Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: C+spSNteVOY94R0IcQIrzFXZzoLSkNWFSyFCK2L8bwY=
Subject key identifier: 1B:2D:31:AF:56:07:14:09:1C:28:74:D1:71:DD:B9:82:3B:03:C9:6C
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 01974DE9BEE104D7558AA5F951BD4AB0DDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 0E1A
Signing time: Sun 08 Jun 2025 05:00:53 +0000
Manifest this update: Sun 08 Jun 2025 05:00:53 +0000
Manifest next update: Mon 09 Jun 2025 05:00:53 +0000
Files and hashes: 1: FGRnxc9C3d9faJa4e9X6S4cHjFA.roa (hash: d5SgFAeT21YMWMJqdCASd/9NKR53dDrqmG/NUaV6X8s=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: dAV8ajjQmypPYTbKh2jD/I8DlaOb2CB9OS0PtAbF1EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:be:e1:04:d7:55:8a:a5:f9:51:bd:4a:b0:dd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Jun 8 05:00:53 2025 GMT
Not After : Jun 9 05:00:53 2025 GMT
Subject: CN=1b2d31af560714091c2874d171ddb9823b03c96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:2d:f5:d1:24:fa:d2:49:b4:6b:6d:af:7a:
b7:37:1a:c8:eb:54:a5:5b:a5:23:cc:f8:2d:15:74:
87:66:bc:57:fc:96:18:3b:7b:da:10:74:02:ee:8d:
74:cd:98:1e:16:c9:5d:80:b2:70:c6:76:8e:80:a0:
6b:0d:91:76:d9:32:82:7b:2a:41:da:ea:e1:8b:42:
e8:7b:ad:2f:24:6a:b7:b7:a3:6c:6b:dc:f6:64:5a:
f9:bf:11:33:fd:ae:f6:c7:46:ca:f9:ad:a1:6b:b8:
04:66:ff:67:31:58:70:ec:68:58:df:9d:51:4b:10:
a5:9c:ae:70:a1:51:ef:7a:a4:d2:ea:ef:ba:31:0e:
d5:2a:bc:52:83:b2:22:bf:f7:be:a2:77:80:7c:66:
80:37:5e:d1:5f:55:b1:d4:8e:6e:4b:b3:72:f8:3d:
eb:39:72:57:fd:a1:18:45:3e:83:df:05:cd:24:d1:
ef:ef:8e:3e:eb:c5:48:7b:f2:57:b0:91:93:4a:c1:
21:67:99:6d:85:a1:69:8c:43:76:8d:15:78:89:be:
45:41:ef:c1:2d:01:a0:f5:c9:cd:3d:55:ec:10:fd:
9c:a3:76:f8:3f:51:c2:fd:e4:fa:00:c3:10:e1:25:
0a:0b:1d:ae:ea:ec:b6:70:9d:2e:73:10:86:6b:6a:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2D:31:AF:56:07:14:09:1C:28:74:D1:71:DD:B9:82:3B:03:C9:6C
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:63:81:01:22:db:bd:74:d4:be:3c:e2:21:30:dd:97:b6:01:
86:a4:53:19:3e:90:7c:d2:34:1b:2e:fb:b0:57:a5:ed:e3:0b:
55:f3:24:54:87:7a:5e:c9:13:54:33:76:4d:fd:87:b9:0d:5a:
54:52:ca:74:28:7c:e7:1e:53:2d:85:05:69:e1:90:88:b7:fc:
18:d6:ac:b0:56:4e:76:b4:15:5f:8e:c7:92:8b:80:80:2e:3e:
3b:12:88:fb:f8:51:dd:b1:41:17:b4:44:74:5c:ab:c8:1f:19:
19:89:ff:74:23:fe:8c:f8:5e:3a:7d:fa:ac:43:73:17:22:28:
3d:3c:b6:95:99:45:09:47:f7:e6:99:9f:96:ce:26:cb:cf:9d:
80:00:e1:e6:2a:f3:dd:5c:76:f0:22:85:de:16:72:3e:c0:0f:
88:32:2a:80:4a:bd:93:94:8a:22:d0:02:91:23:cc:5a:80:10:
22:b5:8c:f4:fe:8b:8e:fe:cf:fe:bf:53:26:b9:c1:94:94:99:
3b:9a:f7:c8:13:26:46:44:bb:e9:b3:5a:e6:17:84:14:93:be:
5a:6c:e4:17:da:d1:4c:1a:10:90:2e:5c:0e:9b:74:0e:e8:c8:
e0:de:54:7c:13:56:a0:57:b9:41:65:b6:08:14:e4:3c:1c:34:
2d:ec:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:53:00 2025 by rpki-client