Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: q8Mx1xLE8Fw08W1R5FGdxNe+G6bfGzWazy8LVljBAc8=
Subject key identifier: 53:17:05:6C:5B:F5:91:B7:2C:CD:60:F8:EF:C0:17:B3:BC:93:A6:34
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 0197499F49FDC3D71A8C948F959C1C9941DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 078F
Signing time: Sat 07 Jun 2025 09:01:05 +0000
Manifest this update: Sat 07 Jun 2025 09:01:05 +0000
Manifest next update: Sun 08 Jun 2025 09:01:05 +0000
Files and hashes: 1: KGkiu_v0VLQmN7S0ksdeT71QkrU.roa (hash: JLkvT5B6nB370rTNimZvN5bMsuGtWZVcc7r812WnkMQ=)
2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: 68CssNkBqbyVwhDpIosFuB5nIMuCAOo3wpwEv9vIJeg=)
4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:49:fd:c3:d7:1a:8c:94:8f:95:9c:1c:99:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Jun 7 09:01:05 2025 GMT
Not After : Jun 8 09:01:05 2025 GMT
Subject: CN=5317056c5bf591b72ccd60f8efc017b3bc93a634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:b0:1a:c2:83:85:40:cf:b9:aa:76:c6:ae:
5b:96:82:b2:0c:ae:e7:21:45:80:b7:72:80:4a:c4:
1d:a0:ac:95:4b:88:2d:3f:c3:87:7a:87:3c:e2:cd:
42:0d:a0:9a:89:3c:7c:d4:9f:99:44:3f:52:f0:57:
29:64:56:12:c3:19:1b:93:33:0d:93:97:bd:a6:7c:
74:64:22:5c:11:6f:a8:21:00:de:f5:e1:f2:50:61:
3d:4a:b8:d3:4c:fc:8f:28:3d:24:1a:e1:b3:ee:32:
98:56:16:ae:09:b5:e2:96:5f:91:6e:d3:55:13:4f:
8d:d1:bd:6e:22:2d:ad:74:ce:c7:0b:99:fd:0e:f7:
72:e5:37:6f:fd:be:79:ef:31:c2:40:a8:a5:c6:af:
cf:ac:ff:84:10:0a:c2:37:05:0c:cc:67:01:0e:2b:
33:99:70:f5:f6:f4:19:dd:81:b9:e3:dc:f6:26:d1:
06:e4:52:db:e3:be:6b:1e:95:65:9b:2e:32:55:33:
e2:83:88:97:03:ca:ae:d8:fd:ce:0e:0e:37:e5:a8:
60:ad:27:7d:7a:14:8e:c8:2b:d3:46:d6:57:f5:21:
c4:4b:4a:42:82:0e:8b:c0:b6:b2:5a:a3:29:af:2e:
d1:74:6f:18:b8:19:e9:da:ba:0b:bc:bc:ed:bf:e7:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:17:05:6C:5B:F5:91:B7:2C:CD:60:F8:EF:C0:17:B3:BC:93:A6:34
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bf:5c:a6:21:e3:99:59:99:12:2f:bc:47:93:29:b4:30:fc:
61:99:81:09:79:25:f1:e0:b9:91:5e:46:2c:a8:b4:69:d4:00:
5a:f2:50:29:29:b8:0b:4c:df:f2:eb:e1:f9:51:a4:2a:d4:f4:
39:75:a3:9a:3c:1d:a9:55:0e:46:88:97:83:1d:0c:f5:0c:e6:
0e:8a:3f:0a:45:31:5c:e1:45:a7:66:44:04:73:36:0b:7f:c2:
6a:b7:90:e8:cd:db:9d:82:94:8d:f9:e4:02:22:6d:2d:f6:3f:
24:f5:c3:2e:cc:06:34:98:da:b6:1b:62:c9:8e:8a:18:ae:77:
42:38:28:0f:d4:e7:7b:38:b4:a6:66:e4:f2:22:21:a3:1a:ee:
3c:ee:df:d0:03:e4:ba:91:67:53:0f:30:82:91:00:38:0d:b6:
00:d0:6a:bf:af:70:3e:62:c4:b8:f9:61:99:31:02:ff:16:b5:
b7:67:48:82:49:fe:e5:0e:41:7a:8b:66:3d:4d:ae:4b:2e:4e:
20:ca:0c:96:8f:ed:6a:5d:66:16:ed:2b:b2:e4:cb:d8:73:ed:
46:7a:d2:89:3d:80:68:97:82:1e:d1:c1:af:42:d9:5a:9c:7b:
e1:59:54:4b:c8:6c:ae:98:1d:65:94:57:b9:da:65:85:3e:69:
71:64:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:43:13 2025 by rpki-client