Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: 6e+3aDdvzqOASpVT4aaOSLmqdOmqEJdlVzzTzoJOOYM=
Subject key identifier: 3D:CF:D5:32:C5:EF:D5:C0:84:3C:26:A8:AB:9B:84:9C:90:D1:38:F9
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 019777C11FB4FECC032B84E4949EA6A34900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 0767
Signing time: Mon 16 Jun 2025 08:00:34 +0000
Manifest this update: Mon 16 Jun 2025 08:00:34 +0000
Manifest next update: Tue 17 Jun 2025 08:00:34 +0000
Files and hashes: 1: D_Ap7aX55j2mvnDRbvve0G_OwsM.roa (hash: rFKERfrglcdmlPd1vXc+xLBg8nNvQQZtBdRb9+OODlU=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: fqpQVjHL+W8gl23Ol8rCO3raGN+XzAlc8iwGM03EbJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:1f:b4:fe:cc:03:2b:84:e4:94:9e:a6:a3:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Jun 16 08:00:34 2025 GMT
Not After : Jun 17 08:00:34 2025 GMT
Subject: CN=3dcfd532c5efd5c0843c26a8ab9b849c90d138f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:da:27:fc:2e:91:b6:2a:75:72:d6:27:1d:20:
a9:6b:61:db:e3:91:70:06:cd:48:51:ef:c6:32:60:
ff:f9:2d:70:bf:dc:ab:45:e3:8a:de:b6:be:80:6c:
b7:32:9d:76:82:ec:e9:ae:5a:45:3a:86:42:f7:00:
8d:41:5e:64:2b:c4:50:b6:30:9b:57:bc:7c:c9:40:
52:16:01:e9:f0:f5:1c:23:7b:dc:29:da:9f:7f:80:
8a:a3:14:d1:43:5d:e6:c1:b1:e5:7d:5e:3f:5d:5e:
28:32:f9:0c:dc:48:26:77:a5:01:3e:bb:4f:00:d5:
fc:8c:c3:42:2c:0d:47:74:1f:80:04:66:c9:aa:e2:
98:6c:66:72:e7:db:db:c8:2f:b3:b8:21:ae:88:29:
92:10:fa:c9:8b:01:55:42:e0:f4:a2:71:9b:52:3e:
d0:9b:fe:99:14:fa:7f:75:9a:5e:94:a1:b1:ea:23:
63:51:93:5d:1d:f1:b7:1a:13:4e:c2:e0:0b:93:6e:
ab:54:e9:b0:6e:78:38:54:90:54:76:0c:f0:30:34:
47:58:e3:49:9a:00:c2:39:27:c9:d1:da:53:4e:89:
02:6f:8e:f3:07:a9:e5:6a:23:55:82:a6:f5:ec:29:
71:ba:2c:fc:93:ae:6d:77:27:4f:79:8f:3e:09:89:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CF:D5:32:C5:EF:D5:C0:84:3C:26:A8:AB:9B:84:9C:90:D1:38:F9
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:04:d2:54:87:88:80:9e:f7:c2:6a:05:78:97:ca:a9:9b:
fe:44:0a:5f:0f:69:38:ae:a6:57:41:fa:b9:fa:15:94:89:41:
fd:26:c6:1a:63:46:5a:f2:f5:eb:0e:35:01:48:16:3e:27:0c:
77:5c:fc:db:c2:16:44:a1:46:fe:71:d6:56:84:83:f0:27:b2:
69:1b:6b:49:d7:2f:32:fb:9e:c2:3b:86:fe:a1:de:89:21:f2:
d9:a3:08:7d:b8:2e:ab:28:61:9b:54:9f:b9:0f:20:66:26:1a:
1f:b6:38:e6:37:e6:6b:0e:5d:40:30:43:f7:12:b4:1a:43:5d:
8b:0a:af:42:3c:f1:e7:16:63:26:bf:d4:96:c9:15:83:b8:2a:
47:86:2b:69:93:5c:b2:fc:a2:22:74:d2:42:c7:34:9c:8b:bd:
cf:49:36:42:98:41:bd:21:5a:d8:90:d0:20:45:91:41:96:fa:
0f:0b:0d:b5:87:a7:bc:19:22:b1:f4:74:1a:c1:13:32:21:b8:
e7:1c:1f:aa:b2:30:62:8f:4b:a7:31:a9:3a:3e:a8:39:bb:f6:
89:12:45:4d:05:28:93:98:04:08:0c:d8:41:5d:21:01:33:6e:
58:28:35:85:23:87:00:ff:4f:cf:d2:12:1c:e3:0e:2d:4f:74:
5d:cd:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:43:32 2025 by rpki-client