Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: 1O8X6jHcLrYouhC/yhQUuiKm7zm9bNggIaVPhCGj5FI=
Subject key identifier: 83:36:66:E7:E1:8F:B1:3C:D0:9C:11:C7:F2:5F:78:3D:E4:5C:5E:A4
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 01974C9FEFDE57EBFCF7C9D4CF209ABAE238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0420
Signing time: Sat 07 Jun 2025 23:00:39 +0000
Manifest this update: Sat 07 Jun 2025 23:00:39 +0000
Manifest next update: Sun 08 Jun 2025 23:00:39 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: PHsyhhgnSrsTmBrViSfXGyyzFMKltJQOrGA3rDO9g14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:ef:de:57:eb:fc:f7:c9:d4:cf:20:9a:ba:e2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Jun 7 23:00:39 2025 GMT
Not After : Jun 8 23:00:39 2025 GMT
Subject: CN=833666e7e18fb13cd09c11c7f25f783de45c5ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:ad:2f:47:37:c6:67:2d:21:e9:6c:74:c9:
6c:fd:f1:20:b5:ac:68:d6:33:29:fd:ce:56:c1:fb:
77:4d:fd:44:f4:ea:d8:99:be:1a:42:74:1a:ba:1c:
bb:c9:c7:27:d6:27:a9:73:07:8e:93:f1:26:59:93:
24:4a:f1:76:8e:af:7d:b2:37:24:12:f8:aa:b3:c3:
34:c0:9f:6f:84:64:42:ee:45:de:c4:f6:24:60:d4:
76:36:b5:95:a5:82:4d:5f:d4:5b:14:e5:21:2b:fc:
11:4b:eb:45:43:cd:44:d4:b3:54:b5:03:e3:e7:53:
d6:33:3a:db:8a:f5:88:47:32:ab:30:69:97:45:28:
37:8c:82:6d:f5:13:22:9f:b6:73:c2:c4:d4:98:0a:
de:7a:6f:90:22:71:4f:47:a4:80:22:7b:83:72:5d:
21:79:b9:70:f9:de:06:b8:a8:8e:0b:7c:7e:61:77:
db:de:00:cb:e0:24:ea:24:d5:e0:80:8a:f0:56:2f:
37:c8:51:0c:49:47:f0:78:2a:13:ad:51:fd:99:30:
1f:23:6f:9f:4a:b1:7b:4d:af:24:2a:51:60:61:68:
5c:15:bb:ed:da:9f:20:b7:f9:c6:d8:d0:f0:d3:37:
53:db:2b:bb:20:ae:ef:d9:a3:5e:d9:1b:f3:af:5d:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:36:66:E7:E1:8F:B1:3C:D0:9C:11:C7:F2:5F:78:3D:E4:5C:5E:A4
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b3:1b:80:66:2f:61:19:d1:a7:d1:76:0f:e8:e4:2b:6c:1c:
53:a9:d3:5d:d0:d6:ed:16:25:8d:12:35:a9:79:a9:45:b5:fa:
4a:65:c8:ea:dc:85:c8:d0:eb:fc:5e:4b:7f:ac:bc:fb:d2:72:
a0:cd:b5:ba:9d:a1:23:c6:1a:37:ef:ec:ab:be:00:12:b9:bc:
a8:39:45:d5:a2:63:33:ec:01:b6:6a:3c:04:4e:94:13:60:96:
f8:66:ad:01:bb:ac:e2:a4:98:52:ba:d0:54:af:8d:c8:c5:1c:
d6:72:0f:a2:26:5e:47:70:7f:44:a4:93:de:7a:8d:d6:a3:b4:
3e:e5:66:df:12:da:eb:57:4b:4d:89:75:2c:dc:0b:3a:c7:27:
b8:f8:00:1a:89:7d:b4:bf:59:b9:9f:13:f3:79:12:46:64:be:
f5:00:90:a1:fb:de:50:5b:5a:67:64:c9:4e:1e:e8:18:a0:f4:
8d:f6:17:8a:5a:45:5b:2b:fe:6a:20:15:bb:64:fa:0a:79:be:
8d:40:c2:55:c8:9e:18:35:52:60:63:99:7e:44:b6:4b:49:a4:
23:21:c0:00:80:0b:ab:bf:54:39:52:06:d1:44:7c:93:50:f6:
d7:11:8d:91:96:c1:c2:f1:1a:14:61:42:24:c3:13:cc:74:6f:
67:70:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:31:10 2025 by rpki-client