Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier: Bsx62LjYByf7o38YATjaqRK0xGCOP0Of8RhaRV51PP4=
Subject key identifier: A2:34:9E:A8:24:4D:3A:8E:AF:11:14:24:65:C7:9F:A2:6F:E8:33:C1
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 0197B74522144A1D4C3EB4CA7656230B08FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number: 0DF0
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: WVEl02tR4FpSWGE0ahJdvTx1Yno.roa (hash: 5NNyoAtIIwqGJh3NNq7YS6x3xdzErX6ICXLZ0eVA/9g=)
2: Z259DsTig8t3A9cd7HAu8mMPpR0.roa (hash: JRmS+LkkqmTVluxufvzadoY4Pc8kUr0Ok9oaH67NvH8=)
3: _ltzxuGkz6znSaa7SgLi6XMBftU.roa (hash: +kNXhyoqNb3mbEFSERmsDLNGdx3dBqclzBGCcZo07A0=)
4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: 7OS9FuQZ4qqlWDne/qL8zidgv2mzV+X4Mt4zsfCyr8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:22:14:4a:1d:4c:3e:b4:ca:76:56:23:0b:08:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=a2349ea8244d3a8eaf11142465c79fa26fe833c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:49:9c:f9:2f:48:97:c6:29:ca:46:37:fa:
3f:b5:a5:c6:e1:62:98:60:24:55:07:40:39:e2:19:
7d:18:8f:52:7c:57:90:b9:fa:68:7b:de:65:07:0c:
90:c8:42:50:29:d4:74:eb:ca:1a:f4:7c:06:07:54:
f9:a6:cf:03:c6:41:3e:f0:75:90:e5:fc:c3:3e:25:
82:20:6d:e2:ea:84:94:8b:fc:32:3d:95:fa:e7:b3:
9d:7f:87:4c:c5:44:3b:42:da:22:3a:d5:ac:0f:c1:
bb:eb:c1:db:8c:3e:9f:80:1b:51:c2:c3:66:b1:fa:
75:45:b0:90:ff:36:9c:17:97:7f:e4:ca:94:92:26:
91:f4:17:96:13:99:3b:5c:c0:06:79:1f:52:92:2b:
89:3a:b8:29:bf:26:38:d9:5d:6e:d8:e9:cd:56:34:
b1:58:72:f6:6c:c0:cb:36:55:f3:66:25:8a:95:f2:
22:d0:c1:da:a2:1e:af:dc:ab:76:3e:9d:f0:84:1c:
38:1e:e3:ac:ec:ea:54:be:a5:cd:09:6d:de:a6:f9:
0b:76:50:08:30:a9:73:75:68:20:02:56:5c:76:74:
81:a3:69:f6:e5:bb:86:80:23:23:a9:a6:22:25:f3:
f7:bd:7b:7e:e6:bb:54:b5:2a:b1:b6:f2:de:00:4a:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:34:9E:A8:24:4D:3A:8E:AF:11:14:24:65:C7:9F:A2:6F:E8:33:C1
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:15:42:4d:9d:8d:2a:17:48:e0:d1:e9:70:6b:a4:e2:39:81:
75:dd:19:a6:24:97:0b:98:b2:3d:f5:f5:58:97:ed:ff:d3:8e:
09:c5:ad:0c:d0:41:b7:fa:c0:8e:dd:13:a4:e4:6b:3c:af:3f:
c0:1d:9f:58:8e:b2:03:dc:f1:8e:65:d5:d4:97:df:a8:46:2f:
09:09:a6:46:c9:42:66:e0:1f:71:b9:c0:2d:e4:af:1a:1f:ee:
02:fd:1b:fd:2b:7e:5b:e0:40:57:f7:2e:6e:77:ce:75:3c:01:
62:65:44:3d:cb:70:c5:94:83:af:1b:68:83:65:e4:af:4a:f2:
b2:a3:1f:59:ce:b1:5c:e0:b0:40:96:da:82:9b:1d:5a:78:03:
d0:de:21:ca:26:63:f0:fe:90:86:a7:93:01:f9:7a:fc:e7:40:
cc:55:1b:be:3c:71:cf:0a:47:b7:ef:7a:ed:51:26:83:02:64:
00:f2:d7:aa:06:af:55:84:ab:34:8d:d5:d0:e1:f4:eb:8c:2b:
38:0d:05:df:78:4a:18:b0:b8:70:f3:81:0b:ce:24:b3:38:20:
0b:15:00:18:2f:cd:9b:08:84:7b:7a:1a:fa:60:32:8c:ed:4b:
ae:b1:a9:d4:61:c2:22:7b:59:a1:e7:7f:8e:ec:f7:8b:73:bc:
37:02:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:52 2025 by rpki-client