Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: hXkx+VKqytC/xQG4iwkCceYF5k/BQGtYUPQN9ByqOc0=
Subject key identifier: 49:7B:DF:06:D0:40:29:E0:05:91:B5:D4:4E:79:F0:A7:4E:D2:80:46
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 0197B77CA9D7580D7BB00834EB3FEE86EB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: rvSheWMKOcyWz/HrNKcq4B0a6D4UzNqxNQkiNA9jsV8=)
2: NbSHLJ18LUFyB0iCR0rBch7bc-U.roa (hash: m4WtwA746c9+1dEjftL5KY1wr7YjjqzoZ0GnddIoHLc=)
3: OblX778QtOOevvVmLppB6okYChg.roa (hash: RcRv1xji1xsemWDqjTtvWFuENOLwcxiNbuhjUnUsVAs=)
4: nrPgzgHDDtDxynx0QD9e2VIxNS4.roa (hash: zbB58fN/lRPGxPAWWtZWRRqfZ8FZqb3qnG/xrDyogwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a9:d7:58:0d:7b:b0:08:34:eb:3f:ee:86:eb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=497bdf06d04029e00591b5d44e79f0a74ed28046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:a1:47:6b:bf:63:26:f6:17:ad:dc:b9:71:
2d:16:24:f4:bc:33:52:b7:79:bc:e3:f7:33:de:13:
17:a9:f4:9c:74:dd:bf:e4:cc:26:ae:2f:43:13:cd:
4b:99:31:cc:1d:72:64:0d:f9:37:1f:fb:4a:8b:2e:
56:ed:89:e5:97:0a:97:d1:f8:ca:97:09:77:0d:48:
d8:72:13:f7:b1:6e:1f:72:53:fc:7e:a6:c6:ac:6a:
97:34:ba:ce:89:31:87:85:32:9c:94:84:0d:bd:a0:
af:29:5a:b4:50:e2:cd:fe:bd:e1:5d:ec:70:b5:4c:
c6:3b:9c:79:fd:f4:4b:65:3a:75:14:a1:b5:26:48:
0a:92:4b:a3:58:25:d1:02:11:48:7f:b5:4e:69:2b:
9f:26:c4:6b:a7:36:69:89:a8:92:51:c4:f3:4f:63:
3b:c9:bf:d5:3c:7c:71:84:a1:f7:c5:a9:e0:58:2d:
79:7e:73:f4:90:8a:8a:68:39:58:dd:4d:4d:63:a6:
79:25:ef:1d:7b:0d:f0:9e:d3:43:b7:7e:14:79:c7:
af:d1:91:6f:4d:13:d3:06:75:f4:ea:30:6d:89:58:
7f:41:5d:5d:6e:84:a3:07:11:fd:fc:bb:69:07:32:
65:56:58:d5:34:89:fa:4d:54:7d:a3:e0:c3:52:e6:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:DF:06:D0:40:29:E0:05:91:B5:D4:4E:79:F0:A7:4E:D2:80:46
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:93:50:e3:ec:fa:3d:2f:95:a0:f7:bc:b3:c3:45:42:64:0e:
41:99:b0:0d:21:de:b1:86:bd:df:de:d2:8b:dd:b6:5d:a9:14:
6a:3f:75:fb:91:89:12:f8:22:a9:9e:69:e5:1a:43:ef:28:36:
be:75:41:96:c2:1b:03:25:cf:7c:dc:af:6f:4f:92:34:3e:51:
e2:54:62:85:05:b3:be:c8:49:e2:d8:ea:2f:f7:50:40:0a:15:
03:08:f7:4a:5b:35:02:ca:30:47:f1:e1:9a:31:93:e3:ef:c3:
98:13:6e:36:5c:c3:3b:97:4b:73:1c:7f:3d:2b:7c:5a:28:d1:
4f:52:fe:9c:23:1c:f0:11:ba:14:76:4d:62:93:40:b9:a4:30:
11:6f:bc:a5:c5:8c:b5:81:99:7b:a5:90:b7:48:28:9f:db:a6:
fb:a4:ff:90:95:c1:a2:d6:6b:aa:ee:c4:d5:fb:26:47:0f:92:
d2:a2:6f:ab:31:f1:1f:d5:01:42:b5:e2:07:86:6d:7b:79:d3:
21:74:65:68:29:1a:37:24:3b:ff:c2:58:d8:c8:27:c1:f5:08:
35:3e:e5:13:7f:27:1b:06:98:a5:d9:07:b2:91:2f:7f:45:d8:
9d:61:71:35:6f:d4:be:c6:0e:45:c3:4f:3b:30:63:9d:31:87:
50:6c:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:02 2025 by rpki-client