Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: /OasAFiTkHMty4sGtK9Wx98IB4KRaqKZf14GUJBGue4=
Subject key identifier: 20:03:17:5F:E7:AA:21:36:EC:70:47:D0:21:8A:2C:88:E4:BB:CF:05
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 0197D5188E7851118C78ABFB5F0F7E2C0979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 1213
Signing time: Fri 04 Jul 2025 11:00:45 +0000
Manifest this update: Fri 04 Jul 2025 11:00:45 +0000
Manifest next update: Sat 05 Jul 2025 11:00:45 +0000
Files and hashes: 1: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: ClDHtAnyUGkHWS+xjlk/OXm8qjHy3baJd+V0liDF12M=)
2: uvI_GRIq2GyJoG31og82hOgTWrg.roa (hash: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:18:8e:78:51:11:8c:78:ab:fb:5f:0f:7e:2c:09:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Jul 4 11:00:45 2025 GMT
Not After : Jul 5 11:00:45 2025 GMT
Subject: CN=2003175fe7aa2136ec7047d0218a2c88e4bbcf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:81:30:d8:54:73:2a:5b:ea:54:5d:b6:4c:ac:
e5:43:19:ba:9f:b1:6d:61:00:6b:fe:91:88:d5:b7:
6e:91:0a:af:1c:63:11:c3:d3:66:25:9a:94:db:74:
19:b1:97:c7:ff:9f:77:e7:a3:e4:fc:57:62:b2:02:
fb:2c:1c:e3:c4:e1:18:30:c0:4f:ab:c6:8a:75:f8:
cc:4d:ab:2f:f7:76:ac:7b:8c:0d:18:87:4a:c1:c7:
17:21:bc:11:30:2c:4b:18:aa:81:1f:53:b0:63:88:
e1:3e:a1:13:87:48:28:14:23:fd:d6:42:51:75:31:
e5:c5:57:84:bc:7b:60:89:4a:55:fd:60:c2:05:ad:
b4:cc:cf:47:43:fb:72:ef:16:22:22:c3:65:6f:a6:
41:cf:08:ce:70:68:3d:6f:f8:7f:b3:39:4e:6c:ed:
dc:69:48:cc:97:ec:84:84:10:57:ed:97:2c:61:3a:
d3:bb:75:4d:93:41:5c:e2:03:96:c1:e2:02:e2:6a:
47:29:34:49:43:a1:f1:b7:20:d0:ec:0c:32:05:81:
9e:c3:10:2e:4c:fd:9e:b9:40:09:ad:ce:34:0c:0c:
4f:c6:58:88:b3:d2:8a:56:2f:42:a7:0e:d1:90:35:
af:35:63:30:78:c2:87:5d:44:b9:11:86:42:1c:d3:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:03:17:5F:E7:AA:21:36:EC:70:47:D0:21:8A:2C:88:E4:BB:CF:05
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:da:11:ea:ba:4a:d7:56:85:e6:84:ff:95:a3:80:89:d4:ef:
a9:ad:a4:92:81:46:bf:f2:4f:1d:30:1e:61:4e:25:df:1c:45:
32:e7:bb:72:59:85:9f:cb:cf:87:77:18:1d:b8:34:61:29:6e:
d9:cf:c4:e7:06:43:74:a6:b1:fd:28:df:f7:bd:21:ed:ba:8f:
40:f0:8b:f7:d8:49:33:2f:66:fb:69:66:ed:42:58:f2:f3:f6:
69:7b:8c:a1:d7:18:11:78:d8:13:a6:03:58:09:4a:2c:16:1c:
94:62:b1:0b:93:98:f1:2d:1a:00:1f:56:49:a1:71:60:36:cf:
64:81:64:d3:bb:1d:06:2e:b2:ec:5e:e0:ab:44:4f:cc:98:aa:
e9:84:f3:9f:18:d1:af:ea:1c:05:a8:ea:12:e5:c9:5e:bb:d1:
2a:bc:72:12:da:1c:c7:76:12:1b:8f:21:ed:43:42:bf:2a:3d:
b1:a7:fe:0a:e9:85:69:c6:63:ff:70:50:d7:9a:0f:8d:34:0d:
47:94:e9:12:0c:00:f6:c5:8d:3a:f5:3f:52:5d:d8:64:71:36:
b5:58:d7:b1:74:54:4e:ac:57:20:ca:24:ec:e8:bc:9d:e1:06:
63:eb:15:86:a1:47:1c:55:f0:c9:3f:59:df:77:5c:82:34:07:
e8:33:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:33:47 2025 by rpki-client