Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: PMqrCF3x3ex+fvR5iiw9yhOhXE1+AckOySn+X/VI7p4=
Subject key identifier: 88:F3:0F:06:59:5A:51:41:F3:14:B1:F4:10:1D:3B:F1:46:23:C6:14
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 01975BDC552DBB001F71D79FBE9B572D6A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 0EB4
Signing time: Tue 10 Jun 2025 22:00:55 +0000
Manifest this update: Tue 10 Jun 2025 22:00:55 +0000
Manifest next update: Wed 11 Jun 2025 22:00:55 +0000
Files and hashes: 1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: kDs1gCvTxZOu5r/KVLkDxTd0kIXxs8LwpNaom0oE+No=)
2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:55:2d:bb:00:1f:71:d7:9f:be:9b:57:2d:6a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Jun 10 22:00:55 2025 GMT
Not After : Jun 11 22:00:55 2025 GMT
Subject: CN=88f30f06595a5141f314b1f4101d3bf14623c614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:1b:9a:1e:35:50:04:e6:f6:1b:24:e7:9e:
73:61:62:99:f5:2c:1e:76:bb:b5:f1:23:e1:69:db:
05:c8:b1:f4:3b:ed:e1:47:04:10:90:0c:8e:a5:2e:
66:6b:e1:ab:54:09:cc:05:d4:41:8d:89:83:b7:5c:
82:51:fd:6d:5a:0e:8e:c7:c5:28:25:b2:46:ad:d0:
82:5b:44:76:20:2f:37:5d:40:bd:51:77:a2:79:eb:
5e:cf:cb:54:bb:c9:d0:b9:f4:20:5f:9e:d7:dd:34:
16:52:49:cf:a4:1c:24:d7:09:e7:6c:d0:25:84:58:
28:1a:c6:a8:a9:65:8f:1c:17:79:35:b4:cf:23:9b:
be:1a:a4:6b:15:71:2c:7b:1e:b2:de:d7:17:ff:86:
cf:c9:ea:3a:ba:1c:d1:38:b8:6b:8f:07:23:9f:41:
bd:9e:d6:77:31:78:7d:c1:fb:e6:62:fd:45:94:36:
02:4b:ee:e0:47:72:dd:6e:57:e5:92:b3:75:86:f9:
30:05:92:23:a8:a7:86:f9:62:c3:5b:af:66:55:71:
6a:95:6b:53:07:fc:c3:d9:29:d4:1e:53:77:88:03:
83:d6:99:22:74:b8:e7:34:60:8c:be:d5:25:61:cc:
50:5a:43:e1:57:32:74:e7:af:2c:2d:80:a9:0f:2c:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F3:0F:06:59:5A:51:41:F3:14:B1:F4:10:1D:3B:F1:46:23:C6:14
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3d:9a:8f:83:fd:0a:ec:00:86:4a:6d:3e:e8:31:62:39:eb:
0a:2d:15:a2:a5:12:3e:f0:0b:c7:d1:e8:01:b7:25:fd:6c:83:
41:73:6c:31:71:28:b7:04:fd:cb:d9:42:0c:4e:fd:f7:d0:a7:
7e:0d:75:b5:c0:45:df:e2:b3:c4:0d:f0:7a:0d:3f:68:c2:74:
26:65:de:ac:e3:16:a7:7f:3e:81:fc:3e:07:b8:a1:f9:29:7f:
85:17:c8:4f:24:60:62:17:e9:fd:7e:2a:57:66:e1:0f:fa:5b:
ec:d3:ff:8a:9c:c8:a9:cb:ad:e7:2d:ba:1c:ff:34:ff:3b:70:
ae:22:d2:0e:d9:bd:89:49:0b:a7:3b:a6:83:57:36:ae:9f:90:
51:f5:94:65:f9:7b:6e:26:79:2d:a0:0b:44:66:c8:fc:91:2a:
28:0b:14:5b:42:fd:32:e4:46:d1:2b:ad:27:de:e5:3e:4b:c6:
4e:bb:5c:59:fa:f7:21:87:2b:7f:da:4a:1d:65:2d:7a:bf:79:
6c:27:eb:a4:81:e6:fe:27:6d:0c:17:cc:f9:2a:57:67:c1:85:
1a:77:5b:95:3b:ac:c1:71:17:2a:9c:88:28:07:3a:a3:91:76:
5c:d2:8d:cb:7d:7e:81:a4:79:12:84:30:f9:48:cb:1b:97:26:
30:c8:93:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:35:54 2025 by rpki-client