Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: LjpFfG/zDKqeHCSDQU1GDrYxXUW3OManK/qNgwApms4=
Subject key identifier: 72:4D:11:10:C4:C2:D2:A1:A3:3D:99:5B:F7:77:1F:01:FE:9D:4F:52
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 01976AE167CE624A721DAE9D559E2358C41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 03E4
Signing time: Fri 13 Jun 2025 20:00:46 +0000
Manifest this update: Fri 13 Jun 2025 20:00:46 +0000
Manifest next update: Sat 14 Jun 2025 20:00:46 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: ulhDjivG4xVPTH2axGVeEZt1cGms1FCDBMP3E0721EM=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:e1:67:ce:62:4a:72:1d:ae:9d:55:9e:23:58:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Jun 13 20:00:46 2025 GMT
Not After : Jun 14 20:00:46 2025 GMT
Subject: CN=724d1110c4c2d2a1a33d995bf7771f01fe9d4f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:17:ec:84:29:d1:f0:a1:3e:96:af:cd:31:
68:05:c1:e2:b6:e7:13:70:68:63:c8:6c:90:24:4a:
7b:fd:2a:e8:d6:4f:a1:38:65:8b:63:aa:73:b4:4b:
0d:1e:ed:64:ee:3e:14:09:31:a2:b1:57:17:fa:6c:
e0:30:76:c8:06:bc:40:c4:d2:41:89:81:e3:0e:88:
3b:be:29:a0:d4:f3:0a:cd:24:df:1e:46:22:ad:f8:
9a:99:50:df:93:67:9e:4a:a3:c2:70:f2:7a:57:1e:
c8:df:15:30:ec:65:7c:03:ad:24:15:bb:02:94:e1:
1f:eb:6b:1d:72:bc:eb:c5:a7:9d:39:80:fd:43:cd:
0c:59:79:d7:f0:41:d1:50:11:98:ac:62:fc:5b:3e:
ed:55:f0:02:39:5a:5a:04:76:67:38:a9:83:86:dd:
f5:bc:63:df:0d:53:c5:db:ec:1c:13:79:a0:1c:ad:
4d:02:a9:87:16:ba:b4:84:37:b5:ed:d4:b9:f6:36:
e2:e6:75:eb:78:62:3d:ba:3c:3a:17:5b:99:ba:2d:
9f:fa:ff:64:74:18:b4:7d:59:7b:b2:41:00:63:c9:
39:57:db:20:71:e1:71:4e:cd:b8:8b:b8:04:d4:3a:
4f:5f:75:4c:23:4e:73:b3:10:36:50:8a:4b:1c:d8:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:11:10:C4:C2:D2:A1:A3:3D:99:5B:F7:77:1F:01:FE:9D:4F:52
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7b:43:23:28:73:95:95:19:cb:31:9e:75:52:c2:de:a2:42:
b4:58:a7:4d:ae:5e:3b:bb:d6:33:db:90:12:55:3a:97:dc:7e:
9d:57:b0:28:e5:54:37:24:68:8e:b7:08:c6:da:26:f0:5a:46:
c6:fc:76:23:33:f0:10:1e:3b:84:e2:66:32:7a:91:a7:8e:32:
c5:fb:fd:d3:1b:89:e9:11:74:31:35:85:f8:3a:ad:26:59:d9:
40:3a:67:ca:13:17:4d:41:05:9e:b6:9a:31:40:68:50:d3:3d:
ba:74:9b:59:e8:33:4e:2d:b1:c1:b1:4e:cb:36:36:bd:07:39:
52:9d:1a:da:e7:1e:89:92:5b:1a:a1:d4:5e:03:b0:be:5c:d2:
e9:65:4e:bb:99:54:db:df:60:18:ae:9a:1c:6b:9e:c8:06:ea:
21:a2:9e:6c:57:fb:fa:da:93:ad:d2:2e:83:0e:1f:a1:6a:4c:
ff:28:be:4e:c4:9f:ae:7d:49:39:ce:5c:6a:f0:1b:dd:1e:a0:
ed:bb:b0:3a:d7:9c:6c:99:3c:80:06:8b:bb:df:47:fc:0f:57:
8f:f4:70:a7:81:26:77:87:d8:ef:7f:12:1e:fc:21:0d:f2:0a:
94:5e:3c:f0:aa:dc:cf:e0:48:dd:39:3e:5d:39:ff:4b:38:54:
ca:8c:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:21:54 2025 by rpki-client