Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json)
Hash identifier: yMpXYmakpyRiEbP7RMiIkTcZJwM9BcrtC38zTyetpb0=
Subject key identifier: AB:DB:DA:7F:25:AB:F8:4C:80:AE:ED:E6:03:AD:18:0C:29:5E:56:3F
Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Certificate serial: 01976B8664BCA181B17D810FAE75B52431C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
Manifest number: 0200
Signing time: Fri 13 Jun 2025 23:00:59 +0000
Manifest this update: Fri 13 Jun 2025 23:00:59 +0000
Manifest next update: Sat 14 Jun 2025 23:00:59 +0000
Files and hashes: 1: KVGzhURun_Z2Cbls6jKq8-siUnI.roa (hash: ICdbcaL6JuM+fFFA7u9Ui1orbNqbZysTahR0X2YtQkM=)
2: hSxuqdFakuVuEvKUogCcsFaigPs.roa (hash: Xj6H7DBsScqxHUyFTpNMVSRKFfZSSLZGI1xOM2DNsyc=)
3: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: SPN2RQdpL0ojiG2u30LyASJ3hVSXj0gz6pDOBfatGNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:64:bc:a1:81:b1:7d:81:0f:ae:75:b5:24:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Validity
Not Before: Jun 13 23:00:59 2025 GMT
Not After : Jun 14 23:00:59 2025 GMT
Subject: CN=abdbda7f25abf84c80aeede603ad180c295e563f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:ce:6b:14:ce:78:0d:b3:90:21:27:e5:fc:
6e:84:43:f1:9a:df:c8:7c:ea:d7:0d:1c:f7:e9:11:
94:1c:41:de:13:61:cc:54:25:9a:4f:ac:0b:e0:63:
0b:73:44:9d:cd:ca:db:a2:24:8d:5c:29:22:c7:9c:
5c:70:2c:fe:21:a0:45:30:f7:95:2a:79:77:6f:23:
d1:9b:8e:5f:8a:e4:07:6a:81:35:25:95:4e:d9:83:
d1:4f:70:9e:1f:4f:0d:08:18:3a:ae:cb:55:65:ab:
a3:8c:98:95:4d:cb:12:e0:cd:18:74:52:d4:3c:de:
08:35:28:4c:ce:ad:75:58:ee:b7:16:e4:98:2a:20:
e9:a2:bf:2f:e2:f2:41:99:6b:dd:ce:cb:02:07:86:
69:9b:31:27:3c:50:c3:61:46:5d:f9:91:76:7a:a9:
73:29:6f:33:03:94:1b:12:d9:ec:33:57:d8:20:e7:
81:1e:f4:c9:28:76:d5:7d:f9:b5:5e:69:67:da:7d:
82:be:ba:fd:c3:83:d9:40:8c:0c:63:2c:99:db:37:
90:5b:77:4a:39:ec:d2:95:f2:ac:d1:51:b9:fe:2f:
12:04:73:f0:b1:44:85:8c:28:45:75:ec:62:24:f6:
a6:64:84:17:16:a5:7c:33:9b:d3:89:7a:72:42:87:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DB:DA:7F:25:AB:F8:4C:80:AE:ED:E6:03:AD:18:0C:29:5E:56:3F
X509v3 Authority Key Identifier:
keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:40:89:2d:58:aa:ef:32:64:e3:97:bb:45:ec:53:c4:cb:0e:
53:6a:06:68:86:30:49:eb:54:0a:b3:4e:64:73:2f:99:a6:d0:
f1:a3:37:99:d6:89:f4:eb:2e:af:bc:15:9c:6a:f1:e2:47:4c:
2d:43:bc:73:e2:3d:53:f9:f3:61:ac:46:9d:d6:64:16:4f:8b:
6b:f9:ee:00:80:38:7d:f3:9b:9c:c3:3d:0d:85:9b:34:5a:ce:
28:1f:a9:4a:e8:c0:0e:32:1e:a8:ec:a3:a1:f8:78:61:b2:73:
31:b6:ff:b0:33:17:66:21:d4:05:a6:36:56:ce:bf:42:85:bb:
db:2e:e9:af:8f:e8:89:18:2a:b8:80:72:10:a9:be:1a:57:27:
92:29:a8:66:f1:02:7f:c8:67:2b:52:c1:b9:77:78:d2:75:31:
1c:05:fc:ac:c5:04:28:02:86:b2:61:46:b6:24:50:5e:b9:51:
ce:89:48:ae:15:cb:6e:72:a9:b7:83:93:cc:fb:33:32:ac:e7:
eb:11:16:de:59:a4:c5:8b:09:b1:4a:ea:78:5d:0c:48:8a:2c:
87:ac:c3:d2:e9:22:73:0d:0f:e6:a1:d0:cd:2f:4e:ad:f6:3c:
cd:ca:24:2c:d8:86:1d:07:83:83:b9:a8:7f:70:fe:83:89:3f:
ea:25:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:05 2025 by rpki-client