Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: 54nnnkasLX156aq0dfLWe/769+w0oy3woKmBnaLGT08=
Subject key identifier: 6D:90:5D:DC:25:71:C7:C8:B3:C2:1A:17:D0:E8:A7:2F:37:27:3C:21
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 01975310612EED1EDAC8FF9E50610B24547A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 05:01:11 +0000
Manifest this update: Mon 09 Jun 2025 05:01:11 +0000
Manifest next update: Tue 10 Jun 2025 05:01:11 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: 5JtaNY6dFEX7XMMasNYHcpmuS5j8OdzuM1iU8rogNJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:61:2e:ed:1e:da:c8:ff:9e:50:61:0b:24:54:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jun 9 05:01:11 2025 GMT
Not After : Jun 10 05:01:11 2025 GMT
Subject: CN=6d905ddc2571c7c8b3c21a17d0e8a72f37273c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:74:c6:1d:b2:8f:6f:71:e5:06:84:dc:0a:e5:
57:e2:ff:ea:61:99:5c:cd:00:03:e8:f8:57:2d:72:
13:b4:6b:af:90:98:7e:b6:d9:5d:03:3c:ca:29:29:
07:37:e8:34:20:de:75:d7:5d:c2:2f:79:5c:d5:ed:
cd:1b:5c:e8:4e:f5:f2:9a:ce:f0:d2:64:69:6f:4b:
f6:d1:72:3f:44:a0:34:c9:bb:fb:55:80:cf:e0:8f:
92:66:91:23:5b:32:cf:b0:89:07:07:d1:ba:78:95:
41:da:1a:7c:72:1c:bc:b5:ba:20:32:c1:c7:15:59:
39:a5:f4:f5:b6:98:3d:73:9f:26:dc:34:68:d3:e4:
73:de:7a:a6:59:e3:e5:4c:59:5b:bd:25:5a:7a:2d:
20:3c:c0:b1:0a:85:a0:7b:f3:84:5e:2c:c4:c6:7f:
8b:a1:50:56:a5:ce:47:5e:69:1b:55:0c:92:de:07:
8e:0b:7f:d0:58:5b:d0:85:02:7f:4f:bf:a4:fc:c5:
9c:89:6a:53:9c:56:a8:e6:44:da:24:1f:63:01:1c:
71:6b:a4:b5:77:5f:51:0d:ce:ed:77:98:0a:65:1a:
72:47:f8:fe:a7:d1:81:4c:db:0d:fe:ef:06:12:75:
4b:a7:2d:2d:4c:3a:dc:e0:cf:0b:98:14:0e:2e:d9:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:90:5D:DC:25:71:C7:C8:B3:C2:1A:17:D0:E8:A7:2F:37:27:3C:21
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:94:7c:59:13:1d:fd:10:3b:ad:21:61:30:37:4a:af:6a:bc:
29:2a:b9:40:ad:df:50:0e:95:a6:0b:90:b1:4d:f1:3c:39:05:
5a:04:fd:03:82:15:5f:60:77:8b:b0:c5:df:33:ab:3e:57:e2:
b2:5f:7a:ab:29:49:a5:36:33:84:85:b8:39:49:42:b8:4e:d1:
6a:c4:fa:be:30:7c:ae:98:c1:74:75:1e:cb:7a:9c:70:08:4d:
7d:3e:c0:c9:1f:7d:16:56:25:a0:c6:28:c7:56:8c:76:c6:f4:
05:5f:cd:b5:df:1a:79:b3:95:21:80:ef:2b:00:b0:ca:34:07:
f2:03:40:6a:18:e5:fa:e6:f8:24:80:fe:e9:83:5e:b5:3a:0e:
38:8c:66:e7:a3:a6:7c:9c:53:9d:a3:52:1f:2a:55:43:28:c9:
7c:ec:ac:76:0b:46:c3:75:37:29:3f:35:7d:48:a2:d4:c1:f2:
fd:06:6b:ce:4c:0d:23:13:da:07:d5:30:6e:1b:9e:6e:6c:93:
49:2f:90:03:f4:8d:0a:93:1a:1c:83:c0:1f:e7:d7:bf:fb:62:
d0:d0:46:3f:49:42:c8:92:ea:d9:01:e2:6a:ad:cf:e3:93:5f:
2c:38:2d:63:03:6e:ae:78:77:2b:9b:f3:a0:87:1f:84:74:93:
8f:f6:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:33:29 2025 by rpki-client