Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: zX7SAOzQZkHvFsZ2pAbdnwK/YZgKKL3Fr2rL7PHGWHs=
Subject key identifier: 4E:89:34:B2:6D:5B:54:6F:55:05:BF:E5:8A:98:DE:F8:7C:1B:5E:84
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 019769CF2382B51BDA35D3A9D07351315A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 0196
Signing time: Fri 13 Jun 2025 15:01:12 +0000
Manifest this update: Fri 13 Jun 2025 15:01:12 +0000
Manifest next update: Sat 14 Jun 2025 15:01:12 +0000
Files and hashes: 1: miHlM9LoOvhYbZQONUYiQ010Y0Y.roa (hash: lxFbzya4PF93jTfC+wdGWG8lRjQOoMqPwgxmgMabAZw=)
2: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: GdSa4rP9OpnJJxVojA+IxZgvHSUo93roJ5897WsUlNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:23:82:b5:1b:da:35:d3:a9:d0:73:51:31:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Jun 13 15:01:12 2025 GMT
Not After : Jun 14 15:01:12 2025 GMT
Subject: CN=4e8934b26d5b546f5505bfe58a98def87c1b5e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:66:85:41:a7:7a:31:19:6d:73:17:73:f5:
71:f9:b5:1b:bc:8a:fb:3f:e9:39:02:2b:32:ab:b9:
5b:df:03:47:66:ed:98:7c:24:b4:25:9b:03:f7:b9:
d3:3a:22:61:8d:8a:f5:72:22:8c:61:6c:34:4d:6f:
32:58:4e:91:06:e5:8a:d6:2c:46:c8:b9:68:dd:3d:
f5:0c:ce:6e:79:0e:35:8f:80:cb:a1:ee:63:eb:11:
6e:66:61:82:c9:4f:13:c3:e5:1b:04:07:fe:5f:d8:
d7:54:02:64:71:90:c0:7e:70:71:41:09:48:ee:b4:
57:4d:93:3f:b9:90:8c:f9:41:1d:15:fc:15:7d:96:
03:2c:ad:fb:4b:58:e7:6e:27:9b:b3:3a:2d:bc:6c:
9c:85:9c:41:86:d7:65:74:5e:69:b2:c2:06:f2:4e:
5c:a6:56:96:c9:cb:a9:8d:01:3d:6f:fc:92:17:e3:
6d:a4:ff:5b:55:f4:37:c7:68:54:9e:e9:30:9f:c3:
ba:be:cc:f9:35:ba:a6:81:1c:19:16:8f:e9:c9:91:
2c:9b:d6:1e:fe:30:ec:70:6c:eb:44:60:0a:92:4a:
a9:e8:d0:c4:b4:ca:40:ba:7c:7f:a1:46:f7:c6:65:
b9:48:b7:ec:06:e8:d8:91:d5:4f:73:93:15:15:05:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:89:34:B2:6D:5B:54:6F:55:05:BF:E5:8A:98:DE:F8:7C:1B:5E:84
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1c:91:ff:af:b7:8e:f2:98:ad:c5:d4:cd:41:0b:10:d2:83:
b5:93:92:37:8b:31:53:88:36:e4:f6:33:08:87:fa:8e:ee:7f:
71:ca:ad:3a:e8:fc:12:f8:a5:f0:1b:21:eb:5e:ec:5f:a8:51:
0d:3e:c3:ed:51:d2:e7:10:0d:6f:58:b6:ab:80:3b:e9:b3:92:
fe:1c:3f:72:a4:47:a3:62:8c:38:d1:c9:08:f2:6d:98:02:d8:
f1:15:92:da:da:f5:34:16:2f:17:1c:35:99:1e:32:b4:a5:05:
b7:a5:73:bd:da:96:90:93:61:27:40:1a:4e:68:38:dc:7b:c5:
c4:56:97:30:6a:ac:1b:2e:25:a9:92:13:8f:63:83:65:e7:96:
34:65:f4:aa:17:b9:a0:c1:34:3c:7f:dc:5d:70:39:ba:9f:f0:
cb:e6:7e:fa:fb:03:53:83:7a:a6:93:6b:0d:af:65:3f:e2:fd:
8e:ef:ef:35:58:9f:18:80:fe:7c:f7:ce:4b:cd:4a:b7:8d:37:
5b:83:dc:a2:2a:c2:64:95:7e:15:d4:9c:71:4b:88:38:a2:6c:
9e:9a:66:0a:b3:50:5c:4b:d8:4b:b8:b0:2c:18:e9:65:8d:08:
57:8f:f8:50:ef:68:de:2f:3a:50:a1:4d:75:f5:a4:60:3a:30:
8d:6a:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:07 2025 by rpki-client