Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
File: rO9NpWy5QNny99Ahryph-9OxTqg.mft (raw, json)
Hash identifier: R+LR0syYX1zqlYXiAQxV8hnhMwJ1NAzVzIMcHZgNGxM=
Subject key identifier: AF:D6:44:AE:C2:1D:0B:B7:7A:67:B2:83:7F:91:03:87:48:ED:3A:65
Authority key identifier: AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
Certificate issuer: /CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Certificate serial: 0197597FBEBCCBA8F9D241E187FFDDBE54A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
Manifest number: 0B8D
Signing time: Tue 10 Jun 2025 11:00:33 +0000
Manifest this update: Tue 10 Jun 2025 11:00:33 +0000
Manifest next update: Wed 11 Jun 2025 11:00:33 +0000
Files and hashes: 1: csc62_075z-O1jbjAbm_rCnKZRc.roa (hash: Tb7p7/2jlLjl4/3NDouCmjK2S/QTfoZSS+7FIIdOEgc=)
2: rO9NpWy5QNny99Ahryph-9OxTqg.crl (hash: BsyJZj3uxxcX1Skagmg7TdoJTwwgKuMnNQ6c+MZq9xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:be:bc:cb:a8:f9:d2:41:e1:87:ff:dd:be:54:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Validity
Not Before: Jun 10 11:00:33 2025 GMT
Not After : Jun 11 11:00:33 2025 GMT
Subject: CN=afd644aec21d0bb77a67b2837f91038748ed3a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:51:90:e9:12:a7:32:8a:ea:8a:cb:05:9c:
a9:62:b2:55:f2:84:07:18:49:67:22:a4:dc:8a:54:
d9:5e:47:ec:d6:83:3d:70:0d:6a:fc:c2:64:59:37:
91:12:f4:40:e7:ae:45:48:ff:ec:20:8d:07:7c:e8:
1d:37:43:70:28:38:10:e0:23:30:45:61:87:86:d0:
9a:29:72:42:ca:a3:fb:aa:15:fa:95:a9:a3:56:07:
a5:03:6b:c5:e2:40:4b:44:4f:35:eb:63:47:72:72:
96:22:42:5f:10:e6:7b:3f:fa:e2:1d:92:98:39:2a:
4f:00:dd:d4:d8:45:bd:3f:bb:74:ef:7e:7a:13:f1:
67:a9:3e:c0:a4:8d:dc:9f:6f:09:88:64:7e:72:87:
71:e4:39:41:57:c8:1b:a3:01:25:4c:18:f7:a6:f3:
16:3a:08:67:2f:b2:f1:f8:21:d2:d6:3f:c7:6b:ae:
59:93:cb:1a:78:e7:8b:53:77:77:8a:72:20:16:e1:
63:15:d6:e6:19:54:2f:20:26:fb:cc:83:58:42:39:
ca:6a:41:46:7e:bc:84:66:92:5a:f5:c8:d2:9b:41:
4a:46:a1:62:3b:be:7d:6e:bd:d3:7a:9e:c9:3b:9a:
72:1a:39:9e:ff:c9:5d:0d:8e:52:83:10:a0:61:82:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:44:AE:C2:1D:0B:B7:7A:67:B2:83:7F:91:03:87:48:ED:3A:65
X509v3 Authority Key Identifier:
keyid:AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:63:f2:9b:fb:23:ab:c1:81:71:f8:4a:e8:15:9c:1a:56:da:
9e:f2:cd:3b:2b:89:10:fa:19:3c:0f:75:0f:92:cc:f8:b5:b7:
cd:30:1a:a6:f0:ee:6e:62:34:66:ba:7e:f5:47:c2:d2:74:31:
90:d0:9f:62:77:d4:cc:86:3d:0d:42:07:3b:9b:46:59:33:b8:
58:be:4a:f1:55:5d:56:bb:da:c6:a6:7e:bb:19:28:ea:06:ca:
98:e1:66:03:40:ce:94:51:7e:4a:63:82:04:a6:81:e0:dd:b5:
4a:19:b7:e5:2a:69:f9:c4:c6:5a:0b:08:3c:9e:5c:3c:43:eb:
91:aa:fc:6d:db:29:1f:7f:1d:77:c8:8c:e8:86:42:ae:ca:a5:
77:33:be:6c:05:06:e1:2e:43:26:a0:db:6b:f6:7b:77:3d:d0:
b7:4b:ab:c5:44:5e:1b:fd:75:f9:de:29:76:c6:0a:6a:2b:ef:
dd:44:ce:4c:4f:59:63:c7:8d:61:5d:97:92:c3:fa:9e:b9:68:
cb:57:42:33:d8:5a:54:b4:4c:a9:e6:53:ba:e7:69:5e:2f:16:
2e:5b:6a:6a:a3:ed:40:13:3e:25:b0:45:e7:ed:b9:bf:a2:02:
59:0c:d8:76:3e:bf:c2:ff:12:90:87:6a:8a:8a:92:78:9c:da:
27:aa:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:53:10 2025 by rpki-client