Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: 6F+jueqcHtnlzfDdDk1yV1J2pSK0rzWo0AxucPUjSz8=
Subject key identifier: 24:26:91:38:68:88:F5:F1:3D:6E:73:1D:3A:E9:5B:3F:23:00:9E:9C
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019769CE943287D2C0444B796716B616896C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 0EBB
Signing time: Fri 13 Jun 2025 15:00:35 +0000
Manifest this update: Fri 13 Jun 2025 15:00:35 +0000
Manifest next update: Sat 14 Jun 2025 15:00:35 +0000
Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=)
2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: pt4aiOFJnO0IHucr3Emghpct0lCHsQvO/UumsV9fs24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:94:32:87:d2:c0:44:4b:79:67:16:b6:16:89:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Jun 13 15:00:35 2025 GMT
Not After : Jun 14 15:00:35 2025 GMT
Subject: CN=242691386888f5f13d6e731d3ae95b3f23009e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:3d:15:2c:50:d8:53:3d:5d:4f:fd:6b:ce:
a8:1d:32:61:5b:45:ab:f3:50:fc:2c:f3:78:3e:c6:
3e:de:18:67:2c:61:13:e5:60:82:0c:59:82:c1:ba:
4f:87:fd:42:5b:75:5d:1e:1b:e9:3d:8e:dc:c4:55:
ae:c2:70:d4:69:00:d2:d9:8c:10:47:69:ff:b0:0b:
35:a7:35:f3:b2:58:30:bc:fb:8c:89:c4:0f:cf:46:
a9:75:c8:6a:6f:01:d8:3f:7f:83:83:34:45:d5:5f:
a0:fb:10:0d:f4:2e:2d:6a:0c:d8:34:42:74:9e:1c:
fc:b5:5e:96:78:16:cb:05:66:e9:ea:6d:74:2e:5e:
7c:49:e4:6d:ff:6a:97:53:d9:ac:54:f4:3d:7e:dc:
ee:3a:88:63:9d:37:5a:44:ea:15:18:ce:58:9e:84:
7e:da:18:2b:48:e7:79:cb:95:ee:e8:3d:6e:94:fc:
0a:92:ca:b3:43:8b:67:d1:3e:70:20:49:91:b1:48:
fd:b6:30:7e:96:a3:1b:0d:01:93:b1:5a:34:c6:1e:
db:ac:0b:33:aa:da:f0:dd:34:4b:d1:54:16:c9:50:
f9:a1:7e:ab:ca:a0:2f:45:bc:6c:9e:c1:8b:d1:97:
1f:10:19:3b:fe:c6:c6:b7:f6:3e:81:ff:76:30:65:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:26:91:38:68:88:F5:F1:3D:6E:73:1D:3A:E9:5B:3F:23:00:9E:9C
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:67:8f:32:da:2a:65:a4:d0:b0:32:79:0c:4d:aa:2f:19:52:
43:9b:c6:9e:9a:61:98:f6:22:da:7a:aa:4b:d0:cc:88:f3:c0:
18:c8:87:76:0a:6b:a0:94:18:21:a3:36:7f:25:ea:78:16:2f:
a5:9c:a4:61:04:18:0c:50:18:81:59:d4:80:97:55:72:60:29:
0e:0c:8f:e2:61:91:db:f0:8e:8d:20:5f:5b:69:20:ec:0e:b0:
e6:35:55:d6:9b:b8:11:6d:75:3c:bb:b5:5a:7c:13:a2:99:1f:
49:54:b0:2b:4f:4a:61:ea:9e:13:4e:4e:6d:2d:5c:9f:c8:aa:
c5:fe:7c:37:b8:84:a1:b3:91:f6:d4:c5:94:54:6e:28:85:33:
8a:27:71:6a:d4:9d:11:08:49:e0:b5:90:2e:44:07:2e:40:47:
3c:99:d0:63:ef:3c:58:9d:0a:b4:ea:83:15:f0:de:2b:fc:68:
03:3e:ba:94:ec:8d:be:f9:cd:52:63:3f:9f:83:fa:65:96:3b:
b2:cd:0a:59:04:1c:d1:f0:b3:10:38:3b:30:ac:a7:32:4b:7e:
b0:28:0b:22:ab:5e:09:a9:1e:fa:01:db:26:6f:9c:45:ac:41:
29:f4:e9:c2:1d:72:81:2a:59:06:b3:44:c2:f3:ed:64:07:6a:
ac:95:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:48:28 2025 by rpki-client