Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: kRj0BqLxicgkx4dEJPcvROfDvbWJO/1pfsxH0zRu3yk=
Subject key identifier: 3D:08:8F:C0:8F:64:F5:F6:10:E2:98:1B:F1:FA:9F:B9:59:2A:D8:05
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 01976C2ABF033D3534B3FECDDB971234C4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 02:00:30 +0000
Manifest this update: Sat 14 Jun 2025 02:00:30 +0000
Manifest next update: Sun 15 Jun 2025 02:00:30 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: CEWTnQpv9fAcLSnU9wZnWAk/jhgnPKsjqBkxZBZ4xIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:bf:03:3d:35:34:b3:fe:cd:db:97:12:34:c4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jun 14 02:00:30 2025 GMT
Not After : Jun 15 02:00:30 2025 GMT
Subject: CN=3d088fc08f64f5f610e2981bf1fa9fb9592ad805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:75:74:2a:bb:29:e4:bb:ab:ab:4a:b3:fc:
bc:e5:bf:f3:a9:9a:ec:23:77:e2:c0:16:48:5b:59:
85:26:ac:06:1b:2f:31:7e:7f:dd:21:4f:a3:d0:f5:
9c:10:e9:51:9d:3a:1c:6a:33:29:11:a5:4c:43:99:
7f:bf:b5:39:a7:b4:4f:2e:99:c5:e7:88:61:56:0a:
1a:5f:15:0f:e4:17:58:12:a0:7a:fe:08:0e:0f:22:
5c:61:bd:02:d3:46:56:4e:79:1d:db:b7:b1:74:ff:
75:59:17:04:45:61:08:18:99:3c:ad:bf:e4:df:13:
51:c7:69:78:b9:f4:9b:7f:54:fb:c9:a6:78:01:37:
25:73:61:12:9d:09:7f:4d:1f:4b:ab:be:d8:2d:67:
ec:ba:ee:a3:2d:77:b7:2b:60:29:4a:ac:53:40:3e:
4b:21:5c:84:c4:0f:4f:4e:0a:28:f8:b1:3c:17:61:
5f:bf:8d:8c:25:8e:34:3c:6c:34:97:18:ef:7c:75:
e5:1a:30:4b:07:b7:cc:f5:4c:24:66:7e:31:e6:2f:
ac:6f:23:58:81:3d:be:b3:b6:65:66:17:65:ba:32:
df:04:6e:27:77:11:b6:2a:14:b9:c4:ad:9e:e5:ca:
59:4d:b9:5c:61:0e:ef:4e:e3:de:9e:53:ad:33:96:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:8F:C0:8F:64:F5:F6:10:E2:98:1B:F1:FA:9F:B9:59:2A:D8:05
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ce:36:c8:d5:d2:ee:9d:2a:cc:21:0e:38:b8:99:ff:80:40:
1a:9e:f9:a0:dc:1b:92:45:e9:47:0e:2c:6a:7a:6a:8c:09:a7:
1b:4f:ec:af:53:f6:80:50:71:1b:ba:dc:c6:2b:6c:b8:b0:7a:
87:26:09:ec:35:01:d6:a3:46:ba:d4:5a:00:23:83:2a:db:06:
13:a0:c1:65:12:25:73:1b:47:f7:d6:2c:63:7a:9f:37:30:aa:
88:d4:e1:cb:4f:33:32:e3:20:78:2d:4c:fa:db:8c:87:db:38:
7e:50:34:ce:ae:1d:99:6e:14:8e:64:ff:72:e5:8c:5e:f7:a9:
17:db:48:bb:57:10:ca:56:c3:c3:23:d2:52:7c:3e:14:f3:52:
89:d5:67:34:f8:19:6f:d7:a5:31:8b:0a:a5:d8:62:20:08:fe:
7d:d5:47:06:61:f1:ac:c6:3f:5f:3e:71:07:59:39:41:97:fd:
3e:fe:a4:f7:83:cd:f0:99:56:45:bf:15:b3:17:d1:3e:1f:46:
fc:0f:92:bd:2b:35:fa:4e:35:34:7b:a4:37:57:cf:e4:81:d5:
e5:a1:e0:70:c2:0f:58:c1:65:84:45:e5:81:72:10:f4:c2:9c:
e1:46:b7:61:ff:21:13:a3:96:8b:66:19:67:17:37:d5:70:f3:
72:3d:d4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:32:29 2025 by rpki-client