Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier: 1ldz4EATAx4q+8ZzZjF+FGkxKNJXk4gc+rixo+sBCF4=
Subject key identifier: 08:BD:31:2C:9D:5B:41:44:BD:3D:B5:34:B9:9F:AD:32:7D:FF:BC:47
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 01976C2B085F36FFABE37BF9532DBC705A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number: 0A8A
Signing time: Sat 14 Jun 2025 02:00:48 +0000
Manifest this update: Sat 14 Jun 2025 02:00:48 +0000
Manifest next update: Sun 15 Jun 2025 02:00:48 +0000
Files and hashes: 1: TK8oRVgmC_iGkqpkIUxL12Jskyo.roa (hash: WWQSgn1wOK2i+o7wtaeqJibMN9Pjr41qBXdRO7I04u0=)
2: Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa (hash: 4wKWfKiX6etE7Y85veoMkmwG3aEsU0NvUo1kjzyAViY=)
3: kcWTfdAykr4V6or-J5DNrcGjkPY.roa (hash: ogmpuXD/e22gpKD4xD0G9j8Nblm4BJXQE5obj3J5Qcg=)
4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: YE9JM7wMQV50kINdiyjwC8RkpNWInjhnN/eBR3eyDUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:08:5f:36:ff:ab:e3:7b:f9:53:2d:bc:70:5a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Jun 14 02:00:48 2025 GMT
Not After : Jun 15 02:00:48 2025 GMT
Subject: CN=08bd312c9d5b4144bd3db534b99fad327dffbc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:10:8f:74:72:c8:f4:c8:22:81:09:9b:2e:
25:4e:3d:30:a0:68:ef:13:e7:8a:72:00:e0:7b:34:
c8:38:77:52:a9:b2:24:2e:62:1e:55:b4:2f:9f:b7:
c2:3a:74:f5:24:38:5a:25:62:2f:27:68:08:31:02:
43:92:8c:17:2d:b0:05:cc:5a:44:18:da:47:e1:08:
b7:c6:46:65:ac:d1:c2:1a:07:d1:ce:f4:10:2c:17:
96:ef:fa:d0:43:c9:c2:3f:70:76:50:b9:4f:28:21:
6e:38:d1:52:c6:bb:96:23:0d:70:14:42:34:67:46:
47:cb:82:81:7c:83:cc:67:0c:96:7a:03:b5:3d:11:
ec:b0:7f:3c:1f:bf:fd:cf:c0:ca:26:68:9d:59:3a:
6b:0e:9c:40:cc:51:71:2b:b4:5b:e9:87:41:67:e7:
9b:41:9a:e8:5b:59:01:44:9a:63:7a:e5:94:41:8f:
13:c7:be:91:c9:98:5b:2b:a4:47:7c:d4:af:34:c5:
0b:dd:d4:26:af:42:50:cf:8a:16:c4:52:6e:c2:c0:
dc:db:d9:c6:e8:6b:b8:13:90:23:8d:f6:c3:18:0c:
f0:00:1b:d6:74:7e:94:18:3e:0c:00:25:a6:58:ee:
57:6c:c3:cb:a0:f3:b6:1f:4c:02:72:6b:73:40:0b:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:31:2C:9D:5B:41:44:BD:3D:B5:34:B9:9F:AD:32:7D:FF:BC:47
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ca:7d:68:8b:af:4e:df:15:b7:7d:7b:48:4f:6c:7e:53:e6:
f7:51:11:a9:b5:4c:60:35:a6:d3:11:e8:43:c0:74:0a:c7:cf:
94:20:ce:33:6b:d3:3c:30:06:a1:e0:54:78:e5:64:09:cd:08:
c4:dd:41:b8:50:ab:c6:46:33:57:7e:03:cf:51:d8:9c:97:ad:
f8:57:aa:ed:1a:4b:3b:72:63:ed:d2:dc:54:10:1a:7f:94:fb:
97:c6:e8:73:56:c5:b2:f1:44:4e:d5:66:39:ae:57:b1:81:62:
80:12:c4:8f:d2:ee:7c:54:d5:7d:3d:6a:9e:4f:e9:63:81:c9:
19:81:7a:21:49:1f:3c:81:f7:81:f4:8a:15:e1:d3:bc:78:f9:
7a:17:dd:f9:e2:b1:a8:97:b0:6e:98:d3:5d:0f:89:90:0b:7f:
48:8d:f3:47:f2:b5:c1:ab:0a:37:a8:93:3d:52:57:7b:c9:d8:
11:30:48:c5:d4:41:b7:ed:a4:aa:f5:22:3f:b8:89:1c:a7:3e:
5c:49:a9:4e:49:f4:00:56:7d:b4:0f:93:6b:8d:01:64:bc:de:
83:65:45:c3:d9:2c:56:e0:6b:fe:49:80:f1:91:7f:76:67:85:
62:71:05:f0:82:31:fa:53:ab:88:57:83:14:b9:ba:a5:7f:c0:
e0:d8:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:40:08 2025 by rpki-client