Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: ABdh8l0PSs0V/2+UUwCqaDhBLw+RNPZtwt4TsFV1ESA=
Subject key identifier: E2:8E:B4:FF:F2:6B:99:FD:FF:5F:6A:5D:68:C9:A2:D4:E3:16:F7:6D
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 01976C2AF8C21D8189C9737869A842F3C38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0AC3
Signing time: Sat 14 Jun 2025 02:00:44 +0000
Manifest this update: Sat 14 Jun 2025 02:00:44 +0000
Manifest next update: Sun 15 Jun 2025 02:00:44 +0000
Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: PEadpG2945TS84ZdPm7/HHGIP9d1JR4Ln4b4p6p7DcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:f8:c2:1d:81:89:c9:73:78:69:a8:42:f3:c3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Jun 14 02:00:44 2025 GMT
Not After : Jun 15 02:00:44 2025 GMT
Subject: CN=e28eb4fff26b99fdff5f6a5d68c9a2d4e316f76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:cd:8e:89:43:b1:28:a1:bf:65:a5:58:e0:
d4:d9:16:ea:32:a9:1d:39:fc:74:03:78:7e:6c:6c:
a4:91:b7:9d:6e:82:bc:78:6f:3e:5b:a7:08:b7:70:
bd:6b:94:79:d2:3b:b9:be:7b:ab:81:6b:78:2f:4d:
a0:92:40:89:f2:d3:95:ea:b6:c9:03:4a:84:6a:b9:
ad:b9:d0:d9:08:74:b8:9c:36:c9:52:f6:5e:8c:ff:
e9:51:3d:2e:34:57:f4:48:64:38:70:94:ea:e0:66:
44:03:16:7d:a9:43:df:92:89:79:37:0a:d7:e6:e5:
13:0f:a7:57:b9:a5:92:8c:9d:a7:e7:0f:8b:31:a8:
31:57:f1:1a:04:86:a1:d8:bb:aa:55:2f:29:95:86:
a3:be:4f:98:ed:c0:ad:b8:ca:de:77:b5:4f:8a:8a:
62:32:0f:a9:fe:34:7a:8d:14:39:f0:c5:0f:6c:a3:
9f:b8:ff:9b:9b:fb:ad:10:9f:1f:c7:44:47:cd:df:
bf:57:3f:25:52:b8:ad:a7:a2:61:e7:23:95:e8:c8:
22:36:c3:71:01:d8:80:99:d0:b1:7a:5b:a3:86:18:
47:92:df:3f:43:6e:ae:4b:e7:c8:a7:04:0e:4e:15:
e4:0d:6a:d9:fc:c8:21:19:96:ea:d4:47:88:c0:aa:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8E:B4:FF:F2:6B:99:FD:FF:5F:6A:5D:68:C9:A2:D4:E3:16:F7:6D
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e1:a1:1e:f6:6a:fd:e4:ed:a8:7d:e9:e9:9e:b9:f4:7f:ba:
7d:5d:1b:ab:4a:72:57:53:89:52:b2:89:cf:dd:0e:a1:97:37:
88:24:c5:61:87:48:6a:92:2d:98:91:89:b4:dc:34:df:16:a1:
89:08:09:a4:cd:64:e7:83:ff:20:5f:d1:4a:0e:b4:3e:43:2c:
45:cd:ce:b8:7e:26:3e:77:1e:57:e8:36:ec:8b:c8:57:07:07:
3d:f9:23:d5:88:07:6b:e4:70:54:7b:b6:e5:12:ae:79:c6:a0:
ef:fe:1c:69:6b:dd:c0:ef:21:dc:3b:5b:1d:ac:a0:ec:f2:6e:
7e:60:3f:7d:8c:25:52:33:14:1b:f7:8a:37:e1:79:3f:9b:46:
08:96:cd:3a:b9:d9:44:43:ee:48:39:d9:7d:93:f0:e2:4a:a9:
79:fb:48:2a:7f:4f:9c:c4:09:2c:27:41:f7:b6:37:df:d1:54:
48:14:9d:ca:05:84:af:66:74:ae:1d:db:47:68:86:e8:6d:9b:
95:8a:02:ab:a3:0d:df:48:76:2f:23:e9:92:10:a9:78:7c:81:
f9:69:1b:fa:a8:f9:ec:02:87:fd:bb:a4:de:ca:39:2f:2b:6c:
e5:2c:82:5e:3e:8c:90:d5:98:e5:0f:cb:e8:5b:cb:a6:71:63:
89:a5:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:48 2025 by rpki-client