Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: f+0kfpxsCRBcL5rSFKtpMouYxTiJHUQ7uPPKxt4x7mY=
Subject key identifier: E8:42:DF:2A:91:8E:B8:71:10:F5:F4:75:D2:C3:C5:00:28:8B:EB:0B
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 01974D449E748CEA4310EB340D6C6659A82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 03AB
Signing time: Sun 08 Jun 2025 02:00:32 +0000
Manifest this update: Sun 08 Jun 2025 02:00:32 +0000
Manifest next update: Mon 09 Jun 2025 02:00:32 +0000
Files and hashes: 1: L2QPsEXXxjypDuteGOkuNir3lUA.roa (hash: mcJaTh3VxTTNDuoHtoju+OCGdo4jk9ztR2/hlQRPaNY=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: OAU8XsyMZ7B4SkaZfqum9xhIzQaTd7h9WQYd7fJ5Qlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:9e:74:8c:ea:43:10:eb:34:0d:6c:66:59:a8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Jun 8 02:00:32 2025 GMT
Not After : Jun 9 02:00:32 2025 GMT
Subject: CN=e842df2a918eb87110f5f475d2c3c500288beb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:f6:28:c5:90:e0:cd:c0:50:af:6f:8c:3d:
36:a7:6d:10:13:fb:9b:99:25:f8:42:65:d3:9f:fa:
79:9d:6d:39:f7:65:39:e8:76:2c:00:5e:39:ab:01:
b2:d6:c4:ff:00:52:98:58:f3:62:37:61:fa:0c:c9:
70:a4:5e:b5:7c:6c:3c:95:ad:88:60:f4:95:ac:82:
51:b8:9f:ac:e9:6c:85:65:82:ce:f4:0c:20:77:aa:
9b:1b:f0:4c:dc:cc:3f:f2:ed:a3:61:67:41:71:2c:
8e:eb:f2:7d:e9:e1:e6:58:1f:39:81:21:5b:42:d5:
06:4a:87:43:d9:63:b1:f5:73:64:84:b7:62:ee:53:
8f:e2:b2:b8:fd:3f:61:33:28:e3:74:b6:2d:9a:f1:
2e:70:2f:8c:f0:f5:a2:c9:2c:e7:c3:2f:42:51:9b:
9f:de:49:94:bb:a0:89:74:85:bf:f0:e9:0e:3c:71:
7e:55:63:f5:26:b2:5f:6c:3e:b0:78:f8:43:b6:cd:
ed:a6:eb:96:52:47:ae:72:c1:cf:21:b9:1f:0f:a5:
82:b7:f9:d4:26:b2:30:9e:af:25:28:a3:a4:ae:eb:
40:b6:2e:20:e7:1f:b2:fc:a4:bd:5e:6b:33:7a:87:
71:d2:2d:d4:92:68:06:50:dc:86:fb:29:49:48:76:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:DF:2A:91:8E:B8:71:10:F5:F4:75:D2:C3:C5:00:28:8B:EB:0B
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f6:89:2f:3e:9d:29:10:99:82:f3:3b:bc:5a:5f:74:88:74:
92:3b:03:d1:ab:00:ea:39:e3:f7:a6:d8:db:21:b6:13:04:5f:
41:e5:18:22:8b:32:89:ba:ee:af:10:e4:90:05:39:bf:45:2b:
05:bd:f3:b0:b1:4a:da:7e:fa:9d:35:76:d5:a9:c4:70:9a:d6:
ad:b2:7e:48:9e:22:26:d9:23:17:4d:18:fd:e5:56:a2:76:c4:
a5:ae:27:74:ef:9e:93:a4:5a:c4:ce:f1:d8:34:d4:13:35:d2:
1b:c1:0e:93:9d:be:55:8d:47:b4:8e:5c:4c:23:c4:ad:de:a4:
35:77:34:e0:40:49:a1:29:a9:1c:c8:34:e4:29:21:b4:2a:65:
9f:f4:54:7b:3e:7c:4a:ab:d7:4e:1f:67:96:3f:ef:29:04:ab:
fc:da:87:14:d4:11:d8:63:0d:5c:67:df:8a:ff:29:1f:90:23:
dd:48:de:a6:3d:06:ae:6c:b5:b0:73:e1:5d:33:21:89:66:f6:
3b:c3:15:28:af:02:4f:f1:57:be:ad:b9:b1:1f:3f:ce:c5:46:
db:9e:ea:82:ce:08:a9:ed:3a:9e:99:7a:9f:97:89:e2:2f:a5:
35:a0:8a:13:85:86:66:74:40:35:0a:3b:b9:dc:6b:82:54:a8:
9c:49:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:44:56 2025 by rpki-client