Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
File: _o6FIymApj8NTfWwSRY-P9AvVLM.mft (raw, json)
Hash identifier: vmrbSR13ZLmnr2EeccgtSaXv5EwDr5250rgcyMj8NzQ=
Subject key identifier: 70:4A:7A:50:69:0E:14:C8:56:75:34:29:80:A6:CF:43:25:18:B4:0D
Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
Certificate issuer: /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Certificate serial: 0197737695A8D7752675AEBA369A1B22AFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
Manifest number: 0A0A
Signing time: Sun 15 Jun 2025 12:00:40 +0000
Manifest this update: Sun 15 Jun 2025 12:00:40 +0000
Manifest next update: Mon 16 Jun 2025 12:00:40 +0000
Files and hashes: 1: 7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa (hash: EbQqPJKQBhTvoE7/qrp3Wi8FH8cq4X28q+E9y9x/db0=)
2: _o6FIymApj8NTfWwSRY-P9AvVLM.crl (hash: NBxVIpD6889x2jDSraJ2V2ic3n7i1D/YGqzW7yQvf88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:95:a8:d7:75:26:75:ae:ba:36:9a:1b:22:af:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Validity
Not Before: Jun 15 12:00:40 2025 GMT
Not After : Jun 16 12:00:40 2025 GMT
Subject: CN=704a7a50690e14c85675342980a6cf432518b40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:3e:26:e9:8b:50:e8:db:7f:94:e6:10:5e:
9b:e6:d6:30:c5:20:c7:3f:23:6e:2e:63:18:55:14:
05:d1:49:8a:3d:96:b0:cf:38:89:4e:28:cf:c8:08:
52:6b:b9:a0:8e:b2:d6:5b:d3:68:78:21:f9:c8:67:
98:3c:c1:30:b5:f1:ac:16:67:d6:6e:ca:a1:b6:93:
ef:16:3f:fc:36:5b:9a:90:fb:8a:73:b3:6f:75:73:
ea:38:30:cc:2f:4b:aa:06:f6:8e:1b:31:aa:a6:93:
66:67:b8:62:86:5b:40:ac:04:c2:3b:34:5e:e7:2f:
b0:f3:ff:ff:02:77:97:bc:1a:ae:ec:10:58:3a:ea:
67:27:36:8a:53:cd:f2:6f:4a:c5:5d:9e:70:71:d4:
61:18:62:40:be:45:aa:b0:9b:65:f7:b9:b5:98:47:
63:d4:1d:67:34:cc:65:41:ed:93:9b:0b:0b:2b:7b:
26:a8:75:bf:66:3f:75:31:a2:d6:fd:7c:c8:a0:a1:
4f:0a:19:41:0c:94:58:0b:60:43:01:da:59:b4:ad:
db:fa:9f:54:07:d6:35:71:6a:66:b1:e5:fb:5f:14:
90:51:e8:e8:f2:7c:cb:c9:24:de:7d:89:d2:75:24:
65:cc:db:cb:90:b3:5f:98:ca:13:60:de:e2:89:3f:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:7A:50:69:0E:14:C8:56:75:34:29:80:A6:CF:43:25:18:B4:0D
X509v3 Authority Key Identifier:
keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:88:da:34:0a:df:4f:2d:cd:56:a7:03:42:ea:e6:10:47:73:
1a:1e:1b:d5:e3:b3:46:08:a5:06:fe:04:ce:8d:21:9d:ce:9e:
47:a9:82:bc:84:56:85:98:61:69:c7:f9:53:cb:33:8d:68:a8:
05:5b:ea:b6:75:ea:5b:ea:f0:60:58:50:17:04:27:8f:69:b8:
47:1b:25:51:81:57:62:4f:8d:2e:96:f3:05:51:b9:1e:52:58:
e4:dc:20:51:45:50:bc:af:92:b2:dc:14:70:36:38:3d:5f:36:
8b:a7:32:c0:33:02:95:6f:d2:06:7a:9b:e0:42:31:de:ad:b4:
85:94:41:4e:95:85:0a:83:d8:3b:cd:fc:04:f7:ce:48:6a:bb:
eb:4d:dd:85:e0:7b:35:87:ee:0f:cb:71:0d:35:84:7b:d0:a8:
fd:2f:f9:01:81:bf:40:9e:bd:bb:8c:73:16:17:70:23:8b:36:
68:a9:64:28:7b:7b:c6:e2:3e:90:d8:c6:04:21:11:36:39:a3:
dd:4f:4e:7f:e4:39:52:16:9f:be:84:df:06:ee:7b:c0:e6:47:
e3:16:40:bf:48:4d:3f:92:97:b0:79:b2:33:c8:51:00:1f:0b:
63:d3:ed:85:c7:ad:7c:d3:4a:9b:d9:52:ec:0a:70:45:e8:10:
4c:19:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:39:26 2025 by rpki-client