Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier: Z3+5ElmnJp3SmQs7UpDaSK0OsoMn931tLuRnNiMXoZs=
Subject key identifier: C4:5B:C6:24:4B:4F:14:F9:19:5D:99:23:A6:91:3D:07:0D:6C:83:E8
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer: /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial: 0197B6A25309D6CE8489F1642859553ED65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:03:00 +0000
Manifest this update: Sat 28 Jun 2025 13:03:00 +0000
Manifest next update: Sun 29 Jun 2025 13:03:00 +0000
Files and hashes: 1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: qPBt1Og+YYezIyXJHzXE7M5AutFehQy2wd/JNsTymS0=)
2: AddwdaQYSDgJ_-W9pipGLPibD4Q.roa (hash: YjKAFD6jnw8P32xCITagf8KVgpNGeRxCswidFmsKIOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:53:09:d6:ce:84:89:f1:64:28:59:55:3e:d6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Validity
Not Before: Jun 28 13:03:00 2025 GMT
Not After : Jun 29 13:03:00 2025 GMT
Subject: CN=c45bc6244b4f14f9195d9923a6913d070d6c83e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:be:27:80:48:e6:3e:2c:ed:5e:33:11:20:
25:9b:5a:1c:b6:46:1d:e5:e9:df:21:72:4a:c1:76:
3a:dd:18:58:16:cc:16:c6:88:b2:00:0b:db:22:76:
93:63:12:c9:4c:2d:74:1b:f5:da:47:ee:5f:3b:6e:
96:aa:c4:cf:1e:2d:26:83:62:ca:5a:cf:a5:4b:94:
0a:32:8e:a6:e0:a7:17:7f:72:31:f6:50:d0:89:fe:
a6:b5:4e:ac:13:64:09:12:88:77:b9:69:30:d3:7f:
b1:d6:8f:a1:76:dd:01:e3:9d:73:8f:65:2d:24:62:
fc:68:76:c7:a8:d6:6a:b5:e0:5a:e8:2a:4a:1a:d5:
5d:f8:c9:84:14:8d:1d:d1:ba:73:2b:04:0d:0f:d2:
7b:a7:b9:11:8e:27:01:31:d7:af:ab:8c:6b:bd:16:
3c:94:60:a5:8e:10:c9:81:08:cf:a7:a8:d7:3f:63:
88:9c:50:7d:78:47:05:83:c5:b2:0d:09:dd:dd:4e:
2a:0d:2b:bd:39:0d:de:d9:c4:8e:7a:ed:d6:4e:43:
75:7e:d2:46:a8:b6:2a:76:b2:47:a0:9c:b2:53:55:
db:7f:25:7c:ca:ca:8e:c2:67:a4:be:1f:b5:1c:ba:
86:5d:57:f7:03:0a:1b:5c:04:83:6b:0b:2d:d6:fb:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:C6:24:4B:4F:14:F9:19:5D:99:23:A6:91:3D:07:0D:6C:83:E8
X509v3 Authority Key Identifier:
keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2e:bb:35:6a:89:64:48:9c:ee:05:69:fc:07:30:18:89:d4:
5c:97:42:eb:40:8d:50:66:34:1b:e2:63:6a:37:6e:82:87:2e:
21:38:4b:8b:e5:79:65:90:70:e4:fa:4c:8e:d9:56:3b:f1:d8:
96:3c:ca:29:c9:29:e3:90:9a:42:40:9a:ff:10:7a:e5:e0:e0:
2a:4a:2f:e7:bf:11:a2:c0:74:90:74:d0:58:45:25:5b:2d:f3:
79:99:86:53:0f:62:fc:51:67:94:59:2f:52:99:c9:73:de:da:
d2:ac:77:f9:e7:0e:36:e1:e3:2c:25:5f:5d:59:67:7f:54:48:
3b:84:6f:12:0e:22:a8:7d:03:99:c8:2f:38:4a:c2:56:e3:8f:
6c:fa:4e:c8:3d:e3:ec:11:3a:98:02:7d:f9:e1:6d:e5:97:81:
97:66:50:69:8b:b1:ba:17:3a:29:eb:27:a8:80:e3:df:af:fa:
66:59:45:53:c0:1a:18:7e:b3:f6:b2:9c:5f:50:d1:ab:5e:e5:
46:12:98:98:54:05:95:fc:fa:eb:54:3d:dc:24:b2:4a:f9:7e:
1a:3f:ab:5b:82:01:ef:21:d8:9f:c5:e1:6a:6b:f9:10:08:c9:
b7:bc:0f:8e:f0:25:65:43:e8:07:2f:7b:07:3f:a1:3d:ad:6a:
b3:f6:38:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:51 2025 by rpki-client