Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: 5xsuIL3t4qJ7czXVzwd7xGRK9GOI0qSNCj1KvQ6pkig=
Subject key identifier: 9F:F0:B1:9E:E7:CE:F8:3A:45:52:19:29:96:04:4F:B7:24:53:4C:F6
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 01974779A92AA26DE79E17969DC2CBA856DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 082C
Signing time: Fri 06 Jun 2025 23:00:44 +0000
Manifest this update: Fri 06 Jun 2025 23:00:44 +0000
Manifest next update: Sat 07 Jun 2025 23:00:44 +0000
Files and hashes: 1: 3raexFFj3tPstgifa_l8jJHkazQ.roa (hash: tJRmWB+nxgvOJkVjhkrY7i53nGolZQoscv3aKM9NJDk=)
2: SsPMfuLYiptAn1KbqNePMw_A4VY.roa (hash: s7uhDyPNR/o8+HrZcEPeZiMphtLlmdxbZNwJprWhgdg=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: Bmk+6Qf17Z2J1otRO9HDmgwpcK79bIp1KohLQ/x7HLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:a9:2a:a2:6d:e7:9e:17:96:9d:c2:cb:a8:56:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Jun 6 23:00:44 2025 GMT
Not After : Jun 7 23:00:44 2025 GMT
Subject: CN=9ff0b19ee7cef83a4552192996044fb724534cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:c0:00:b5:52:3b:73:63:ae:83:24:e4:ed:
af:56:2b:4f:43:b3:eb:0f:2b:e9:86:2e:13:df:1f:
cc:18:35:39:7a:23:c6:5b:c2:3e:7d:f5:71:b2:5b:
3e:95:7a:5b:dc:42:2a:b2:8e:74:b5:b6:6b:9d:54:
b8:56:2f:41:e9:c6:7b:cc:6c:c4:55:0a:16:fa:cf:
d4:98:59:f8:5f:d0:d5:96:8a:2c:24:e5:14:4f:6e:
7f:77:f6:56:2a:73:60:a7:fd:f0:7e:7a:a4:e0:2f:
77:ff:6b:1f:45:66:fd:aa:0f:43:f2:31:41:27:e3:
fd:05:12:ac:61:6a:d7:f2:cd:b5:a9:57:72:5c:cf:
c5:fd:c9:f4:e5:1e:c6:89:76:c3:a1:02:39:07:f4:
5f:66:37:23:33:8b:d8:18:46:8f:c5:9c:5c:ad:bb:
58:15:a9:e4:50:bf:c3:9d:e7:69:0b:0b:3a:cc:f3:
2d:a3:0b:7c:e1:64:b6:c0:02:22:b9:c2:12:53:fc:
29:0d:f9:59:88:94:c1:c6:b2:f8:1f:e9:64:41:f6:
bd:cd:5b:e3:25:e4:a8:aa:ac:c8:bf:cb:15:d6:91:
10:40:d1:54:f8:0d:6d:36:9f:3a:b7:cc:2d:ee:44:
4c:48:41:12:48:0c:18:15:9a:0f:76:c9:b5:c1:8d:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:B1:9E:E7:CE:F8:3A:45:52:19:29:96:04:4F:B7:24:53:4C:F6
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7b:e6:a2:73:d9:f1:0a:d2:1b:27:34:25:bc:65:55:20:56:
97:7d:64:ec:be:76:3d:85:18:06:52:8f:b8:43:c7:3d:29:99:
b0:11:f9:f9:05:81:32:0f:f1:3f:6f:e5:1a:72:0e:1f:64:60:
ee:77:47:4f:bd:fe:af:59:07:ba:77:fb:85:74:7d:03:ce:ea:
b1:c6:ed:ae:34:f0:00:7f:c6:41:d1:8a:d5:02:23:e0:60:fc:
51:1c:07:3a:16:11:11:b3:4a:f1:e0:6a:51:45:5d:61:68:e1:
73:7b:a5:3b:ae:a5:9e:af:36:10:c9:4e:8e:a6:f5:a7:4f:12:
12:36:0d:bd:9a:fb:19:50:c8:84:f6:a9:06:46:e8:ed:ec:d6:
97:a4:f8:c8:57:bb:11:da:5c:21:fa:0e:e0:1b:9c:f9:76:e6:
8d:bb:d7:af:fb:40:04:64:30:58:ff:dd:19:28:d5:be:20:4c:
c3:37:14:9a:93:0c:46:88:c0:9d:e2:af:e4:49:09:ba:c3:35:
53:0f:8a:c7:48:32:b8:b1:01:c3:4e:6e:ca:9f:e4:18:79:72:
0f:a5:a9:08:b9:4e:0a:05:3d:67:f4:25:b3:0c:e4:b4:5b:b9:
d5:3c:fb:5b:30:3a:5e:ab:77:c1:18:20:9c:cc:76:8e:40:05:
a2:b4:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:33 2025 by rpki-client