Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: i4pgSXZ95G0koAWqA8vZ0ytHiIwXTjdbxRo8LVCO2G8=
Subject key identifier: A7:02:46:73:19:B9:DC:06:A2:3B:88:70:97:DA:0F:AE:A6:E4:61:73
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019787342B40CE1DC82B63FBDBB862B09CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 084D
Signing time: Thu 19 Jun 2025 08:00:32 +0000
Manifest this update: Thu 19 Jun 2025 08:00:32 +0000
Manifest next update: Fri 20 Jun 2025 08:00:32 +0000
Files and hashes: 1: 3raexFFj3tPstgifa_l8jJHkazQ.roa (hash: tJRmWB+nxgvOJkVjhkrY7i53nGolZQoscv3aKM9NJDk=)
2: SsPMfuLYiptAn1KbqNePMw_A4VY.roa (hash: s7uhDyPNR/o8+HrZcEPeZiMphtLlmdxbZNwJprWhgdg=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: eUZQZxtHcfm5RcSUyksjti3ttHVD5CnG3shhy9QgpaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:2b:40:ce:1d:c8:2b:63:fb:db:b8:62:b0:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Jun 19 08:00:32 2025 GMT
Not After : Jun 20 08:00:32 2025 GMT
Subject: CN=a702467319b9dc06a23b887097da0faea6e46173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:5d:4c:3b:af:76:9f:ca:82:69:46:70:87:
48:ab:bf:b0:5e:a8:ba:d9:e9:bd:13:84:4c:b5:33:
d8:16:ba:ed:d9:bd:38:48:a1:e0:0f:bf:20:1a:53:
13:61:e9:53:38:8c:68:c6:36:ff:7a:a6:70:5f:b6:
0c:a5:10:6f:e1:2e:d4:6e:b6:56:b4:a5:5c:0a:80:
b4:db:c3:6e:33:85:93:62:ee:5b:47:5a:47:a5:65:
22:97:27:a4:10:a6:61:e9:74:a9:14:ac:53:ed:ac:
ed:ef:19:ab:38:cf:5c:62:d1:88:a5:a9:bf:cd:c8:
68:3a:0e:ce:dc:53:ad:79:34:ea:c4:23:21:e4:66:
b7:de:01:89:b9:4a:6d:6a:67:69:a2:24:57:b6:a6:
8c:4a:cd:c5:99:c8:83:fe:5d:09:78:cc:d4:af:e3:
99:c1:dd:14:66:00:e1:c2:25:8f:29:7f:62:8d:9c:
0e:bc:3d:7e:44:fb:f9:1f:dd:8a:b7:fc:e8:f9:bd:
c5:6f:77:c3:56:6e:39:b4:ce:e4:d5:ce:fc:fb:41:
0a:a6:16:2b:b0:fb:44:69:83:4e:d2:ca:69:16:f7:
b1:af:5d:e7:b8:da:c3:8f:97:29:41:b1:75:a8:03:
1b:a2:69:45:cf:53:5d:93:02:25:24:02:b7:d8:01:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:02:46:73:19:B9:DC:06:A2:3B:88:70:97:DA:0F:AE:A6:E4:61:73
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e8:ee:3a:eb:ef:65:8f:f9:4b:7f:be:5b:7c:ab:93:1b:80:
66:4a:4c:e6:65:0f:81:8f:61:a3:fd:1a:e2:a6:ca:9a:f1:89:
8d:c6:4a:4a:0e:8a:b0:01:da:9a:11:0f:20:d5:c5:e5:12:9a:
1f:bf:53:79:e6:07:41:ad:83:2c:f6:4a:70:c8:b1:b7:f7:72:
ca:44:af:39:00:73:a7:6a:c8:71:6b:d5:76:ce:cd:a4:6f:96:
6d:b6:36:fe:58:9a:d1:51:ad:74:be:9f:a6:8f:47:66:8f:ca:
d1:c7:ae:fb:5f:a2:5a:36:70:4b:92:f1:09:b9:bc:88:17:de:
3d:d5:75:e8:69:51:d2:5f:c0:f5:fd:4b:a2:bf:63:a9:de:51:
ab:e3:c3:bd:99:b9:f6:ae:0f:2e:73:e4:d9:ec:58:4d:2b:4e:
0f:26:9b:21:ae:f0:58:7a:c2:6b:c4:d8:de:19:f5:e4:38:cf:
89:36:43:28:af:36:89:17:4b:a1:92:d5:67:f1:6b:f3:b7:31:
a5:76:d0:98:75:f5:ca:58:92:96:60:69:79:9c:0d:d1:86:5b:
12:55:c5:e8:02:a5:44:f1:6d:8a:43:3f:05:63:54:46:0d:1e:
4b:12:4e:27:71:06:4b:1c:ef:ec:b3:85:da:01:d1:84:ee:73:
fb:c5:7b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:32:44 2025 by rpki-client