Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: RHceZDUhnOl9A2uj95Bh14zxjHmc7EVC0bZnhZAlstE=
Subject key identifier: EE:D8:AA:50:9F:8E:F4:C8:70:8F:E5:5B:28:D5:BC:C2:99:DA:97:D7
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 01974AB1C2C10FE21AF59FDB80B0A5BA237B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 10E2
Signing time: Sat 07 Jun 2025 14:00:52 +0000
Manifest this update: Sat 07 Jun 2025 14:00:52 +0000
Manifest next update: Sun 08 Jun 2025 14:00:52 +0000
Files and hashes: 1: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (hash: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: od7Ys8G7BN/E0pQ/9kPHL5jgvoQTVzDYYlnoo64vac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:c2:c1:0f:e2:1a:f5:9f:db:80:b0:a5:ba:23:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Jun 7 14:00:52 2025 GMT
Not After : Jun 8 14:00:52 2025 GMT
Subject: CN=eed8aa509f8ef4c8708fe55b28d5bcc299da97d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:ad:ec:b3:85:fb:24:fb:06:62:53:31:7a:
7f:24:84:60:03:7e:ec:e1:08:e4:21:b6:2b:2c:d1:
e2:96:fe:ab:a1:69:f5:6e:85:29:f6:f2:c4:cf:90:
cb:ff:72:d6:78:39:88:c9:3e:ed:a7:cd:52:d7:c2:
a6:09:44:4d:f9:b8:6c:13:ce:de:ac:a6:be:a9:43:
4f:96:9b:2a:8f:59:e4:a1:c9:9e:6c:5b:34:ad:c0:
b5:dd:6a:6f:76:67:70:ae:19:2d:02:cf:70:2a:24:
22:b3:5f:eb:21:e3:b0:39:bf:ef:49:a5:ea:e7:c2:
d1:fb:64:33:ad:37:9b:43:05:eb:f6:5f:b4:70:bb:
0a:9e:61:03:5e:6d:60:68:d6:1d:34:f1:08:19:dd:
0c:ba:f6:1c:74:f6:91:1e:ca:b8:ac:f1:4e:a1:ed:
82:8c:56:d1:4a:7a:aa:7c:44:2c:13:65:c7:e6:95:
1c:c7:e5:d4:af:ad:3a:19:10:c9:ab:cf:b0:36:f7:
80:db:a9:3d:94:b0:8a:e8:e8:34:db:f5:ab:7e:6a:
18:53:53:c0:be:87:e8:90:be:78:ac:5e:12:5e:a9:
5d:c8:0b:3a:20:d3:92:1a:50:ae:28:58:73:39:9c:
a3:ff:a2:6d:9a:d2:0e:a9:fa:32:29:de:0d:b2:ac:
42:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:AA:50:9F:8E:F4:C8:70:8F:E5:5B:28:D5:BC:C2:99:DA:97:D7
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:be:53:6a:8a:67:21:2a:fa:27:ff:e1:bb:fa:94:33:f1:0d:
f5:00:bf:25:21:23:72:b3:76:53:07:49:9e:f6:a3:22:5e:5d:
14:c2:6d:49:04:c8:ba:19:f1:d8:00:f4:42:38:30:28:7b:9e:
08:d5:fc:f6:db:e0:e8:9d:3e:6e:a5:a4:79:13:22:51:c9:b7:
70:7d:d2:50:fa:04:a8:12:ee:ae:ff:1f:fb:ee:9d:3e:c7:91:
13:dd:20:67:ca:d3:91:18:ce:6d:47:42:1f:03:71:19:f6:90:
7e:e0:2b:cc:55:3a:e4:0a:f6:43:98:a9:9b:0d:99:58:be:bf:
d5:db:b1:13:5a:1b:48:12:6e:0d:48:cf:b4:a5:2a:df:1a:84:
6c:24:65:02:e4:2a:13:6e:00:f4:27:84:a9:11:a5:b7:6b:b1:
ee:ae:86:62:79:af:41:bc:2c:48:b7:be:87:cd:de:6e:7e:23:
1c:e6:32:f9:da:2b:0c:15:a3:45:ee:ad:55:04:a7:c2:73:fc:
5a:21:72:89:99:8e:49:e1:2b:b3:14:79:be:73:52:88:79:1e:
ee:e3:0d:ba:bd:ab:3b:82:98:a8:18:72:c7:09:21:e0:ce:d3:
54:25:3c:87:5a:1f:00:71:05:1a:9a:ae:be:d5:eb:1d:e3:48:
4b:27:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:44 2025 by rpki-client