Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: v3i4Z70wts62YYJUr68YwBVhyh+9dd5TG/qWeWcjzUE=
Subject key identifier: 59:9E:0B:53:AB:87:86:D7:9A:98:08:36:0D:D5:43:2A:BC:6D:0A:49
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 0197567EE18487C1CE4EFA3AF431BA2A7AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 121E
Signing time: Mon 09 Jun 2025 21:00:45 +0000
Manifest this update: Mon 09 Jun 2025 21:00:45 +0000
Manifest next update: Tue 10 Jun 2025 21:00:45 +0000
Files and hashes: 1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: 0vSEebPM4d1RI3dy9AVWQuLzeHDw7O5d9asCAv8y/IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:7e:e1:84:87:c1:ce:4e:fa:3a:f4:31:ba:2a:7a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Jun 9 21:00:45 2025 GMT
Not After : Jun 10 21:00:45 2025 GMT
Subject: CN=599e0b53ab8786d79a9808360dd5432abc6d0a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:9d:a4:63:00:6a:53:6e:fd:15:85:aa:e3:
b0:d5:d8:86:54:c0:53:b7:68:24:89:8e:98:0b:f4:
83:5d:20:16:1a:54:1e:35:f3:d6:a4:6a:8a:bf:0f:
04:a3:9d:e2:b4:dc:05:92:57:1f:07:55:5f:ce:a1:
70:fc:47:d6:19:19:09:d4:89:1a:b6:e6:22:39:8e:
61:b1:67:50:d8:ff:44:97:7d:d2:b0:ee:52:24:55:
93:5d:c2:3a:17:db:c9:85:d8:a0:93:1b:f6:d8:7e:
ca:77:f3:34:76:68:dc:d1:4a:54:5e:87:57:42:f2:
7c:97:a4:5e:97:9c:11:23:e3:54:0f:e2:27:c2:6b:
34:43:15:e3:4e:75:65:c4:88:fc:6c:b0:08:cd:48:
8a:d3:7e:95:a0:04:11:38:18:fc:ec:d3:fb:7b:7a:
16:2a:40:66:ec:eb:84:69:a0:f0:d4:83:de:f8:90:
b1:dc:61:7d:d6:95:29:fa:cd:38:2b:ef:a3:9c:96:
d4:3c:cf:cc:be:ac:78:75:3d:d5:f0:6f:ad:3b:e3:
36:3a:7b:f0:2b:ab:1b:af:6c:5e:8c:aa:f3:3b:8c:
3d:ef:d2:1f:e4:43:99:a3:83:6f:c3:29:cb:9d:a9:
28:f8:7e:2b:93:31:f2:34:8b:72:da:ad:ea:ca:21:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9E:0B:53:AB:87:86:D7:9A:98:08:36:0D:D5:43:2A:BC:6D:0A:49
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:36:3a:67:c4:58:91:e2:46:3b:5b:a6:95:01:c1:e2:6b:5a:
61:34:a5:bb:5d:95:f3:e4:8f:a6:b2:d4:20:75:32:cc:31:d5:
c2:dc:a1:9d:64:97:45:04:36:12:a8:b1:6c:a3:a6:b3:32:dd:
b2:68:bc:e9:09:04:b1:95:9d:fe:3d:8c:36:a2:48:7e:5f:b0:
1d:a3:17:c9:45:b0:94:7c:07:b7:8e:96:4c:6a:54:7e:2d:49:
ee:d2:31:9b:19:04:f1:2b:dc:d9:51:3b:0a:19:1f:8a:4f:50:
74:5b:88:61:f5:8a:b1:44:1f:3f:9b:10:b7:f7:0b:5c:41:69:
6c:55:59:a2:84:35:b1:a8:dc:d7:07:e7:8e:85:d0:b4:8e:f8:
17:ba:a4:e4:23:7d:07:b9:0e:37:1d:ba:ce:cd:45:42:24:53:
a4:7d:8b:42:08:2d:32:b4:3a:7f:5e:33:fd:a0:1b:5f:42:60:
92:9a:42:5e:28:21:30:52:2f:51:16:d2:22:5c:1c:e7:85:e6:
5e:b2:bb:f6:bf:f1:9e:b7:31:b8:40:86:b5:e4:39:4c:e1:80:
1c:e4:89:2f:9d:db:42:19:c5:4f:3c:fd:aa:59:a4:42:64:5c:
c7:82:63:4b:56:bc:b6:76:0c:ec:50:ff:fb:fc:71:2b:7d:45:
90:31:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:45:33 2025 by rpki-client