Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier: bNXAUN2oiIz4oKsPBfd+0dvs4gCm0hH4HQqc5zDmrtc=
Subject key identifier: C1:FE:2F:79:06:70:71:C6:BD:96:BC:61:36:35:0E:F1:DB:90:A3:CE
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 01974D4506E188555D9C30780E216D08B7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number: 0A7A
Signing time: Sun 08 Jun 2025 02:00:58 +0000
Manifest this update: Sun 08 Jun 2025 02:00:58 +0000
Manifest next update: Mon 09 Jun 2025 02:00:58 +0000
Files and hashes: 1: TK8oRVgmC_iGkqpkIUxL12Jskyo.roa (hash: WWQSgn1wOK2i+o7wtaeqJibMN9Pjr41qBXdRO7I04u0=)
2: Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa (hash: 4wKWfKiX6etE7Y85veoMkmwG3aEsU0NvUo1kjzyAViY=)
3: kcWTfdAykr4V6or-J5DNrcGjkPY.roa (hash: ogmpuXD/e22gpKD4xD0G9j8Nblm4BJXQE5obj3J5Qcg=)
4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: 4ZRL8tOByDZOJfM4lr27F1p0RhrZTkZs7o38hz44kSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:06:e1:88:55:5d:9c:30:78:0e:21:6d:08:b7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Jun 8 02:00:58 2025 GMT
Not After : Jun 9 02:00:58 2025 GMT
Subject: CN=c1fe2f79067071c6bd96bc6136350ef1db90a3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:64:9a:76:f8:d2:cd:31:d3:23:7e:a6:de:
54:33:6c:6c:1e:16:c1:2c:61:57:59:93:db:e5:b0:
f0:5a:4b:78:86:26:e7:49:15:65:7e:ce:7a:b1:e2:
cf:b4:52:74:29:07:28:40:e7:1e:e2:b0:c8:01:d0:
63:de:b9:6a:c8:a0:f5:20:8e:03:63:3d:2f:3c:da:
ae:14:d7:da:68:3d:4f:09:63:94:d4:e2:2f:e0:8a:
1e:ad:de:7d:7a:00:6e:0e:c6:38:94:ad:31:c9:9e:
aa:e4:23:36:3f:a8:19:14:87:89:58:97:7e:8c:e4:
3d:0b:f8:ea:ec:d5:63:2a:5b:1b:84:5b:34:61:e5:
ba:cd:af:6e:f9:ed:e4:fa:e5:bb:a5:4e:9b:fd:97:
de:f6:8a:37:3d:2c:d5:69:5d:64:b3:d4:77:c5:cc:
48:2f:94:f7:85:b4:01:b7:1f:81:3e:e5:3a:10:4b:
d4:e6:6f:9d:7f:7d:ca:32:31:c7:b2:bd:08:c9:56:
45:52:29:7d:24:8e:41:5c:24:29:00:20:88:b5:ce:
d9:d3:50:1d:1e:01:6e:38:cc:e9:e3:f0:8d:b1:59:
db:12:63:a4:6c:7c:8d:af:3b:62:e6:2d:24:a8:da:
75:77:93:8f:22:d9:3f:9f:95:33:ee:3a:3c:04:a4:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:2F:79:06:70:71:C6:BD:96:BC:61:36:35:0E:F1:DB:90:A3:CE
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7b:1f:4f:7f:4a:a1:3a:ae:c7:ea:32:0b:91:c1:ba:99:85:
f5:0c:eb:86:e0:de:88:fa:a5:23:11:2b:62:b0:20:f4:68:86:
ed:62:cb:50:ad:00:e9:29:fd:66:9e:80:5c:71:bc:23:78:f5:
7c:4c:94:d9:30:8e:d8:f3:1f:8a:05:35:4f:5d:b0:b1:cb:92:
a4:04:c0:fd:d5:4d:ae:ea:e1:40:fe:56:a4:11:81:09:39:8b:
a2:23:ec:3b:06:7a:fb:c7:79:c0:d9:e1:06:00:f9:fa:a6:31:
30:96:50:be:bd:1d:b3:ec:79:2f:f1:9d:90:8a:ad:11:67:85:
d2:5c:f2:8e:30:16:2e:ef:63:39:da:4b:09:de:69:65:b4:48:
f1:8f:54:fc:cd:03:18:5f:13:44:d8:d8:5f:d7:e4:44:20:c9:
2e:4d:28:39:25:d8:d5:b1:ec:4a:29:d4:bd:67:fb:b2:19:ac:
8d:0a:8c:24:00:26:9f:12:5b:74:49:ef:ff:2b:52:58:e2:42:
54:e5:c9:df:23:0c:7e:f6:37:9a:27:e4:cf:b5:3a:a8:1d:f2:
b3:89:f6:7b:39:97:57:34:a7:e5:09:b7:db:c2:e8:a7:5a:03:
de:fd:17:c1:94:0c:ff:f6:f4:11:58:df:99:42:50:21:fe:85:
90:e0:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:55:58 2025 by rpki-client