Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: UMijtFb8oJ3SDxa5ad3XWb601riuKnf++H5nfGVy2Zg=
Subject key identifier: 09:8E:14:D1:76:8D:3F:F4:C3:A1:15:08:99:B9:4E:5C:E9:5E:BC:58
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019770AC4FD74667E4F96C2EF24A89AA48F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0997
Signing time: Sat 14 Jun 2025 23:00:30 +0000
Manifest this update: Sat 14 Jun 2025 23:00:30 +0000
Manifest next update: Sun 15 Jun 2025 23:00:30 +0000
Files and hashes: 1: Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa (hash: rPricXL6DKMNzIm/8wBOd/xDJhVzBjF0FcknH/0CxQI=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: wezC8QcFBVyzsDbgW2mnv49/3dktAcQL11yGE3cUwZA=)
3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:4f:d7:46:67:e4:f9:6c:2e:f2:4a:89:aa:48:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jun 14 23:00:30 2025 GMT
Not After : Jun 15 23:00:30 2025 GMT
Subject: CN=098e14d1768d3ff4c3a1150899b94e5ce95ebc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:a5:31:2a:70:dc:56:15:0e:8b:d8:02:ee:
b0:48:1d:a3:2b:c0:5f:d7:c5:8d:b7:d1:da:a9:77:
50:75:33:a1:59:98:e8:57:32:9f:d7:50:d0:27:19:
7a:18:22:11:14:f4:67:68:a6:4c:a7:c1:fc:c3:7a:
f1:93:4a:c1:f1:2c:a5:22:d0:9a:cc:de:7e:bc:ba:
0e:2b:78:80:2e:3a:9e:f1:cd:4c:63:b0:62:ae:8f:
a2:e5:c8:9b:e7:48:32:2b:58:d6:01:28:21:31:63:
a3:d4:7d:de:17:28:02:9f:84:3d:c8:90:c1:90:ba:
42:91:f0:1f:e6:ac:d6:51:47:5e:3e:9e:24:02:2e:
95:6f:f3:ce:b0:87:d1:2e:06:a2:7c:2f:70:c5:1d:
b8:e4:04:bd:fc:6f:2a:10:38:f1:78:ac:ae:64:d4:
3e:99:e9:c2:64:f7:ae:27:3b:3d:6c:38:15:cc:1e:
57:09:e6:69:4b:e7:06:76:4d:5b:3b:f4:73:c0:c7:
6d:60:73:f6:01:5a:45:c4:c5:af:3d:8d:4c:fb:68:
48:a1:a0:b6:73:71:ac:26:c5:d2:74:e2:df:bb:93:
d1:46:fa:11:ff:cc:d3:9a:76:d0:93:b3:c4:1e:48:
c5:ff:24:3d:99:7b:af:65:7b:2b:4f:37:76:37:2b:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8E:14:D1:76:8D:3F:F4:C3:A1:15:08:99:B9:4E:5C:E9:5E:BC:58
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a4:22:6b:4b:8b:b5:86:d9:82:07:69:4a:67:6c:ba:7c:08:
ad:f0:41:57:06:dd:c5:de:55:7d:32:1b:72:6b:7e:a1:9f:78:
4d:6f:f5:1e:25:9b:36:f2:11:93:bf:cb:22:69:40:38:d5:e0:
53:cb:b3:69:69:ec:0a:4d:03:58:13:fd:ea:48:1e:c7:e2:ce:
ef:82:bf:f4:97:3f:75:28:80:20:8c:76:e4:d9:99:e7:7d:9d:
8c:3e:22:33:78:85:28:0a:99:2c:cb:ff:3c:40:75:85:6c:16:
f1:1a:ed:2a:d3:bc:97:d8:55:61:d3:8a:a8:7d:2b:e2:68:e5:
a8:b9:14:21:30:fb:ce:ab:b1:91:d5:8b:64:ed:da:1a:74:1a:
8a:28:b8:51:2d:5d:83:84:fa:02:c7:55:df:06:2b:21:72:be:
9a:6b:34:a0:22:0e:d5:0b:86:3f:77:70:c4:45:e1:47:24:ad:
b4:04:b1:e8:35:ad:52:ad:1e:ce:33:53:34:ec:a2:13:d2:0f:
93:bc:b3:f0:15:7e:e8:57:00:99:fa:f2:92:c7:5b:84:0d:1a:
df:25:d2:2c:27:79:40:25:aa:57:6c:e9:e6:c7:15:e9:a8:17:
ab:40:45:b8:cd:5f:83:69:b4:ad:b3:ec:aa:8a:63:45:31:82:
8d:70:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:57 2025 by rpki-client