Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: bJDhjUJ7t82DYK/d2WucLSHdEqM3g0vMpoekTKCu7Dk=
Subject key identifier: 36:AF:9B:D6:74:3A:EC:2F:D2:0C:59:D7:6F:2B:18:95:11:89:9E:75
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 01977B305E2E45AE1BE64820DBFDEEF93CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 01BB
Signing time: Tue 17 Jun 2025 00:00:56 +0000
Manifest this update: Tue 17 Jun 2025 00:00:56 +0000
Manifest next update: Wed 18 Jun 2025 00:00:56 +0000
Files and hashes: 1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: e+oIPw0SLbczt8AtNrWmNqImSF8zlmgUPovRFady8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:5e:2e:45:ae:1b:e6:48:20:db:fd:ee:f9:3c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Jun 17 00:00:56 2025 GMT
Not After : Jun 18 00:00:56 2025 GMT
Subject: CN=36af9bd6743aec2fd20c59d76f2b189511899e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:7c:ef:68:48:40:84:91:ea:37:c2:7d:2d:
b2:7d:cc:8e:4d:9e:42:77:07:11:db:cf:fe:5f:7d:
52:13:ec:33:5e:06:fa:5f:9a:85:fe:1e:8c:68:40:
92:d9:41:01:4d:e5:af:4e:12:dd:4e:12:b0:7b:59:
34:c1:4a:a5:c3:ee:8d:93:fc:38:f3:81:66:de:f6:
39:48:9b:20:39:a7:69:f9:c9:f4:a0:4d:70:5b:41:
17:50:19:d4:cb:f7:6b:b7:93:52:48:86:f4:8a:c7:
b1:a1:86:9c:e1:e1:c2:b1:10:64:ee:ed:88:be:0c:
56:e3:6f:25:b7:a6:c8:d2:f3:db:8c:d0:ea:01:bd:
07:8e:c2:36:12:a3:ba:74:53:83:e3:7d:71:6f:23:
bc:81:e8:21:f7:0e:c7:1e:d6:30:18:4f:4b:1f:37:
bf:74:42:a8:66:2c:14:7b:cc:d0:46:9a:fc:75:fa:
00:b6:8a:0c:2c:d5:8b:cf:bf:50:32:72:54:1e:36:
d1:2a:f6:71:8a:4b:7d:79:a9:76:74:73:55:c0:8b:
fa:f9:d2:3d:51:81:9d:7d:d7:56:80:c1:76:dd:da:
50:f9:ce:00:d2:a4:58:fe:e8:14:9c:d5:44:18:e0:
9a:75:07:be:48:d8:8b:78:cb:b6:5c:43:c8:4c:fb:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AF:9B:D6:74:3A:EC:2F:D2:0C:59:D7:6F:2B:18:95:11:89:9E:75
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:da:ec:08:30:6a:bd:c9:a8:e3:8d:fa:d6:07:9d:54:dc:d1:
18:16:34:92:36:57:c8:9e:fd:44:b7:dd:57:bb:64:f3:0b:ce:
8a:cb:e1:01:ff:9b:c7:3e:26:bd:38:73:e1:f3:fc:1f:90:57:
d5:29:db:97:29:3d:1d:92:60:89:52:b5:1b:52:fc:1b:cb:18:
a1:82:21:fa:3e:e6:0d:da:55:f8:c3:f4:d7:04:5c:16:30:23:
7b:29:99:4e:85:72:23:7d:9f:8b:92:d4:28:7a:41:3a:d5:b8:
58:10:15:6a:87:49:9d:6e:83:64:40:aa:4c:20:bc:94:ba:68:
4f:3d:bc:a5:ed:d1:8b:94:7b:f8:0f:ce:08:6c:4a:ec:ab:31:
2a:8e:29:44:c9:dd:0c:e8:ca:b7:6a:88:06:9f:44:84:20:1d:
72:51:9f:af:7f:da:2a:12:3d:5b:6c:f2:e3:55:51:e8:bf:cd:
a0:2c:d2:cc:1a:e2:9a:ee:d0:c4:16:49:e9:d8:bb:09:5a:c0:
10:d8:66:14:6a:51:94:2d:d2:51:41:ac:d4:90:c2:82:1b:ee:
72:a7:8f:5c:41:c1:47:01:52:ee:23:0e:06:77:8c:73:13:ee:
3f:e4:6c:1e:7a:61:3c:d9:60:c2:ab:3c:0e:45:3b:49:b2:eb:
c4:0a:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:01:57 2025 by rpki-client