Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: MShYYgN5jboCOMo34MaKxPBECLDrIcSw3jZpjnuR3N0=
Subject key identifier: 74:36:49:B8:0F:50:DE:5E:19:E5:8E:9C:5D:CA:97:64:14:5C:D1:57
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 01976E5055742F5A5AFE787904721DF30E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: FF
Signing time: Sat 14 Jun 2025 12:00:47 +0000
Manifest this update: Sat 14 Jun 2025 12:00:47 +0000
Manifest next update: Sun 15 Jun 2025 12:00:47 +0000
Files and hashes: 1: 6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa (hash: c/B6n5T0x8EmEsvZEc0l8JbZU1xcXl0cLbnUAdZI57M=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: f31659cRo31E/Scuvb/RadXGSPBBD4IaA9nw6pNsgNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:55:74:2f:5a:5a:fe:78:79:04:72:1d:f3:0e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Jun 14 12:00:47 2025 GMT
Not After : Jun 15 12:00:47 2025 GMT
Subject: CN=743649b80f50de5e19e58e9c5dca9764145cd157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:6a:42:ad:04:b1:af:f5:a3:2c:bd:e1:f0:
a7:b7:c1:b3:0a:78:34:41:46:c3:77:8a:90:62:74:
18:ba:e1:89:cd:d3:58:9e:51:bf:7d:67:f0:4a:f6:
d8:41:b0:bb:0d:cb:12:a4:57:ba:c7:5d:ff:3e:79:
bd:f6:8d:2f:18:a7:c8:e1:e0:e4:0b:c1:ac:10:ab:
61:ea:33:8d:70:3d:59:37:11:a5:22:33:3e:0c:1c:
8b:be:00:76:42:2f:77:e3:91:44:e2:cb:e0:6c:58:
0d:c9:8f:9f:0c:02:0e:89:35:64:d4:7d:89:27:6f:
33:72:ff:47:f4:db:c2:dd:87:3c:8d:24:45:48:7b:
12:47:36:16:e4:2e:05:ad:15:f6:98:50:dd:89:f4:
b9:11:7c:8d:39:ac:e9:a1:94:7d:8f:49:ee:58:e5:
e1:db:67:07:90:80:c8:a9:54:ca:7d:e6:3a:e3:3e:
27:02:75:22:a4:21:1e:d7:96:0b:99:1f:2b:04:44:
af:ac:94:cd:c4:3a:72:43:df:d0:08:3d:e7:e2:98:
8b:96:ff:b8:bb:02:90:c8:38:aa:03:ac:2d:55:3a:
32:c5:b7:e8:26:91:3f:c7:27:bf:48:0d:39:d9:b7:
d5:9e:04:68:88:d9:fd:75:7d:56:f9:08:e7:d4:cc:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:36:49:B8:0F:50:DE:5E:19:E5:8E:9C:5D:CA:97:64:14:5C:D1:57
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ac:58:49:a0:66:d3:8e:1c:ac:20:bc:40:c7:b1:d4:e6:8d:
f3:0d:fe:31:a2:e1:16:f2:c7:aa:06:88:ab:dc:48:3a:c5:c4:
b2:4c:e2:56:7e:97:ac:9b:03:28:35:d1:eb:0a:19:c0:f4:15:
b6:fb:d9:e4:4c:6a:39:20:3c:2e:5c:38:de:e6:ad:3a:41:54:
30:57:f5:de:3b:6a:8b:54:2a:54:80:0d:6f:84:cf:a6:6e:7c:
42:7e:5f:b2:fc:ae:96:f3:ab:70:87:9c:f9:23:5f:03:6c:2b:
94:2a:f8:5c:f7:a8:f1:f9:e1:df:0b:d5:06:84:c1:fe:8b:e6:
59:9d:7f:04:d7:80:d0:2f:8f:a6:ba:10:da:f2:0b:7a:94:38:
ea:42:75:48:84:5d:d4:71:1b:d9:7b:56:34:71:d4:ac:3c:ad:
66:b7:0d:e7:23:93:1c:b8:86:65:db:40:b6:8e:c0:97:7b:67:
5d:1a:bd:59:37:5b:a3:51:a2:db:a8:b6:f5:43:0e:be:f3:f9:
c0:62:b7:dd:34:82:de:26:87:7e:52:5d:5f:bf:96:57:72:5d:
16:8c:ab:4f:09:9a:31:07:a0:0b:eb:d7:de:ea:a9:e0:ce:06:
aa:4b:7f:36:85:ff:1c:12:5e:6a:2b:46:e0:a8:47:42:94:de:
30:78:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:35 2025 by rpki-client