Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: 5id3C5nWgxCbVKWtkvl9rSA29sET20sDpZ1D3m5Xv7M=
Subject key identifier: CB:BE:6C:37:37:AD:05:2D:10:6D:F3:5E:30:57:1B:DF:E5:80:EF:40
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 01973986C5C9936D72EFA9970E8356413607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 101B
Signing time: Wed 04 Jun 2025 06:00:23 +0000
Manifest this update: Wed 04 Jun 2025 06:00:23 +0000
Manifest next update: Thu 05 Jun 2025 06:00:23 +0000
Files and hashes: 1: AItoBBXTr3JSVEunHoKYVScHBBA.roa (hash: bQ8pPRnSjhK+OHhk4/Jjzl0/46sUTmdeipylWtU4pOg=)
2: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: LHxE7BEqQCKa+BM8oqDbvTE1PDunBzppXcpgU68QqA0=)
3: ublcR1AG8bTtIDegIl4XF5yKZ2U.roa (hash: EReps1m4UdW66UXSYxPeRRxVic46xc68n57xt40fmWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:86:c5:c9:93:6d:72:ef:a9:97:0e:83:56:41:36:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Jun 4 06:00:23 2025 GMT
Not After : Jun 5 06:00:23 2025 GMT
Subject: CN=cbbe6c3737ad052d106df35e30571bdfe580ef40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:fd:6e:e6:6b:db:1e:43:83:3c:00:15:0f:
4c:a1:4f:71:9a:af:39:3e:be:70:89:25:b0:e1:04:
0f:11:33:23:9b:8d:5a:56:56:1d:fd:b5:f3:eb:43:
f8:75:42:89:0a:23:28:cb:6c:66:cd:fd:b1:cd:dd:
c2:07:9f:d1:d0:42:d6:e8:01:f3:39:b4:32:6f:78:
a7:f5:12:c6:84:1a:c1:46:a3:39:d0:23:26:7e:25:
c9:81:a1:56:22:08:55:e9:b7:95:fa:cc:04:a3:8e:
7a:22:ff:1c:43:6a:b2:75:70:44:02:f5:59:51:bb:
44:a0:c7:b0:4d:54:a4:01:a1:74:74:f2:24:95:33:
69:18:3e:85:62:b2:e6:a5:f6:16:15:30:1e:c6:a4:
9c:95:d1:4b:12:30:66:4a:9a:82:f2:c8:19:76:65:
5d:96:e9:53:82:ba:8d:2d:25:ec:bf:19:44:ac:f8:
43:23:ef:74:7d:71:8f:bd:23:71:06:92:9f:e8:ce:
1b:b2:72:ca:84:21:6b:e3:69:05:47:db:9d:2b:a8:
48:2d:0a:d5:8b:e1:64:10:aa:b7:b5:e0:0d:2e:09:
bb:33:37:1d:75:65:a0:1e:e7:6e:3b:4e:7f:22:83:
5b:e3:f1:14:30:87:a2:c0:f5:8b:ea:20:4d:aa:78:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:6C:37:37:AD:05:2D:10:6D:F3:5E:30:57:1B:DF:E5:80:EF:40
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:25:2b:35:28:15:25:b2:04:08:7f:b8:c3:b8:22:6c:18:35:
d3:34:6b:5f:40:79:55:10:3e:cb:db:24:e1:28:ea:02:6a:72:
d9:f4:86:ec:8c:75:28:06:2d:d0:62:25:f3:cb:48:26:18:d4:
88:54:09:de:5c:b4:7f:40:4b:54:ff:7c:1e:8a:af:0a:ac:6b:
a2:51:14:83:3e:dd:5e:b9:c6:56:9e:75:f6:75:c6:0e:89:0c:
5b:3a:36:ea:90:f6:7b:10:f1:7c:3a:74:0e:2d:7d:60:76:52:
3a:da:d4:c8:8d:28:94:55:ef:da:e7:43:32:36:d4:ce:c8:07:
51:0d:19:c3:62:1f:91:4d:dd:f7:bc:69:c5:3f:0f:01:f3:d7:
9b:55:7b:ac:dc:b2:9b:36:8a:b5:2c:e8:6c:dc:c6:98:7f:77:
cc:fa:09:44:bc:56:b3:23:36:d1:f9:90:6f:14:a9:c3:71:55:
05:b9:bd:b8:82:ee:c2:72:9d:fc:58:09:12:61:f0:a8:36:e7:
0c:97:23:a1:49:61:3d:7b:50:44:ed:83:18:0a:be:23:81:d0:
0f:6d:12:4b:e9:7e:fb:8a:84:37:56:72:19:b2:cb:fc:f6:b4:
69:ef:cd:e1:77:95:b8:3e:92:10:b1:6c:fc:92:da:56:46:a8:
9d:bf:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:19:54 2025 by rpki-client