Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: cZ4LvByKMwvz5x3QJ+X2vJdtasvibYooUKcDRKyIveQ=
Subject key identifier: 80:D4:D8:7E:A2:CD:1E:F5:38:47:3C:94:11:5F:3E:16:23:C0:BF:9A
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 019750EA67AC13070820C2FBB60F179EB8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 19:00:28 +0000
Manifest this update: Sun 08 Jun 2025 19:00:28 +0000
Manifest next update: Mon 09 Jun 2025 19:00:28 +0000
Files and hashes: 1: IXwdyS86SbDEc5r6DTqF-yyMhKo.roa (hash: MHPw/G9JdYVbN864pG/b/kFkrvcqi5VhnKr+4T0l/48=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: 5Iv4OxydlihnwHmEMcyKgYVzTj8R4GzELaKnGAuvM/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:67:ac:13:07:08:20:c2:fb:b6:0f:17:9e:b8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Jun 8 19:00:28 2025 GMT
Not After : Jun 9 19:00:28 2025 GMT
Subject: CN=80d4d87ea2cd1ef538473c94115f3e1623c0bf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:9a:f2:b4:0b:b9:b0:ad:21:75:2c:2a:64:
f7:86:e4:d0:ac:5d:a4:63:17:b9:0a:76:c0:0d:82:
ae:df:77:f1:84:0f:4a:fa:14:a2:9c:20:3b:c6:50:
55:aa:a8:38:f6:41:c0:dd:98:74:bb:19:84:63:04:
54:80:30:70:f5:07:72:dd:12:0d:1c:f7:e2:4a:19:
f2:7c:80:c7:61:7a:fa:54:c5:9c:37:84:37:2e:64:
62:48:2e:8b:4c:ab:92:a6:98:bd:8f:f4:7a:5a:2a:
64:b5:4a:18:d1:dc:76:45:b1:9a:9e:d8:ad:93:81:
3c:ad:e9:4b:32:65:f3:2f:9d:13:7d:10:4b:c4:78:
a5:36:f3:e5:21:c6:7f:42:4f:2f:b6:a8:5c:d1:19:
40:84:93:42:4c:57:ab:63:52:5a:e9:73:68:f3:72:
87:0e:55:00:5a:22:3f:56:51:1c:b6:df:b4:cd:f6:
9e:06:b1:de:f7:04:b3:eb:8f:48:c2:ee:e2:3a:0f:
b4:58:76:4b:d9:ec:d1:52:13:fa:af:af:4d:5f:a0:
72:46:9d:3c:94:bd:0b:46:01:64:bb:d8:17:77:9f:
e6:02:01:6d:f3:8f:25:2e:78:09:4b:af:a3:f1:f9:
ac:25:9f:e5:70:64:e0:db:54:aa:29:45:df:cb:5c:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D4:D8:7E:A2:CD:1E:F5:38:47:3C:94:11:5F:3E:16:23:C0:BF:9A
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2a:a4:a9:a9:86:e9:d0:d4:69:31:55:ba:c1:f6:c7:72:66:
11:69:7c:64:43:cd:79:db:63:98:40:b2:3c:40:ef:7e:0f:7e:
03:f5:25:cd:97:76:6a:b4:35:54:dc:a3:d8:12:de:70:79:8b:
44:ed:e9:89:a6:5e:f8:e8:0b:dd:d8:93:56:8a:56:ec:af:87:
8a:ea:88:3b:26:e7:38:11:5f:6e:84:bd:5d:fc:f9:a7:15:9f:
ea:46:e3:af:d1:a7:e0:6e:b8:47:cd:f4:ae:bb:5a:7b:0e:a4:
2c:a2:6d:a3:76:da:65:0b:6b:10:0c:ab:74:9c:28:e6:f2:83:
07:16:95:8d:06:5c:ea:ca:26:d7:a2:f2:e3:95:c2:5a:39:25:
8b:6c:c3:0b:99:c2:b0:26:97:eb:5f:30:2e:08:5e:73:4a:58:
5e:92:26:6d:f9:d9:5f:6c:fa:b3:19:ac:2e:17:f9:f9:b1:b9:
cc:ac:81:64:01:20:f1:e0:71:8d:36:0c:3e:47:48:58:16:fa:
60:54:43:ea:4c:d9:f9:42:7c:e9:d9:1f:17:64:47:1d:22:2d:
96:38:4d:a7:cc:d4:af:96:13:75:8f:83:09:a2:2a:c1:8c:25:
0b:b7:23:60:46:2a:a0:87:d3:c0:fd:35:98:fe:f3:d6:3e:24:
be:e3:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:08 2025 by rpki-client