Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: 4M5rIaIbuqA49NtMWNZxyp2kgPNQT/BWhAuD8EeuBoU=
Subject key identifier: A5:90:A3:7D:47:D8:FB:32:2C:F1:32:97:A5:0E:6D:0D:73:7C:87:5C
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019775D32733F9419B39D38198AC839A41DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 12DC
Signing time: Sun 15 Jun 2025 23:01:01 +0000
Manifest this update: Sun 15 Jun 2025 23:01:01 +0000
Manifest next update: Mon 16 Jun 2025 23:01:01 +0000
Files and hashes: 1: TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa (hash: Nd8DGSNjI4U6VllZfkdb3mT7nzYndNyfiOfx/EMJxwE=)
2: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: ag8OUJltYBw7k6Dm3xIcjtnLH1bHAoZ7kHtFbZcsSBQ=)
4: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d3:27:33:f9:41:9b:39:d3:81:98:ac:83:9a:41:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jun 15 23:01:01 2025 GMT
Not After : Jun 16 23:01:01 2025 GMT
Subject: CN=a590a37d47d8fb322cf13297a50e6d0d737c875c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:a3:65:20:40:32:d7:6f:56:07:6a:67:c8:
c7:e6:c7:fa:59:e6:c4:12:04:40:94:1b:3e:99:44:
8c:fb:63:48:db:95:98:e5:0f:65:a4:b5:cd:7a:f3:
bc:b1:60:31:8b:50:40:ff:0b:0b:a6:49:0a:b0:6b:
77:0c:7c:88:9e:34:d9:97:7e:98:b5:f5:d0:e9:82:
6f:b7:d0:27:48:f9:00:49:a0:e1:d6:21:73:95:a6:
ca:cf:2d:b1:97:1d:ba:a9:dd:9f:7f:85:3a:b4:1c:
f8:8e:a5:a9:ca:b7:70:46:fe:90:9c:e3:4c:9d:35:
69:ba:92:e8:ec:d7:8f:9f:78:a1:0a:e8:0c:17:6b:
d7:df:c0:bf:64:53:e3:f3:a8:5f:4c:a7:6a:4d:ca:
f0:ff:bb:cd:6a:e9:c4:16:38:a9:c2:e0:c9:60:45:
3d:1e:61:4a:99:65:9e:40:b9:3b:d8:ec:fc:56:7e:
21:6d:81:92:9c:95:b1:77:97:f9:06:b2:b2:20:16:
b8:b4:9a:f5:eb:0c:ec:07:5a:68:33:0c:9c:ba:e1:
08:d3:a1:4d:28:1e:8f:8f:e7:04:21:11:f4:6b:a4:
b0:fd:61:5e:1d:a8:f1:43:b9:05:09:72:cd:15:e3:
76:fe:ab:d4:47:19:5e:4a:15:44:8f:a1:3d:ba:7e:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:90:A3:7D:47:D8:FB:32:2C:F1:32:97:A5:0E:6D:0D:73:7C:87:5C
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:1e:13:06:a5:a3:8b:87:fa:bd:c3:84:45:cf:5a:61:c1:0d:
ea:f2:a9:24:71:80:d4:04:18:29:9d:cd:e6:d4:f9:8c:e2:9c:
10:23:0a:c9:8c:77:8b:87:53:69:28:81:25:c3:00:8e:bb:77:
34:00:55:0e:39:d7:be:e7:3c:9d:dd:e4:0f:87:51:4a:c1:79:
79:28:a7:c1:c7:a8:4a:a7:35:54:b7:29:7a:79:be:8b:91:36:
0e:13:ff:75:e9:ef:d2:51:b4:37:a4:6f:ef:ee:84:43:8e:84:
41:bb:a4:b9:07:df:0c:22:0c:52:a7:c4:6b:66:f3:0a:8e:81:
fb:9e:e4:7e:9a:de:f5:8c:f2:a1:25:6f:a8:da:1e:be:c6:85:
80:35:68:0d:c9:b2:59:c2:34:1a:99:7f:79:26:6d:0e:e5:8b:
06:1c:16:bd:18:52:f3:b2:37:c6:1c:5c:78:8e:08:7a:6e:b3:
db:05:ec:ba:b3:e2:eb:0f:8d:7c:58:05:92:8a:5c:b4:49:61:
dd:91:9b:36:57:9a:99:7b:eb:f0:15:ea:09:2b:a8:11:af:60:
9d:74:ec:53:6b:39:f8:89:a0:70:3f:7e:91:07:86:76:61:85:
2a:0c:71:dc:07:46:10:99:14:f9:cf:da:dc:0d:01:90:60:dd:
62:8d:7f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:12:38 2025 by rpki-client