Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: ui7tU2TdO7KPEgNvCnJumaj+oB4BDy6S8yjKecxNOq0=
Subject key identifier: DF:5F:5A:DA:C1:1D:D8:3C:DE:02:2D:20:7A:BE:8F:FF:17:46:4B:FB
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 019747798E8B6722A962D3F1924B52F4504F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 1275
Signing time: Fri 06 Jun 2025 23:00:38 +0000
Manifest this update: Fri 06 Jun 2025 23:00:38 +0000
Manifest next update: Sat 07 Jun 2025 23:00:38 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: v4+2K50aRrPudtRKGaWDxZEc4Ex9kRmO1quqTSM+Q1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:8e:8b:67:22:a9:62:d3:f1:92:4b:52:f4:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Jun 6 23:00:38 2025 GMT
Not After : Jun 7 23:00:38 2025 GMT
Subject: CN=df5f5adac11dd83cde022d207abe8fff17464bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:bb:7c:0b:a7:06:3e:53:cf:73:d9:38:15:
ff:ce:21:ff:b7:5f:e6:f2:d4:75:41:fe:4a:32:57:
43:10:39:86:c3:fb:09:b7:dc:f9:8d:58:fe:f1:7c:
60:2e:c5:d6:fe:66:1f:b8:bf:0d:13:09:ce:b7:37:
0a:52:88:8f:78:27:75:b2:fd:29:b5:4d:aa:f1:f8:
8c:ac:db:68:61:06:5f:f7:27:bc:ee:f8:24:4c:09:
04:8e:05:e6:b5:25:43:7a:4a:dd:ac:11:6f:1f:a1:
46:b6:ee:ce:64:d8:e7:aa:39:e6:47:d3:35:61:18:
99:e3:32:aa:3a:16:86:5f:2e:6f:a5:b9:2b:94:97:
1e:d6:df:2f:1e:0f:84:d7:58:89:f1:c0:b2:d6:d9:
62:3b:a0:cd:1c:26:0b:94:91:0e:0f:37:c3:d4:92:
84:ea:45:26:b9:f6:bb:92:10:74:c2:7e:01:6f:e2:
9c:2c:88:32:cf:30:70:c7:2c:1c:3b:8a:ed:3e:00:
09:0e:39:98:a9:a8:1e:94:c2:bd:50:76:a6:ea:1d:
82:d3:a2:41:aa:4d:82:10:d8:e7:d5:ae:57:55:e4:
e9:85:16:05:6e:e6:56:73:e6:d9:7c:22:21:73:8a:
b8:36:6f:7f:9f:b5:3a:a0:85:c6:fe:d2:65:57:24:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5F:5A:DA:C1:1D:D8:3C:DE:02:2D:20:7A:BE:8F:FF:17:46:4B:FB
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b7:f0:dd:29:67:a7:5d:d0:d4:9e:ee:1c:df:d2:da:a5:4a:
62:2d:80:92:1b:4f:48:4b:58:a0:45:9b:4d:0b:42:9d:70:8c:
f6:bd:0e:dc:76:b0:17:c8:73:58:fb:df:20:5c:7e:8c:a2:07:
16:cf:18:67:94:51:f2:6c:2a:47:b3:ca:0f:dd:f7:ca:83:9a:
ef:ed:e0:b0:ec:d3:f3:d9:4c:06:2d:76:30:8c:0b:08:96:90:
00:f9:b8:93:e3:39:5d:5e:d5:dc:4e:e0:28:a5:59:4c:06:d0:
16:8a:80:a4:4c:87:fa:78:02:d7:f8:f6:03:3d:f2:47:58:ab:
4b:02:a5:94:8f:65:a0:68:61:d3:27:bc:b5:ce:c0:bb:01:51:
5c:19:fb:70:38:9e:1e:b1:2e:0c:76:54:20:09:25:d8:46:de:
7d:14:b1:ab:fa:5e:4b:dc:6c:5e:0f:07:86:69:d4:c2:97:8a:
09:14:41:0d:50:d9:75:fd:47:02:87:26:cf:19:cf:30:e0:76:
8e:ea:cc:84:a4:06:3e:49:85:e8:5f:49:a2:6d:38:33:25:ac:
1e:2b:75:bf:55:e3:07:5b:84:3e:42:26:08:26:d4:92:0e:bb:
a9:d3:40:ad:c0:dc:11:62:9e:e6:0f:50:a7:7d:90:ab:fb:99:
40:3c:25:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:38:46 2025 by rpki-client