2D:7F:99:E6:47:BA:AF:34:0B:77:97:27:DE:68:9E:73
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d1:73:5d:72:65:1a:ed:8a:b2:c0:d8:1b:c9:bc:7e:07:f8:
ae:5d:a2:6c:23:27:94:cb:d2:7a:26:6a:1e:0a:0d:21:2e:40:
08:5a:9d:36:fc:73:56:32:72:23:38:00:4f:c1:cc:05:0c:5b:
35:5d:75:15:bd:c2:8e:90:69:2e:b0:c4:26:5b:90:24:8b:a9:
4d:42:67:eb:92:bc:14:e7:54:53:71:6e:35:e9:26:82:b4:06:
13:ac:30:f1:56:f3:f6:6a:85:64:c1:fa:62:83:38:d5:fe:a9:
13:ad:64:04:4e:b5:fa:1e:27:ee:ef:c2:08:93:15:ac:82:e9:
a9:b2:55:5b:a5:bc:d5:43:04:bc:bc:42:11:a3:e9:88:29:da:
df:37:f6:f7:5c:92:b5:dc:8a:26:52:d2:91:82:4e:28:46:35:
52:a6:c9:2c:cc:0a:c5:8f:71:ea:52:a0:f6:18:be:fb:bf:9d:
4c:dd:6c:45:40:df:c2:3d:21:b2:c8:23:6c:0c:df:ed:16:48:
bd:cb:04:29:ce:fa:47:c7:32:90:96:1d:bf:fa:5b:0e:bd:a0:
0b:ef:79:a2:15:01:e3:40:72:ee:00:f0:9a:3f:2c:04:e3:a1:
ac:6d:4a:e1:e0:a8:cd:77:a2:52:53:b7:7b:3b:19:d6:2e:96:
38:81:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:08:25 2025 by rpki-client