Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
File: o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json)
Hash identifier: xjQOgWZC5ok1CWzQ76T/J8f7TA+bofWmnCL4elmZTaQ=
Subject key identifier: 95:1F:EF:71:50:3C:CE:07:7F:1B:AF:2B:71:D8:18:C6:B5:65:0D:E2
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial: 01974FD7BC6CB248EE2E7EDB9E2D85B01189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
Manifest number: 08AB
Signing time: Sun 08 Jun 2025 14:00:27 +0000
Manifest this update: Sun 08 Jun 2025 14:00:27 +0000
Manifest next update: Mon 09 Jun 2025 14:00:27 +0000
Files and hashes: 1: LRjWG2C0sY70ttFU6yLHd0oTEf4.roa (hash: gpuwglO/L9B/Dx0skWM1NYemBuVCYqyVGsOPd2w2KjA=)
2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: ASwWBOdigvXPgQeHdWUwmQ9Vw4sJKsBsgInN3TqEZOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:bc:6c:b2:48:ee:2e:7e:db:9e:2d:85:b0:11:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
Validity
Not Before: Jun 8 14:00:27 2025 GMT
Not After : Jun 9 14:00:27 2025 GMT
Subject: CN=951fef71503cce077f1baf2b71d818c6b5650de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c7:3e:5d:98:5c:0e:8b:12:8a:07:35:03:1e:
a5:81:7b:a0:47:1e:b5:00:e7:66:cb:e9:20:90:15:
b9:ee:73:74:da:56:18:1e:e4:ae:80:50:56:91:21:
ad:3d:61:91:4d:f0:77:fd:43:31:d0:52:79:b8:a0:
19:30:81:49:73:7a:47:42:ea:02:72:e0:04:1e:a5:
21:be:de:cb:9d:db:a1:16:b4:da:21:00:b5:d2:d9:
13:b5:f4:02:f3:64:cd:21:c9:83:0b:31:48:f5:06:
8e:73:4b:28:44:18:ea:76:0c:2b:ee:7c:d5:f1:83:
a2:66:e5:41:8b:39:44:92:02:99:bc:35:67:02:52:
18:81:93:1a:e4:0b:fc:cb:95:8c:bd:c4:fe:63:e9:
b1:49:8a:36:9e:6c:54:ad:0c:48:53:66:00:d0:f1:
ac:2d:3f:c1:f1:72:44:a8:5c:7e:07:d9:33:48:91:
b9:da:cd:05:a9:e0:e6:e7:59:3a:cd:60:20:11:29:
45:9e:16:14:b1:9b:40:7c:09:50:bf:e5:24:ee:bf:
06:52:e2:01:6f:c5:0d:3b:66:d8:60:c8:4a:ff:40:
6d:c8:58:ba:cd:5b:79:b3:28:55:e1:1d:7d:15:7f:
f4:90:eb:94:d4:16:89:9d:34:58:d4:28:87:a0:32:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1F:EF:71:50:3C:CE:07:7F:1B:AF:2B:71:D8:18:C6:B5:65:0D:E2
X509v3 Authority Key Identifier:
keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:72:ac:d6:24:c6:e0:7d:77:34:9d:15:43:e9:51:12:72:52:
fd:27:e0:6f:0d:cc:2c:76:eb:60:c3:7c:49:ad:a6:7b:2c:00:
de:da:a2:5a:85:a3:35:07:c0:ad:94:67:84:b9:6b:a9:47:6f:
77:2e:4a:b7:15:c3:ea:f6:a9:ac:8b:4d:9e:42:cc:be:d4:cc:
e8:b4:4f:c5:82:9c:9a:c6:99:e8:06:d9:80:6a:c2:a9:32:9a:
10:ed:25:0a:37:6f:be:d0:f2:7e:10:86:60:2b:a2:ab:5b:79:
fb:14:f8:c7:ca:0e:78:83:f2:6b:13:18:2e:87:42:73:d2:f9:
b6:3b:93:d5:59:b0:1e:5a:f6:9f:1b:68:73:ec:dc:91:d9:de:
a1:a9:d7:75:1e:a1:dd:f7:5d:6a:f4:90:24:8c:40:5f:65:a9:
f6:b9:a2:18:a0:33:ba:6b:07:32:a5:7c:f9:45:fa:2d:43:ed:
11:44:45:42:a7:7b:2a:ed:46:cc:c1:e5:10:e6:82:f5:25:b9:
dc:d7:23:5a:6a:01:d7:1e:a7:ac:a3:e4:e8:9d:b7:39:c6:d9:
f5:f7:be:88:14:ad:78:64:f7:a3:94:4d:1b:61:0c:ce:56:73:
ca:24:65:20:e8:f3:77:b2:a0:78:00:42:f0:18:31:a2:7b:b3:
e2:d8:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:26:51 2025 by rpki-client