Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: cCehhh8piNq9FsdzwJfIHt3lp6e5sMqMrOdXNSJW3xI=
Subject key identifier: 30:EE:63:6E:58:48:AC:61:95:CE:60:3D:2E:15:98:47:9E:28:55:63
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 01974D44C83B6B31BA8E6081267A748D3D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 0E40
Signing time: Sun 08 Jun 2025 02:00:42 +0000
Manifest this update: Sun 08 Jun 2025 02:00:42 +0000
Manifest next update: Mon 09 Jun 2025 02:00:42 +0000
Files and hashes: 1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=)
2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=)
3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=)
4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=)
5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: TqM06I42Nzzmi7OkY5inXC5VCziQxHY7zCbnKlOusyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:c8:3b:6b:31:ba:8e:60:81:26:7a:74:8d:3d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Jun 8 02:00:42 2025 GMT
Not After : Jun 9 02:00:42 2025 GMT
Subject: CN=30ee636e5848ac6195ce603d2e1598479e285563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:ab:b0:ac:63:fe:33:c0:0a:de:cc:f9:6a:
84:30:e5:2e:37:bf:cf:37:93:d9:c3:4a:78:2c:b9:
a8:46:16:ab:84:54:6d:63:f6:cc:3d:5d:c1:9a:dc:
f4:d9:71:ec:15:81:e0:26:a8:60:45:30:40:2f:ad:
82:77:8d:cc:a1:03:fc:fa:0e:97:be:b0:6a:9d:0b:
70:3e:d8:46:4b:a1:7e:b0:b4:8e:fa:3a:5a:27:ef:
d3:0d:ea:fb:13:8d:62:29:8b:67:00:48:95:12:ed:
58:e1:20:35:3b:3c:9f:fd:85:2d:a5:5b:9e:36:de:
3d:d9:2d:62:9e:b4:84:5c:81:94:80:8a:b3:c3:07:
6e:8f:52:75:44:25:bf:35:ea:e5:3e:38:6d:79:f5:
bf:5a:2c:21:87:ad:90:ba:c3:78:db:3c:fa:56:f9:
3c:27:7f:22:02:ff:a1:ee:18:59:8e:b4:8e:b7:8f:
96:02:1c:0b:71:51:17:47:25:35:4b:dc:0b:ce:de:
27:16:46:1b:fb:1a:b5:9e:00:0f:24:a2:cf:dc:e9:
99:f2:46:a5:9a:af:fe:bc:de:04:56:d8:25:8f:ac:
0d:28:6e:5c:74:31:0f:54:49:00:70:a1:92:98:6f:
79:84:c8:55:be:79:fe:8e:b8:80:e5:63:20:fa:10:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EE:63:6E:58:48:AC:61:95:CE:60:3D:2E:15:98:47:9E:28:55:63
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b6:b7:36:74:2d:cb:45:14:1c:a7:de:0a:c4:31:2c:6c:93:
24:66:83:74:8e:06:76:21:8f:08:d1:a7:9c:e5:16:3d:6c:f3:
14:91:5c:d3:f1:6b:fe:fd:e4:fb:82:3e:95:74:a2:c6:eb:ec:
58:5c:2c:ed:c0:e1:17:26:d6:c9:31:00:58:14:38:73:df:92:
bf:9a:52:41:d3:5f:ad:e0:0f:5c:ea:55:de:2c:8e:67:46:53:
eb:8a:98:ca:2d:1d:a0:ee:33:d5:51:78:65:e5:a5:f7:15:22:
7c:84:69:16:da:2b:a6:d6:44:02:69:49:40:c0:f1:42:5b:e0:
e6:1d:a1:ab:ee:d0:f7:42:17:5b:aa:e5:21:5c:98:6a:15:13:
15:3a:8e:8a:cf:73:8d:c8:6e:c9:c3:f3:6d:91:a2:9b:0e:b3:
9a:46:a5:71:01:a8:2e:30:de:55:0b:aa:84:e3:ef:cd:7c:3e:
a4:c9:a2:e0:f3:5d:1f:05:c0:05:75:13:77:05:9a:64:17:cd:
17:10:fa:02:9d:8a:15:ff:03:1c:06:be:8d:f5:46:fe:41:22:
6f:18:92:3d:37:3e:6d:16:ca:59:2d:28:85:89:0f:5a:8f:2c:
d3:a4:09:53:f4:33:86:bf:06:7b:9a:3f:51:ad:df:6e:e2:ee:
a6:91:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:47 2025 by rpki-client