Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File: of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier: ++ETDYbVALz4vplnZWqHACFmlov2amn5vwgkc3uXxIk=
Subject key identifier: 22:EC:A5:18:01:C4:EC:73:2D:DF:1E:A5:CB:89:C3:59:F4:BC:39:EE
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial: 019786627EE83A6D20627D853230544EECD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 04:11:31 +0000
Manifest this update: Thu 19 Jun 2025 04:11:31 +0000
Manifest next update: Fri 20 Jun 2025 04:11:31 +0000
Files and hashes: 1: PIjwt9cncSl25mT3dJ9vyyH9P2g.roa (hash: AHd8tSkEey/Gb5PQrQUs/SSKNf7k6H4ql5Wspc/zuFo=)
2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: 9UKZptziFh6yO2CVA1D1euMbFz7YgTtEJoxNZ5qccpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:62:7e:e8:3a:6d:20:62:7d:85:32:30:54:4e:ec:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Validity
Not Before: Jun 19 04:11:31 2025 GMT
Not After : Jun 20 04:11:31 2025 GMT
Subject: CN=22eca51801c4ec732ddf1ea5cb89c359f4bc39ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:68:32:52:f4:27:76:d4:e1:f2:45:16:7b:7d:
11:e6:ef:d5:1e:76:f0:8a:0d:15:cf:bd:b8:60:37:
a7:a6:86:59:de:98:41:4e:e0:4d:6e:12:40:44:28:
00:76:1b:eb:c5:f2:13:0c:eb:f6:6f:5c:fb:11:db:
9c:ae:9f:20:b9:87:84:92:67:55:6e:24:61:52:a2:
bd:f9:93:63:e4:67:2a:75:ff:71:20:5f:54:b0:62:
ae:b4:8d:36:93:dc:2f:af:66:09:47:68:ec:15:fe:
60:00:89:a2:c9:2b:e5:9a:91:a2:9d:40:4f:6d:4d:
b0:45:2d:94:34:a1:d0:48:93:51:12:e8:8c:b3:78:
cb:e3:fc:35:bd:80:f7:f7:a7:3d:ed:32:ad:d3:8b:
8f:31:ac:c6:1f:08:b5:ad:00:b6:7e:c7:79:f7:ef:
f8:55:82:98:21:d9:4f:b9:0e:12:02:22:8a:8e:89:
f9:ae:8a:fc:63:44:80:f9:ea:79:0b:6f:6c:1c:86:
ba:44:8a:4f:4d:1c:b2:ee:23:51:14:4e:54:87:ab:
32:bc:b3:be:12:39:22:b9:1c:4c:95:c4:a8:c1:78:
5f:df:5b:df:d8:02:66:bb:5f:b9:ea:57:27:e0:5c:
bb:fa:9c:9c:9e:e2:65:18:11:a5:5f:a3:52:f1:0c:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EC:A5:18:01:C4:EC:73:2D:DF:1E:A5:CB:89:C3:59:F4:BC:39:EE
X509v3 Authority Key Identifier:
keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:09:5a:de:7c:ae:03:7d:70:75:75:f2:61:12:c4:20:bb:
db:e4:89:c1:26:45:9d:f0:09:ae:a0:48:ff:f5:6d:76:e2:be:
b1:c1:52:b3:de:4d:38:79:16:7e:5a:61:5d:fe:41:6f:85:7e:
23:c5:45:69:a7:cf:bd:e1:c8:cb:c4:84:c7:c7:4a:bf:d1:f8:
21:78:01:72:c4:e1:14:99:32:c8:fc:1b:1f:36:c2:66:99:90:
4c:06:f0:b7:8e:25:b1:f0:a8:59:4e:0d:56:fe:96:89:9f:be:
e7:4f:dd:1e:d9:57:d1:c6:4c:85:10:3f:73:ec:5c:49:a0:78:
a3:f2:c1:6e:51:03:ce:2f:80:43:b6:88:9a:0b:4f:a8:07:8c:
48:07:d8:73:aa:cc:45:67:75:17:fe:5b:e0:79:ea:1f:f9:d0:
9a:68:42:21:60:d8:1c:c4:98:ce:9b:5d:9f:c4:01:cf:39:c7:
be:b4:dd:28:d4:e3:15:6b:d7:21:88:3f:9d:72:08:89:96:e1:
71:84:12:48:b9:f1:96:8d:19:5b:ee:e6:2d:0d:2f:0a:aa:05:
05:70:e7:23:11:84:b6:77:a2:4b:1f:96:e2:41:62:0b:91:2b:
3d:a1:66:4e:56:80:d7:9e:a5:87:37:c5:d0:2c:bf:85:80:fa:
c5:9f:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:15:15 2025 by rpki-client