Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: 2TZEwxaRLHQa8rSwzHJRJJ1Gp+s5jT68Qz1Oth9SM4U=
Subject key identifier: C5:AA:0C:B7:8E:55:D8:4A:59:5F:E0:A7:77:21:8D:B4:AE:1D:E8:2A
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 01974E8E1637432221B89CF79059A0C949F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 04BA
Signing time: Sun 08 Jun 2025 08:00:24 +0000
Manifest this update: Sun 08 Jun 2025 08:00:24 +0000
Manifest next update: Mon 09 Jun 2025 08:00:24 +0000
Files and hashes: 1: Q8iIFORrHQ7CVyF0u573RC5AZpM.roa (hash: Ui1Waa5hGdzZs2TY0/Jb8NUdFKitTzOn1OfpI/V2JIY=)
2: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: S4prCjmqF0X7xmMf561qmkFLyBWUhbjqiJPbad7LqGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:16:37:43:22:21:b8:9c:f7:90:59:a0:c9:49:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Jun 8 08:00:24 2025 GMT
Not After : Jun 9 08:00:24 2025 GMT
Subject: CN=c5aa0cb78e55d84a595fe0a777218db4ae1de82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:f5:58:91:f5:75:93:b3:63:c2:0f:c7:60:
9f:35:64:f7:0c:7c:ca:3a:6d:0a:af:51:6f:8f:eb:
36:f9:50:a6:53:eb:82:70:76:53:80:d9:ca:27:c9:
0b:43:c8:f9:94:af:bc:98:bc:ea:9d:9d:20:81:2c:
28:34:6d:fb:89:ab:23:7f:c1:4c:bf:b2:a3:49:93:
7d:bb:01:62:0d:16:01:17:5f:22:ca:95:5f:e1:81:
15:3a:c7:3e:1b:bf:58:34:40:5b:d5:97:41:c2:62:
51:6f:01:6d:fd:ee:31:9d:65:c6:4e:79:20:e0:76:
2c:bb:a4:64:bb:43:f6:34:f3:9b:e6:d1:13:b0:6e:
35:dd:7f:2e:bf:ef:15:a9:d1:4c:f7:97:09:85:66:
4a:1a:01:30:3f:5f:eb:eb:1e:cd:73:d3:e1:c1:c6:
af:fb:76:b8:02:d2:e9:f9:0d:17:f5:3f:95:96:88:
17:41:37:cd:83:fe:7e:73:2f:b9:0a:89:13:67:8a:
03:da:2f:40:9a:13:37:ab:49:c3:5c:04:ef:38:82:
7f:c8:1b:36:af:70:30:d9:f1:38:b4:4f:e6:09:9c:
0b:90:7c:40:18:55:1a:02:b3:50:76:c6:b5:08:08:
cd:1a:de:b4:b8:72:50:a8:3f:f4:bf:84:e7:0c:39:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:0C:B7:8E:55:D8:4A:59:5F:E0:A7:77:21:8D:B4:AE:1D:E8:2A
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:23:99:6c:84:a7:f7:32:2e:f4:b2:c4:49:89:a4:49:01:4b:
55:57:3c:60:32:4d:75:d1:d8:2c:ff:31:94:4b:94:11:1b:67:
a1:fe:25:0e:19:46:08:20:29:1e:ec:19:95:8d:3e:63:d8:f2:
49:34:19:3d:59:a7:ca:93:59:71:38:71:11:29:6a:48:81:8f:
bc:30:fe:86:d3:bf:fe:bb:a3:13:81:6a:70:3d:0e:8b:11:85:
a7:9c:35:85:32:89:52:f8:dd:a6:22:50:0d:c8:f8:a2:d6:06:
ca:12:6c:02:a2:6b:2d:69:72:b1:0d:fd:fb:c4:9a:f4:34:e4:
de:03:7a:17:d5:f2:63:14:a4:9d:17:14:1a:d5:7f:28:f3:fa:
b4:bf:e6:17:eb:62:be:d9:e7:05:25:08:71:6e:a6:a9:42:f0:
51:1b:86:a1:fd:e8:3c:51:e9:dd:a4:0e:79:18:23:28:ba:35:
66:af:bf:a6:1c:d7:80:d5:59:c0:55:96:5c:40:fd:6b:57:d5:
15:72:06:37:d2:73:ec:cc:da:b1:71:83:88:a4:1a:40:f6:fb:
1c:7f:69:a7:2c:2b:fd:df:7f:1a:52:71:55:dd:62:d3:87:25:
70:0e:ca:b1:dd:52:41:d1:ac:5c:4e:64:c6:20:c8:86:16:9d:
09:dd:5e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:41:06 2025 by rpki-client