Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: yTHWMrioiZeVAOW3FDOWfwtrUH515+TBD1QYCjt3ay8=
Subject key identifier: D0:D1:7A:87:4D:E4:55:96:FD:AC:DA:62:83:6A:F5:10:69:1A:1C:0C
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 01975CB8316EA21C6C9788CF7BF32011B07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 02:01:04 +0000
Manifest this update: Wed 11 Jun 2025 02:01:04 +0000
Manifest next update: Thu 12 Jun 2025 02:01:04 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: amNjjqGCyPwU4VvEEqcRz9uq58VpfZGLYgz+CQr7yfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:31:6e:a2:1c:6c:97:88:cf:7b:f3:20:11:b0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jun 11 02:01:04 2025 GMT
Not After : Jun 12 02:01:04 2025 GMT
Subject: CN=d0d17a874de45596fdacda62836af510691a1c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:cb:ed:94:03:8b:0b:13:e7:29:9c:f5:76:
9b:ec:33:d4:99:fa:f0:b4:ef:98:be:4e:df:e1:7b:
39:9c:02:0d:9f:69:92:5d:c9:1f:d9:6b:2e:86:cd:
8e:ce:88:4a:c2:33:6b:03:3a:fc:0b:e8:d4:b6:6d:
dc:f7:79:d7:ee:f3:31:95:84:8b:50:df:d1:bb:7c:
c8:48:38:0a:6c:41:93:62:d4:9b:0b:3c:7a:d5:13:
98:a0:93:07:37:5f:9c:79:f5:53:fb:9f:df:b8:8f:
da:e6:e3:e0:b4:a2:46:25:9b:de:d3:7d:39:fb:3d:
a5:6c:11:4a:1e:9b:6b:31:69:d1:b5:c5:18:02:2b:
7d:02:96:c6:82:ba:5b:88:07:e8:f5:7b:c2:4f:f6:
57:f8:21:a1:aa:af:67:ec:0d:4a:f3:ec:64:0a:2e:
77:73:ff:ec:b6:ef:7a:7e:65:22:69:f7:e2:98:40:
d5:33:e1:3c:39:ec:fa:7d:dd:99:f6:bc:a0:d3:6c:
bd:70:aa:ba:0e:d8:4e:1a:39:97:d0:ba:e3:0c:56:
f4:42:3b:43:da:07:ef:5e:2f:c0:4b:a4:99:1f:d2:
46:f6:41:83:f2:d1:c7:03:49:38:46:33:ab:e7:59:
0f:d2:90:0e:68:4c:ca:9c:d3:9c:0f:05:54:6d:22:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D1:7A:87:4D:E4:55:96:FD:AC:DA:62:83:6A:F5:10:69:1A:1C:0C
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b2:18:d8:50:8a:4d:d8:7f:c0:f7:7c:65:49:ae:78:88:07:
1d:dd:34:0f:52:86:35:a5:8a:df:46:78:92:0b:a8:b7:da:72:
3f:df:2c:58:e4:09:6a:74:ed:31:35:fd:f4:82:33:9e:96:8d:
02:da:5d:a6:44:2b:4c:14:3e:ba:ec:f7:ba:45:f2:c1:a1:cc:
b2:25:72:1a:cc:02:88:31:e6:0b:e2:5d:04:28:17:91:42:65:
01:c8:91:87:d5:12:57:d7:3b:2e:93:9b:91:cb:98:88:c6:2c:
6e:4e:1f:3b:6a:19:44:4b:74:0b:d0:a5:6a:ff:4b:ad:61:13:
14:4b:62:b8:d0:c9:de:9c:19:31:f5:f1:22:6d:e8:4a:19:54:
b3:22:96:23:a9:43:c3:fd:b8:60:8a:6a:ba:d8:31:70:ba:97:
66:4c:6b:34:d0:52:ac:ed:d1:0c:7b:74:1d:21:91:7e:df:23:
48:37:36:99:5b:73:9a:48:91:6b:d9:71:a0:a2:22:0f:52:92:
33:02:e8:7e:a7:d8:38:00:17:a3:64:0b:9b:40:0d:0e:0f:4a:
3e:8e:93:c0:8d:38:67:3c:72:06:5d:03:90:60:6a:7a:c8:2f:
ef:ec:ab:2a:81:cc:83:50:c7:9b:aa:68:52:40:8e:14:83:a3:
82:af:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:49:51 2025 by rpki-client