Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: uBnUrpnytjBYrE2BBvZcOWmrdtufk3ZrJ3irXx6r6zw=
Subject key identifier: FC:F7:0F:D6:EC:D7:C6:89:0A:16:5C:03:86:33:36:A1:F0:D3:4E:7E
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 01976C6201F7381E5A1C2F3E36103A13287B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0BAE
Signing time: Sat 14 Jun 2025 03:00:51 +0000
Manifest this update: Sat 14 Jun 2025 03:00:51 +0000
Manifest next update: Sun 15 Jun 2025 03:00:51 +0000
Files and hashes: 1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=)
2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=)
3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=)
4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: UpjcIZAaXgoWjWfvF12RGBM8bozkqn1rVfXiuJVp5Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:01:f7:38:1e:5a:1c:2f:3e:36:10:3a:13:28:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Jun 14 03:00:51 2025 GMT
Not After : Jun 15 03:00:51 2025 GMT
Subject: CN=fcf70fd6ecd7c6890a165c03863336a1f0d34e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:7f:02:06:77:31:fa:38:9d:93:32:bb:e6:
c5:a0:43:19:ec:56:47:f7:03:48:20:e1:94:ef:6a:
ff:13:0d:ab:2a:1e:ff:5e:4b:82:38:10:56:2b:dc:
ad:67:38:55:82:d7:7f:87:93:22:65:d9:a1:90:bf:
06:f6:2a:db:b4:31:e9:5c:e3:ee:e9:e7:51:34:2e:
f2:ae:26:4e:3b:3d:1f:53:7f:fd:dd:ab:b1:36:af:
f6:91:5a:53:df:da:d8:4f:c5:97:34:3c:15:00:d7:
e0:ac:2d:7d:83:c8:36:37:b3:ac:96:a5:7b:0d:17:
8a:0e:94:0f:35:ac:10:1d:b0:47:c4:c9:1b:04:56:
5f:5d:52:7a:a0:be:40:1b:a8:77:a4:81:8a:0c:97:
0c:85:88:57:ff:2f:cf:b6:9d:20:fc:c8:4e:83:36:
73:03:de:7b:75:c2:63:e1:29:fb:73:5b:65:67:37:
46:5d:29:c6:ba:8b:ef:72:00:fd:21:3e:89:2d:27:
e5:08:f4:2c:20:41:08:dc:d5:4d:df:03:65:40:bb:
fc:05:ed:7a:82:a4:a1:42:4d:12:9e:2b:21:d3:cc:
9a:83:85:7e:9d:ce:9b:b8:6b:bd:96:4a:9a:90:67:
df:e2:75:c3:d9:80:72:71:48:b9:a1:a3:8b:cc:d4:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F7:0F:D6:EC:D7:C6:89:0A:16:5C:03:86:33:36:A1:F0:D3:4E:7E
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:25:4e:b2:8b:09:5f:8c:c4:bf:2d:5e:43:29:22:6a:e9:d4:
ed:e7:ea:ee:91:20:1c:03:51:82:5a:f2:c5:ea:de:08:ba:7e:
36:2e:3a:57:2a:07:9a:74:c2:03:db:ca:db:e4:66:03:12:db:
3e:04:38:a0:5e:ca:54:8a:7a:49:8b:cd:9c:e5:c1:26:91:2c:
ad:e2:ae:0a:1d:6e:b9:f0:61:0c:54:80:f4:8b:4c:83:c0:1e:
34:6e:9d:37:ec:8f:7f:3c:12:47:96:1e:a2:e3:78:18:46:17:
75:57:4e:fd:5c:9f:ea:bd:01:5f:82:b4:8e:20:a2:d9:5d:91:
7b:77:34:5f:c0:df:9d:d2:c1:29:e4:f3:6e:9d:ae:42:42:57:
02:e1:27:3d:29:e1:62:91:fd:ab:ce:3e:4a:bb:28:89:db:a6:
6b:16:fd:5a:ff:3e:f2:f9:b3:dd:bf:d9:30:c8:0e:57:81:4b:
96:33:73:ec:0e:aa:cb:18:d8:54:61:19:1d:2a:e7:5b:92:80:
64:91:50:e9:8f:39:e8:85:6c:6a:1a:34:cd:00:8d:6e:ec:47:
30:8d:15:7c:06:36:26:22:c1:ac:2a:8c:90:55:16:83:38:7e:
0d:d5:28:10:51:5f:a3:f8:44:23:54:ea:a0:ff:5e:94:c9:3a:
87:e4:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:25:16 2025 by rpki-client