Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: 4Ba3++HxhuVeCwz1EhWDRWUqDDfCAp9CDogPqoa/Xqw=
Subject key identifier: 6F:3C:EF:95:85:48:2D:AE:5F:9C:DC:F5:F3:7D:EF:7B:C9:49:02:6B
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 0197711B0A995DE0613B7E2474282281295B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 0A4F
Signing time: Sun 15 Jun 2025 01:01:26 +0000
Manifest this update: Sun 15 Jun 2025 01:01:26 +0000
Manifest next update: Mon 16 Jun 2025 01:01:26 +0000
Files and hashes: 1: BrYhHrEUiC6KPPt0z5zIenofLis.roa (hash: DE5/RvrYo8fEFuVG34PaeU1d6iLiNdb+LH6pRfnNAg0=)
2: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: JOnO3SBANKb9L5ORw0NdT2LvNR7RI7oeCDihVgWrfxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:0a:99:5d:e0:61:3b:7e:24:74:28:22:81:29:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Jun 15 01:01:26 2025 GMT
Not After : Jun 16 01:01:26 2025 GMT
Subject: CN=6f3cef9585482dae5f9cdcf5f37def7bc949026b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:74:a7:e6:f5:cb:e1:a6:5e:e6:7c:a1:76:
45:d6:e6:5f:6e:1f:b7:5a:7e:92:71:f3:07:a4:c0:
d9:8e:c2:2c:3d:81:3f:14:2b:d1:9c:cc:90:f7:7b:
87:67:b0:a4:1f:ef:96:9f:e8:5b:60:03:01:91:f0:
5a:56:4b:6f:e2:20:f0:70:39:1f:bb:8d:0e:c3:42:
ed:df:76:9e:30:4f:4a:6b:ef:1f:59:7d:c1:67:00:
25:a1:30:37:57:7f:77:da:15:b4:7b:fa:bd:4b:f4:
41:dc:07:b2:ab:8d:1d:b9:ca:4c:3e:b1:ad:4a:fe:
c6:18:24:ee:95:d6:e4:1a:bf:2c:37:ec:ef:d0:b4:
6e:54:dd:bb:67:9a:e5:f6:5c:f4:95:f6:a4:f3:4c:
2b:94:42:9d:4b:18:8b:32:43:20:d7:c4:20:ad:47:
c8:47:b1:04:6c:ab:fa:ca:15:24:48:82:e9:d7:ad:
f6:1c:59:12:a3:d5:df:7c:9e:b2:13:a3:43:41:da:
1d:4c:1d:04:bb:cf:19:77:5a:f3:fc:1b:dc:b2:d1:
50:f6:a1:3b:c3:ae:eb:88:7d:ab:02:b2:8d:06:85:
58:13:2b:00:61:cb:b6:a3:51:85:97:23:37:92:7c:
b1:bb:10:c5:d1:dc:70:48:7a:57:cb:78:9f:a6:28:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3C:EF:95:85:48:2D:AE:5F:9C:DC:F5:F3:7D:EF:7B:C9:49:02:6B
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ca:e2:eb:fd:09:c2:54:e4:7b:db:c5:6e:d6:d8:30:35:37:
aa:48:9d:63:8a:5b:2a:aa:bd:16:2b:cb:f2:22:b6:49:7b:6c:
76:0b:00:be:16:5e:68:74:ee:f0:06:f6:77:37:41:be:ce:31:
0f:8e:84:c0:8b:14:3c:79:ea:b7:d8:06:67:47:8c:09:4f:31:
dc:73:06:d2:2c:83:5b:4e:33:7b:6f:4e:91:1a:d4:ee:76:8f:
3d:50:d5:f7:d5:67:7e:0f:c8:4f:8c:2a:4b:84:c9:fd:cb:16:
88:2f:4c:fa:73:c0:6e:15:aa:1e:9a:d8:9a:89:48:df:39:fc:
c4:ef:41:49:4d:05:2f:28:3a:dc:69:e0:ac:c3:6c:2d:3e:49:
54:81:8a:f4:99:5d:93:9d:18:e9:07:2a:0d:15:2f:e4:69:3d:
2c:84:9c:4a:9e:6b:2c:59:54:b2:97:32:bb:53:6e:38:59:c4:
41:b6:c9:24:ee:4e:aa:c9:64:56:94:8c:8e:f2:05:9b:38:06:
dc:a9:a6:f5:90:06:08:b2:8a:45:30:e0:62:c9:ad:e3:56:39:
1b:c2:30:58:ae:c4:bd:03:c2:c3:c1:3e:fa:d1:7a:e8:6d:a4:
aa:5f:c0:70:c1:6a:6d:7f:8b:aa:4e:3a:19:64:63:44:e3:d6:
50:e9:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:09 2025 by rpki-client