Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: YDV+ULixC3IZwJxzwWG0l3U1SjqmkS/UbDv7Klns8c8=
Subject key identifier: AC:E1:7B:F5:4A:64:4B:4C:16:CD:41:CB:FA:31:98:BE:45:5E:69:97
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019782E96FF89B931FB69111926FC85977E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 1519
Signing time: Wed 18 Jun 2025 12:00:25 +0000
Manifest this update: Wed 18 Jun 2025 12:00:25 +0000
Manifest next update: Thu 19 Jun 2025 12:00:25 +0000
Files and hashes: 1: NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa (hash: EKuPrmDOqjvIb0P5ALzTBFMc5GRcKpakwtWPyDrs5oc=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: G0vrVFDuCMEsEVcmXDDAnRBKyluHPwvZC8ogyjPEYmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:e9:6f:f8:9b:93:1f:b6:91:11:92:6f:c8:59:77:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Jun 18 12:00:25 2025 GMT
Not After : Jun 19 12:00:25 2025 GMT
Subject: CN=ace17bf54a644b4c16cd41cbfa3198be455e6997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:ac:30:c5:16:2c:c3:52:13:e3:b5:52:9a:
e7:e4:7a:0a:95:e3:8b:fd:11:8a:09:38:64:51:01:
39:06:26:70:04:c8:52:00:5d:a7:b4:72:3c:76:57:
d4:20:b2:53:5c:e7:54:d1:24:06:ee:96:08:7e:b3:
b8:a2:c6:37:99:83:80:22:6c:e2:9c:14:b4:7e:b1:
83:d4:4d:24:41:b1:55:d4:9e:0b:fe:75:d3:2a:2c:
46:f4:5f:f1:08:87:ba:81:2d:e8:81:5e:6a:4f:60:
95:4f:81:5c:0d:d4:a5:ff:49:90:3b:15:81:aa:9c:
b3:5a:ed:c3:81:82:e6:7e:97:4b:1f:a5:61:56:c2:
ac:8f:16:22:70:91:f0:ef:7a:61:18:a9:fc:32:0c:
be:d7:2f:ae:7e:d7:5c:86:c4:58:53:60:43:c1:a2:
b4:65:e4:4c:28:03:72:56:91:28:2a:56:7b:64:b1:
cd:1d:d5:00:44:d4:73:5c:74:c2:9a:9b:30:18:b6:
ce:1f:b0:17:7b:2e:6d:b6:ea:c5:8e:f3:48:b5:cb:
70:14:d9:8a:d0:b6:03:b1:bb:09:07:2e:3c:30:51:
fa:e5:07:e8:e5:f4:14:da:a8:3c:49:f4:ed:ba:d7:
54:78:71:d6:ea:a5:1f:3d:88:b2:79:f2:3a:00:52:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E1:7B:F5:4A:64:4B:4C:16:CD:41:CB:FA:31:98:BE:45:5E:69:97
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:ad:64:22:1b:3f:ad:a0:cf:76:66:69:92:f4:d4:f5:45:
65:c5:0c:f9:15:7c:d0:73:2c:d6:7d:e8:0d:ed:fa:c0:89:bb:
c3:0e:1b:0f:1e:c5:ae:ed:5d:6b:8c:c3:dc:f4:54:18:52:bd:
62:98:10:d8:cc:2b:e8:af:b9:39:c2:82:a4:88:79:b8:7a:ca:
a1:d6:be:3d:1f:e8:2a:fc:16:c5:74:80:0b:86:ed:d2:94:ea:
44:01:c5:9c:53:b3:7b:76:5e:d1:4e:94:a2:2b:62:27:ec:34:
c5:ec:6f:b7:83:f9:32:df:23:42:7b:03:98:5b:e2:cb:b4:b6:
aa:8e:29:7f:e8:dc:fe:ba:c8:60:92:9b:46:00:ab:21:c6:01:
5b:e3:4d:5f:cd:23:18:d6:a0:21:9e:fa:e8:db:ad:d2:7e:03:
2f:53:11:ea:7c:1f:d2:ba:46:31:1c:f8:d5:aa:bd:e6:5e:9b:
a7:88:d6:5c:3f:6e:e6:97:5d:82:49:ad:fc:01:5a:b0:e5:81:
88:4f:08:5c:ef:22:10:ab:99:36:3c:b8:8f:61:0f:77:95:e7:
42:77:71:5d:df:75:b2:df:ad:95:86:f2:c8:22:39:e1:66:fa:
25:90:7d:c0:7e:0c:a6:bf:a3:8c:93:4e:11:43:ed:de:c2:ad:
00:63:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:36:19 2025 by rpki-client