Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: AS2CTHAZqLIO+J1enBUCQWN0XiLE0reNs8ob/gP7y/4=
Subject key identifier: 6C:F0:A9:4C:D1:63:7F:00:B1:6C:A0:17:8B:DF:83:33:12:A3:4E:A7
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 01977CB0D180CD5DADF80217FF6F4BAEB543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 035F
Signing time: Tue 17 Jun 2025 07:00:52 +0000
Manifest this update: Tue 17 Jun 2025 07:00:52 +0000
Manifest next update: Wed 18 Jun 2025 07:00:52 +0000
Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: ouEmHekZwQHlQY4+k5qAhFhWpRaoonEvUMcXtdOFXrA=)
2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:d1:80:cd:5d:ad:f8:02:17:ff:6f:4b:ae:b5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Jun 17 07:00:52 2025 GMT
Not After : Jun 18 07:00:52 2025 GMT
Subject: CN=6cf0a94cd1637f00b16ca0178bdf833312a34ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:01:10:64:f4:39:28:81:3a:62:88:c1:8e:
6e:08:26:c6:89:0b:e5:8f:26:ca:7b:01:4b:1f:bc:
1e:e5:38:0a:68:83:19:f0:5c:8a:49:b2:11:bd:62:
95:95:49:55:d8:10:c8:56:f0:de:7f:b1:dd:58:77:
ef:36:89:1f:cc:f6:b8:af:75:90:97:c1:4c:4c:19:
3d:0c:07:88:88:a6:46:a5:bc:cc:a6:b3:77:9d:38:
8b:35:72:f6:0e:27:46:77:a5:d7:b6:4d:09:d5:45:
99:ac:e2:66:ba:54:d5:44:c4:8b:b6:40:85:c2:65:
18:69:a7:16:18:78:a1:c1:cb:e6:75:7b:de:1f:a2:
95:e6:3f:80:4d:48:c8:89:ed:e5:2d:de:e2:9e:7b:
83:72:46:be:31:bf:92:93:6b:24:58:6a:13:60:f1:
73:c0:f2:b1:ff:a7:df:91:ca:77:bd:f0:6d:6a:3a:
85:38:33:6b:c6:4b:1c:db:43:63:91:81:bb:9b:2d:
3c:5c:30:1f:ae:6e:11:ee:af:d0:6c:e2:21:2b:10:
98:83:2e:4e:e4:49:54:ed:42:00:d8:34:5a:6a:e4:
6d:a6:12:04:11:3c:e3:c5:11:d3:e6:17:9d:e3:90:
ec:96:2a:2c:68:9f:3d:8c:84:31:f7:a1:4f:92:b5:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F0:A9:4C:D1:63:7F:00:B1:6C:A0:17:8B:DF:83:33:12:A3:4E:A7
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:9a:76:e8:c3:28:fc:d8:37:2d:cf:d8:0b:47:41:de:28:
19:c0:83:dc:35:a2:07:5e:d1:1e:f1:22:df:fc:df:a9:cc:5f:
82:9c:c7:9a:6a:2f:c7:b0:d6:7e:bc:b5:bc:2b:47:d3:0c:9e:
1c:38:af:b7:5f:5c:1b:96:df:bb:b0:9b:94:83:7a:00:45:0d:
ce:01:6e:3a:a0:fd:ec:bc:76:fc:70:a6:57:31:b5:06:b5:3e:
2b:82:14:3e:a0:69:04:7c:c5:03:aa:1e:49:a4:bf:e8:44:bc:
77:81:d6:ff:ec:df:34:fa:16:a7:94:66:33:b9:92:bb:0a:c0:
e7:7a:c8:63:a1:c0:41:0c:9e:a4:2e:55:82:5c:8f:37:3b:bb:
a7:c2:2b:10:4e:e6:9f:45:16:43:15:94:08:ea:91:72:6c:2c:
b1:b3:26:51:e0:7a:5b:1d:ca:b1:09:0d:91:42:08:17:2d:3c:
1e:60:0d:3d:4a:d9:9f:d6:7e:2b:e6:67:87:5e:f8:83:97:35:
65:97:2e:24:b3:0e:bb:7d:95:c1:57:1e:56:01:e6:1a:1b:f2:
9c:01:33:e5:58:00:d2:93:3e:60:9e:69:6e:d0:36:fd:e8:5a:
16:6a:c6:0e:31:a6:35:73:19:ae:2f:0d:5e:0f:99:81:be:45:
97:a7:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:22:45 2025 by rpki-client