Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
File: oK89hVH73Tti9P_f1ZytQWHkRx4.mft (raw, json)
Hash identifier: RPdFNh+U4aT00Rk98PPGNY1+H7RLsfi8nokNe1LGhk0=
Subject key identifier: 25:C1:31:C3:25:05:11:18:5B:20:7D:14:6E:38:68:A7:5F:D2:C2:5B
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 01974EC5817C56819956BD513F8EB34B00A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
Manifest number: 0D06
Signing time: Sun 08 Jun 2025 09:00:55 +0000
Manifest this update: Sun 08 Jun 2025 09:00:55 +0000
Manifest next update: Mon 09 Jun 2025 09:00:55 +0000
Files and hashes: 1: Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa (hash: uvEwc2Oby4x64qeSjPHNoFr0vjSUe2G9BJiy9VMRAr0=)
2: oK89hVH73Tti9P_f1ZytQWHkRx4.crl (hash: v3BcJ/8FluVfWn1ZBf0CmW6lKQjcUcObmvfsKwR4cXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:81:7c:56:81:99:56:bd:51:3f:8e:b3:4b:00:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Jun 8 09:00:55 2025 GMT
Not After : Jun 9 09:00:55 2025 GMT
Subject: CN=25c131c3250511185b207d146e3868a75fd2c25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:44:20:3e:25:1f:63:a8:ad:08:6f:7e:f1:
cd:de:16:9c:a1:1b:cb:0a:ce:d1:3c:a6:91:7d:37:
12:9f:36:70:f9:3f:32:8e:05:c9:56:b7:c1:f6:83:
5c:57:54:19:ac:19:79:34:72:89:c8:0a:67:c1:5a:
b8:7b:d1:13:ed:58:3d:b7:89:55:cf:59:ce:90:ae:
2b:3f:a4:af:6f:ab:68:1b:3c:5d:b8:b5:37:be:fc:
7d:f5:8d:58:c3:60:3b:f3:e1:7a:5f:ba:c8:27:e3:
e1:bb:25:30:2b:b3:55:78:d1:47:7f:26:81:60:1a:
ef:cf:0f:b8:a8:1e:b5:cf:26:b2:53:c3:d7:92:ae:
9a:88:93:07:68:e5:60:cb:9e:5f:05:25:df:c7:7b:
de:98:73:02:a0:35:49:f1:a4:1b:f3:4f:62:2d:6d:
5c:f3:17:cb:f3:94:38:71:85:31:55:26:34:95:8f:
c5:46:f6:c8:a7:ff:b5:d3:b7:a5:22:16:83:ce:1e:
a2:96:01:d8:fa:9d:c9:79:7c:0d:f5:a0:22:05:cb:
31:5f:3e:44:4c:68:02:95:0c:30:d8:a0:b7:e3:09:
e9:34:69:c4:67:c5:61:23:8e:4f:ab:6d:cf:26:1b:
a2:d1:2d:d0:c4:a2:df:b3:20:d5:1d:43:51:29:b8:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C1:31:C3:25:05:11:18:5B:20:7D:14:6E:38:68:A7:5F:D2:C2:5B
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:66:ae:93:80:0f:8e:4d:dd:2d:75:f2:71:d0:14:58:58:1b:
63:6d:df:62:a7:f3:16:e8:7a:db:7d:b3:ff:2c:dc:a4:b9:6e:
e4:c0:9e:21:4c:75:b3:fd:f4:e0:30:ba:45:9c:d4:7f:5e:f0:
db:ef:07:b9:61:ee:bd:05:72:1d:a4:62:fd:71:24:0d:ec:9f:
c8:bf:73:d2:82:ed:6e:fa:28:b7:1b:b3:97:d9:5d:1e:ce:a4:
a6:39:82:41:ee:2f:01:85:38:b2:53:f8:61:01:4d:d9:1d:52:
7b:d0:3f:4b:64:52:35:52:af:98:f5:a1:b8:74:9a:f8:7f:ed:
70:42:d8:ab:c1:77:73:32:6f:2a:39:97:85:99:a9:cc:e8:dd:
48:8c:d1:20:4a:93:b0:cf:7d:85:81:e8:4f:f4:0c:62:b4:cf:
8b:c0:9c:f7:32:83:f8:9d:72:77:33:40:6d:fa:a9:e4:38:b1:
21:6a:cc:e2:40:c3:4f:ae:77:ee:e8:bd:f7:fa:74:f2:4e:14:
78:88:df:94:42:7b:8c:f7:5a:db:4e:67:03:08:55:cc:d5:13:
09:c2:cf:dd:9e:ff:e8:5f:86:89:6f:1b:a0:56:a7:30:6a:5e:
b9:80:f7:75:a5:f5:5d:81:31:cf:0c:53:36:25:7e:93:3f:fc:
88:c5:96:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:56:03 2025 by rpki-client