Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: K8fk/DtqbVv9ykwYXWTCKWiV9nzUpFOKmHFYhVNCJcw=
Subject key identifier: B9:FF:39:BA:3B:70:EB:E7:E7:48:A3:FB:90:58:40:20:0D:52:DA:67
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 0197470BF9C2C4ABD5200238D1CAF0B0FD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 3D
Signing time: Fri 06 Jun 2025 21:00:56 +0000
Manifest this update: Fri 06 Jun 2025 21:00:56 +0000
Manifest next update: Sat 07 Jun 2025 21:00:56 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: /gdPVsnXRiKr5kTjxPhUFwlDTU/KUEsNOwcuyKNPWBM=)
2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:f9:c2:c4:ab:d5:20:02:38:d1:ca:f0:b0:fd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Jun 6 21:00:56 2025 GMT
Not After : Jun 7 21:00:56 2025 GMT
Subject: CN=b9ff39ba3b70ebe7e748a3fb905840200d52da67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:0e:2b:3b:06:f0:06:43:b5:7d:bd:87:98:
0a:64:18:f3:d7:3f:3f:d0:2a:a7:98:aa:c6:13:29:
af:37:e6:52:f0:af:ba:48:f8:51:4f:d5:51:7b:d3:
f4:98:5a:28:fe:2b:09:18:b7:37:4c:2d:8d:c4:4b:
74:2a:a3:29:00:05:ca:10:bd:f3:eb:20:22:b1:d9:
8f:77:8d:94:cf:e8:b1:a4:45:5d:96:fe:1e:ea:24:
fd:21:27:c7:89:2e:11:40:ad:01:01:6a:72:63:82:
84:6a:0b:23:34:6c:c6:c0:57:27:fd:ce:a5:ec:e6:
aa:cd:52:5d:c2:aa:80:79:2c:b8:6d:d3:55:d2:97:
0f:7d:b0:82:23:63:73:3b:a9:7e:cc:5a:85:70:19:
6a:5f:eb:a3:e7:c8:69:99:9e:9a:81:6c:a1:bf:ba:
69:46:1b:14:c2:d2:eb:e5:a9:12:0e:64:cc:93:c1:
59:e2:45:b4:c7:29:64:19:04:5d:13:7a:d4:c9:fd:
07:91:a4:f8:40:3d:dd:0d:9f:91:b6:42:ac:73:3f:
8d:e5:41:3b:78:07:4f:12:65:5b:01:f6:36:dc:ee:
7f:55:a9:e7:b2:21:40:85:67:a3:cc:20:5f:96:a1:
43:d8:77:ef:4a:28:8e:dc:70:38:59:6b:98:1b:48:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:39:BA:3B:70:EB:E7:E7:48:A3:FB:90:58:40:20:0D:52:DA:67
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:93:98:6b:ca:17:95:b8:38:3a:36:78:88:2b:e5:06:8e:96:
9e:85:80:88:78:2f:6c:e6:04:07:e1:83:23:22:3b:19:69:1c:
b5:76:f6:05:49:d2:0e:fe:54:51:5c:35:92:5b:06:cd:f9:3e:
7d:7f:9c:54:5c:79:d7:4e:71:6a:36:59:05:c4:b2:76:19:2a:
b6:ea:fb:42:e7:18:34:2f:c7:4f:d0:0c:11:0e:90:0b:c9:56:
fe:6e:b3:75:84:e7:14:ce:16:c0:cf:67:85:8d:32:78:92:25:
f8:08:88:ab:d4:5b:7a:48:33:5b:3b:b1:dd:67:78:ee:5a:9a:
e2:53:5b:c6:6f:a8:54:88:c9:76:60:2b:81:60:da:9d:6c:83:
2b:98:f0:a0:18:56:6c:0e:5a:fb:e8:72:3c:d8:87:f9:db:ab:
e1:70:a6:57:73:4b:e6:2a:cc:90:65:cf:c1:6b:c3:f2:57:64:
93:bb:2e:e4:bd:3e:9c:11:7e:7b:51:cf:57:52:ac:c7:19:df:
80:ef:83:3f:4e:7b:95:43:2a:6b:1e:19:0b:7d:fb:ee:ec:07:
22:3b:0e:db:33:8d:fa:bd:4d:50:dc:e8:d8:27:84:86:ba:c0:
e6:38:f2:b0:aa:0d:06:26:ab:0c:47:ec:10:50:36:67:2f:10:
7d:bd:18:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:27:58 2025 by rpki-client