Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
File: o7R_qStyxJ6grFNx3jU7HicdxdA.mft (raw, json)
Hash identifier: mIsXF8aOcR5FD3Q5nas4yBcJ0LgyHTFQ29m//Hw5vJU=
Subject key identifier: 17:58:87:01:FE:54:2B:F7:7C:3E:FD:5F:AB:D2:12:4F:9D:C5:C0:E2
Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
Certificate issuer: /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Certificate serial: 01976E86D0703BD3E55A2847B6B108EE2E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
Manifest number: 0D1F
Signing time: Sat 14 Jun 2025 13:00:18 +0000
Manifest this update: Sat 14 Jun 2025 13:00:18 +0000
Manifest next update: Sun 15 Jun 2025 13:00:18 +0000
Files and hashes: 1: WIaOxFihvMngyRoJ51mATU-OelM.roa (hash: yYmLv2domUt4Svy4VBfcVVdHWZ/TicTJ4cMQnZnE8zs=)
2: o7R_qStyxJ6grFNx3jU7HicdxdA.crl (hash: IBqV0GU6s5vpUafgRhtHwYxGdsMDtWEXsQFEOkGFEns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:d0:70:3b:d3:e5:5a:28:47:b6:b1:08:ee:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Validity
Not Before: Jun 14 13:00:18 2025 GMT
Not After : Jun 15 13:00:18 2025 GMT
Subject: CN=17588701fe542bf77c3efd5fabd2124f9dc5c0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:a8:ea:28:9c:b5:2d:e7:fc:13:cf:78:ba:
53:c0:b2:68:58:c1:c1:0f:77:e4:34:ea:0b:2c:34:
10:0d:b6:4c:70:c7:69:52:6f:78:74:53:d7:97:cf:
39:34:f3:2a:ff:f0:d8:41:45:f6:70:4d:15:19:11:
14:df:75:39:33:c0:03:28:ed:f0:31:db:3e:1d:bb:
9c:85:17:a8:46:c6:3b:5a:f4:fe:fe:f8:5a:ce:dd:
dd:97:3b:90:70:0a:34:5f:32:57:eb:1b:cc:c9:46:
de:6f:99:e5:68:18:bf:ba:0b:cb:da:ee:b3:58:2c:
61:4e:1a:ea:a5:04:39:94:81:db:0e:89:e2:e5:d0:
b0:ff:09:f4:ba:af:ba:69:9b:c1:13:fd:86:55:91:
cb:b1:da:a2:aa:33:0e:0e:53:63:0d:6f:f9:6c:2c:
23:59:6c:19:8c:50:2d:c9:61:1f:49:12:4f:43:33:
d7:42:97:5e:8d:86:b5:e3:d4:16:0a:1b:23:8b:6a:
e2:fe:6f:3d:d4:ce:7e:40:93:53:a2:96:50:f2:6d:
a0:de:13:20:79:31:f4:bf:4b:2e:19:ae:7f:11:76:
8d:b4:65:40:34:b2:de:14:0a:57:d4:fd:6f:f8:db:
95:64:ec:08:79:4a:a9:6c:3e:ff:1f:6a:c9:bc:d3:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:58:87:01:FE:54:2B:F7:7C:3E:FD:5F:AB:D2:12:4F:9D:C5:C0:E2
X509v3 Authority Key Identifier:
keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d8:dc:91:74:9d:70:0d:36:28:8d:68:e6:60:5d:8e:0e:59:
dd:3b:30:f9:58:b9:20:a1:6e:b0:2f:0e:15:46:13:5b:63:27:
9c:62:04:0a:9b:47:9b:e4:06:b8:39:c0:88:06:d0:f5:19:c1:
4b:78:d3:d0:64:30:1b:34:26:77:86:44:5f:b3:9f:2d:27:cc:
9a:9d:bf:c6:44:9e:e7:b5:ff:6c:82:d1:62:9e:9f:9c:8a:8b:
31:9e:7a:02:51:91:2d:05:f4:16:a6:9c:d1:a0:78:3f:da:c9:
38:98:29:41:93:ef:12:3c:c8:76:0c:1a:42:50:41:c3:3b:85:
62:15:56:a2:28:e0:b6:c2:61:9e:ba:02:37:29:10:2d:59:53:
9c:e3:fe:43:90:93:2a:df:cf:bd:01:4a:85:f1:4a:be:d5:e9:
5c:ef:11:13:a9:71:36:66:c3:57:8d:28:76:45:c0:7e:d2:17:
fa:80:40:af:f7:98:3a:20:d2:0a:ba:9e:9c:d8:a9:1b:24:f2:
01:e4:25:66:08:b5:bc:88:fa:f6:ff:8f:1d:9b:04:9d:bc:3e:
1c:dd:02:ba:89:8a:e4:da:95:b7:9c:7f:ef:08:b6:78:54:8b:
47:22:e6:ad:61:11:76:46:75:a0:1a:85:97:88:a7:9c:61:1a:
1c:1e:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:17:59 2025 by rpki-client