Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: xeqTQPCf2T/x1Sieib1+69IbDujwzH7gilAcsaG+4HU=
Subject key identifier: 4A:4A:D2:67:1C:EA:26:59:70:89:EB:16:0A:07:00:BF:B6:62:D9:06
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 01976A3CA0777BF15FD27D2EF5B3D1C34A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 17:00:47 +0000
Manifest this update: Fri 13 Jun 2025 17:00:47 +0000
Manifest next update: Sat 14 Jun 2025 17:00:47 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: +N5Lc3LL1oe2iNvWwkHfzjBdOOc4wUIcmDJ+Ycu7oEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:a0:77:7b:f1:5f:d2:7d:2e:f5:b3:d1:c3:4a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jun 13 17:00:47 2025 GMT
Not After : Jun 14 17:00:47 2025 GMT
Subject: CN=4a4ad2671cea26597089eb160a0700bfb662d906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:e8:04:49:3d:9d:12:c5:63:41:4c:48:12:
96:99:b6:e0:d7:9d:0f:1f:f6:9a:36:3a:98:66:91:
07:55:17:86:19:dd:97:7d:89:c1:f5:32:2e:89:01:
c7:69:5e:37:d3:30:d3:dc:1b:27:6c:13:9c:74:c5:
d8:35:60:c4:2f:9b:9d:6a:1d:8c:ec:04:80:10:4c:
ad:12:53:b5:36:95:0b:3f:9e:1a:11:d2:20:b7:de:
d3:7d:e3:97:c6:1e:02:2d:b3:8c:6d:ba:db:87:0a:
bd:a6:98:e5:dc:2a:f9:ba:25:af:e9:c9:e4:ac:f6:
02:7d:08:fb:e5:33:63:a2:3d:5e:2a:b8:3e:c8:0e:
44:50:c4:4e:06:0d:88:f2:76:79:66:d4:14:9b:76:
99:3a:dd:d6:e4:d0:66:0f:78:ff:f8:c8:25:8b:8e:
f0:75:bb:1d:7b:6f:90:fb:2c:51:06:1c:8a:8e:04:
50:10:14:da:5c:3e:47:5b:65:35:7a:b4:c5:35:51:
39:98:ec:69:01:f0:42:d5:0b:f7:7f:5b:f6:3f:2b:
b8:12:0a:f0:4a:10:69:06:90:cb:13:b9:3e:ae:cb:
55:38:e4:5d:bc:2f:2c:a3:28:cd:d9:7e:87:67:cf:
45:96:98:d9:c2:6c:de:f3:e3:5e:58:6e:07:78:91:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:D2:67:1C:EA:26:59:70:89:EB:16:0A:07:00:BF:B6:62:D9:06
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:18:bf:41:49:9d:cf:c2:1d:96:0b:c8:73:d9:72:e4:01:67:
b9:5c:b0:f4:a5:42:93:d5:e9:53:5e:71:be:13:a3:5d:f9:50:
90:03:13:1a:09:06:c5:c8:ae:00:0c:e3:b0:4d:1c:98:7c:67:
a8:fc:70:c3:83:0c:76:64:93:36:10:4a:c6:5e:05:94:60:00:
93:60:6c:dd:21:9c:cf:36:c4:a2:92:d3:ec:5e:29:95:e6:d9:
ff:1d:db:9b:56:1c:25:ba:b4:15:82:19:d8:8b:93:d2:f2:c2:
4c:67:90:e9:46:82:51:83:4f:a7:bf:64:72:e9:82:b1:0f:c2:
55:00:8e:8a:d4:c7:21:05:af:2a:e5:dd:e9:3e:64:e2:9b:52:
08:76:b6:10:c6:81:91:9d:05:48:e3:85:94:ef:50:9e:e5:55:
81:e6:ca:d9:4f:d8:07:b5:27:68:f6:17:6a:aa:48:88:6f:1d:
dd:ce:fa:4b:0e:ee:cc:1c:ab:ea:ed:a6:01:0a:2f:d4:b3:b6:
6a:22:3d:1f:1d:c7:ed:5f:ac:16:e6:64:c6:5c:62:8e:9d:fa:
fc:4d:87:49:e2:c8:3f:21:bf:5a:3d:70:03:5d:a4:c9:55:1b:
af:79:09:b5:1b:6e:fa:26:92:8b:b9:2a:3e:8a:7a:99:d6:68:
c3:3a:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:43:40 2025 by rpki-client