Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: JliBJ0sAx6+BOSZ3ze2uQK+4KNLtgWGcsXKMxXk+DA4=
Subject key identifier: 28:96:99:02:13:BC:D3:02:4E:FE:C4:4A:C3:63:9B:6F:2D:6A:AF:E0
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 019747B0AD89074EDC662D815116D2C52B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 0EFA
Signing time: Sat 07 Jun 2025 00:00:50 +0000
Manifest this update: Sat 07 Jun 2025 00:00:50 +0000
Manifest next update: Sun 08 Jun 2025 00:00:50 +0000
Files and hashes: 1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=)
2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: PmRRV8++OIpEzC5rGbCR0hIb3K5NTlbqJwqoTL2w4F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:ad:89:07:4e:dc:66:2d:81:51:16:d2:c5:2b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Jun 7 00:00:50 2025 GMT
Not After : Jun 8 00:00:50 2025 GMT
Subject: CN=2896990213bcd3024efec44ac3639b6f2d6aafe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:39:83:ee:dc:9f:74:0c:de:31:1e:21:af:
6b:b3:89:a5:71:d4:e8:d1:6a:df:3b:cd:f4:71:f1:
43:a5:84:31:fa:e7:b4:f7:36:ae:58:5e:8d:f8:5d:
46:e0:42:a0:86:26:f2:4b:d3:ce:7a:16:64:ff:e0:
09:a8:6b:3f:7a:fb:fe:fb:b9:8b:85:c4:e0:ff:ed:
d0:03:1c:85:61:4d:1c:36:08:4d:e9:bb:47:c6:f0:
ff:e1:5e:17:19:b7:88:b4:39:5c:e6:32:c1:a6:73:
f7:1d:32:7b:56:36:38:d7:a6:52:0b:eb:f2:03:34:
51:5c:13:d6:07:2b:ed:64:ca:b0:70:a5:1d:7a:3f:
de:5d:26:c5:1a:99:93:04:25:61:ad:42:74:87:8a:
cd:2e:29:b5:95:4d:74:72:79:27:53:9e:e7:2e:ca:
1f:c5:82:6b:af:8d:cb:cd:39:69:fb:4a:bd:5b:b1:
aa:68:19:3c:4c:36:c5:4c:41:1f:f9:7c:c1:df:b4:
2e:32:f2:0c:d0:4d:67:39:a1:f2:a3:7b:5d:8f:38:
3b:84:fd:2a:3c:52:26:5b:d1:ea:35:2c:00:4e:2a:
8a:ca:ad:3e:ca:26:f7:61:58:08:ff:f6:d2:93:3c:
40:83:8e:c4:7d:f6:14:af:0f:61:22:1d:be:60:01:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:99:02:13:BC:D3:02:4E:FE:C4:4A:C3:63:9B:6F:2D:6A:AF:E0
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:27:7b:1a:8f:0f:01:df:7e:b9:40:4a:04:e8:6d:3b:09:3f:
f9:1e:d5:a5:4f:06:e1:0c:e3:0d:ba:10:ea:ff:7a:12:50:22:
b0:93:de:40:b9:9c:47:48:91:c1:ed:70:79:2c:fd:93:aa:1e:
d4:ee:e6:65:3a:37:2d:92:34:cc:ea:68:77:16:a7:d8:14:8f:
f9:9a:9e:1b:bc:5b:bc:10:ac:e0:d9:75:fb:18:b7:7a:6f:16:
0c:07:29:13:5d:ae:1a:f7:6c:33:73:97:6c:63:f3:2e:62:dd:
e7:e1:00:fe:c8:de:40:f2:a1:2c:97:b2:4f:ae:cd:51:2d:dd:
ac:61:27:92:5b:69:8e:f0:62:68:e1:4a:1d:1f:28:22:fd:fa:
27:4e:48:0c:ae:3b:40:3c:b6:a7:41:46:4d:9b:74:3d:e1:c0:
e8:6e:14:82:92:03:a7:81:fe:5c:28:fa:cc:39:a6:7f:43:0d:
19:4d:60:44:cc:8c:5e:16:6a:a5:eb:06:e3:fc:c8:56:cb:8d:
e4:66:f2:6a:d1:28:3d:0c:f8:37:8e:15:24:f4:d1:70:bf:13:
d3:6f:3d:8f:31:43:3f:ab:9d:ff:17:7b:82:a9:9b:28:cb:cb:
c7:09:b9:b4:43:15:5f:d4:85:12:e4:5f:79:f2:7b:a4:03:f6:
b0:7b:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:40:41 2025 by rpki-client