Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: +XiDzN4SzcbOdN3Qv7Q/o0RKsFtIfi7OBHAw9eKRDbo=
Subject key identifier: D3:CC:38:EB:42:79:D2:6D:92:5D:40:EF:53:2B:88:86:D1:C6:FC:22
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 01976C623DAA61A8A2390567A679B7073341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 67
Signing time: Sat 14 Jun 2025 03:01:06 +0000
Manifest this update: Sat 14 Jun 2025 03:01:06 +0000
Manifest next update: Sun 15 Jun 2025 03:01:06 +0000
Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: pSDupyeV4/U/ygM09ZwlJHa5wxspr9p66rbWvICWQAg=)
3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:3d:aa:61:a8:a2:39:05:67:a6:79:b7:07:33:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Jun 14 03:01:06 2025 GMT
Not After : Jun 15 03:01:06 2025 GMT
Subject: CN=d3cc38eb4279d26d925d40ef532b8886d1c6fc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:2d:e1:c2:0b:ba:07:5a:da:80:7c:a8:b5:
74:d2:79:4d:cb:62:99:fb:91:81:9c:78:95:1f:47:
bd:75:29:fd:f8:60:bb:81:39:6f:04:f4:fc:2b:db:
65:0f:45:a6:5c:cb:6d:b1:49:09:08:66:a8:df:7b:
13:1c:26:7c:e1:09:38:38:f8:57:0e:53:7b:0a:04:
13:b8:5b:21:6e:f5:57:2a:8d:d5:dd:03:7d:12:2e:
59:0f:5c:9b:73:f4:67:16:3d:aa:bb:40:3a:5b:0f:
e2:17:02:e2:b0:e1:21:f7:eb:33:fd:ac:88:f8:fd:
90:f7:12:12:86:28:db:d1:1e:bb:01:ac:51:13:d9:
f3:4b:bf:11:f5:39:0d:40:c2:0c:59:1b:87:10:bc:
85:17:5d:48:8f:38:f6:09:c9:5e:14:59:68:18:0b:
b9:d6:eb:22:90:0f:14:01:fd:82:c2:5b:94:aa:98:
50:93:f0:1a:ca:67:6d:96:66:d0:50:26:fd:e8:45:
ac:15:71:8c:40:d2:fa:cf:81:8c:d6:1e:4c:3a:44:
6f:78:6a:77:8f:a9:5b:ca:7a:26:f3:91:7f:c0:29:
12:5a:04:ac:3c:22:df:24:1a:af:18:7e:fa:22:15:
e1:2c:0c:80:07:d2:95:9f:00:c9:a8:6d:7e:c1:44:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:38:EB:42:79:D2:6D:92:5D:40:EF:53:2B:88:86:D1:C6:FC:22
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:87:47:e2:21:49:e1:cc:50:54:d9:fe:3a:41:da:e3:6a:e9:
dd:7b:e0:94:a4:18:7e:8f:8a:56:47:9f:6f:6f:ba:b3:c6:58:
38:46:29:9f:67:2d:8f:a3:75:59:f5:31:6e:ad:9e:89:f7:88:
db:a8:1b:ee:44:63:8f:b3:72:07:95:af:f2:78:d2:21:d8:de:
69:9d:27:9e:c5:c7:c0:62:9e:d5:1d:e6:db:02:52:5d:a6:bc:
fc:15:70:78:4f:a8:41:7c:93:53:0f:c6:ae:44:c3:9c:10:cb:
b1:78:69:cf:52:dc:d4:2e:e9:89:26:3a:35:af:4d:dd:eb:47:
46:f5:27:56:3e:56:da:64:c5:0f:a5:a0:a4:92:0b:dc:cb:48:
3b:9e:bb:ac:51:8f:5b:bb:37:e7:7c:13:be:97:96:94:f3:fc:
87:87:a8:b0:8a:8e:76:1a:12:26:01:3f:16:de:94:29:63:29:
20:06:11:f8:7d:56:da:71:98:fd:19:0c:ca:fb:f2:1d:b0:50:
45:1e:00:18:0f:bd:87:b9:c1:fa:93:ab:2c:e0:a6:f0:e3:56:
6b:b5:63:b4:d0:6e:6f:64:d9:de:e2:00:0a:76:58:70:df:d2:
4c:27:82:91:e0:34:e5:28:23:f9:62:cd:9a:b9:5e:02:70:b0:
79:31:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:25:22 2025 by rpki-client