Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: V+tP75SWBZzn4NX+89/E2Cfu2ebIfNxcCi/khksOPlI=
Subject key identifier: D1:64:27:35:25:18:F6:43:F9:17:67:2E:BB:D2:D0:E7:06:F3:4B:42
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 01977DC36F8E2140E75AB1367605C2ADA4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 07AA
Signing time: Tue 17 Jun 2025 12:00:49 +0000
Manifest this update: Tue 17 Jun 2025 12:00:49 +0000
Manifest next update: Wed 18 Jun 2025 12:00:49 +0000
Files and hashes: 1: KGkiu_v0VLQmN7S0ksdeT71QkrU.roa (hash: JLkvT5B6nB370rTNimZvN5bMsuGtWZVcc7r812WnkMQ=)
2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: s/B6suyiy5T8N37MmYTZXLiYg4/duiIcdbZPNO5nr+M=)
4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c3:6f:8e:21:40:e7:5a:b1:36:76:05:c2:ad:a4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Jun 17 12:00:49 2025 GMT
Not After : Jun 18 12:00:49 2025 GMT
Subject: CN=d16427352518f643f917672ebbd2d0e706f34b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:95:09:c5:c7:67:b3:db:ee:b4:85:e3:28:
71:46:cd:e0:d4:25:1f:46:8d:b8:cf:f7:36:68:7e:
01:bc:2b:f4:04:75:a4:02:ad:fa:14:75:ab:28:b4:
3a:31:de:90:54:dc:9f:76:a7:e0:c2:93:9e:0f:ca:
61:47:7e:65:f5:86:be:86:9c:3d:28:4e:32:cf:4e:
09:7b:b7:b7:46:73:7c:2d:c2:00:c5:ee:ea:4e:69:
e6:e1:7e:73:ca:28:dc:11:57:8b:e8:58:9f:b1:a2:
a5:7d:67:34:fb:3b:17:65:8c:37:7a:af:0c:c8:51:
cc:36:27:dd:a5:06:ef:94:53:63:65:d6:cf:4e:94:
1e:30:1d:a3:68:96:eb:b7:c0:32:cf:38:5c:5c:77:
79:f6:4e:c1:00:e4:cf:28:df:1d:da:8c:f9:1b:8d:
33:87:1d:d4:bc:dd:1f:85:04:11:63:0f:f5:9d:0b:
ed:3e:eb:f2:41:66:90:12:03:88:45:cf:54:fc:c1:
24:88:2a:56:c1:9e:6e:67:e6:05:8e:fa:ff:fc:13:
dd:85:2a:6f:db:af:34:c3:19:b9:03:dd:7b:83:9f:
51:19:4d:21:87:b0:60:10:7b:59:81:27:42:07:ea:
b0:b9:05:29:26:06:3d:f6:6d:a4:22:cb:d4:93:3c:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:64:27:35:25:18:F6:43:F9:17:67:2E:BB:D2:D0:E7:06:F3:4B:42
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:63:9d:91:7d:ca:aa:c4:2a:e6:57:c2:11:6b:06:c8:3a:e9:
71:31:9b:d6:76:c6:ea:f1:2e:ee:0a:f7:d8:04:42:27:40:81:
a5:e3:8d:42:8e:6d:a1:d1:f7:eb:7c:ce:e6:76:1d:2a:5b:c7:
8c:86:dd:2f:1c:c4:6d:03:ca:f8:43:fe:17:66:c8:12:25:e4:
47:7d:0e:39:b0:7a:54:a4:59:78:0b:48:9e:19:30:4b:87:36:
5e:94:87:a8:1e:2c:09:7e:62:6e:2c:a4:0a:af:2d:ad:c3:81:
0e:51:d4:4b:aa:a8:11:4d:bb:11:9e:06:3c:da:74:71:4a:8b:
94:69:0f:6f:5a:50:ff:ad:65:8e:cc:b0:ee:51:f4:af:7d:ab:
4e:75:50:56:65:62:4b:64:48:db:1d:0d:fb:67:53:f4:cf:13:
79:29:17:3a:0d:7c:67:0d:69:00:61:d3:85:2b:5c:d0:09:25:
f3:34:e3:52:d5:37:e8:a2:4f:a3:78:74:ca:01:9b:3e:a2:13:
5f:73:41:df:39:c2:a6:40:77:fb:f3:33:48:87:50:0c:15:f5:
47:0e:1f:16:28:a0:e6:5e:7f:5b:53:be:f0:8c:2e:34:ff:5e:
cc:e9:04:4e:bb:23:bc:1e:30:14:e8:1e:13:8c:3e:b5:11:99:
63:ac:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:51:08 2025 by rpki-client