Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft (raw, json)
Hash identifier: 9T9yyoaxbjuOKLYUtbOcgC5vSM3VHCSvwY9BBgXbiks=
Subject key identifier: 25:F5:46:9A:2D:CA:82:FF:B2:8C:2B:08:CA:1C:1A:9F:96:42:09:3C
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Certificate issuer: /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial: 0197B6A1D5EAC65BAA50F07D8EE54EC55B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
Manifest number: 15A7
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: JQFRevUesYnGzWy86if_lRLWdpc.roa (hash: t3BYwJZyAAH5HRBi+AIKc99FxTLmFzwx0nZw4AplB88=)
2: o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl (hash: bSmAI6YshhbrRkblJHbCPdXylj3KgbJmFuOFqrRpkdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d5:ea:c6:5b:aa:50:f0:7d:8e:e5:4e:c5:5b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=25f5469a2dca82ffb28c2b08ca1c1a9f9642093c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:f7:3b:ca:94:6f:39:36:1f:ae:59:ce:8a:
b6:1a:ee:4f:2d:2f:2e:a8:1b:d4:0f:c2:aa:d3:81:
6e:11:8a:4a:6f:23:cb:77:32:44:75:2f:04:e6:d5:
84:80:3d:d8:15:ad:d4:a7:05:74:e3:7b:cb:b4:ae:
2f:81:d3:06:4a:d0:14:0d:64:8d:bc:c0:70:33:6b:
e8:63:11:bc:93:25:23:4e:11:69:1a:f8:fa:01:c3:
b7:11:0b:89:71:9c:b0:f0:6d:01:44:8e:fc:fa:2e:
42:76:ea:32:27:ab:a0:35:f7:95:e2:3c:07:f6:a1:
d7:26:5f:19:17:b5:9a:9d:63:d8:e3:73:aa:68:f0:
a0:33:3f:6b:31:e9:6f:3a:fe:9b:6b:34:c9:ce:fc:
3e:4b:13:71:d8:f3:ff:6d:6f:b4:59:53:15:ed:58:
95:47:25:6b:95:19:05:48:8d:c6:90:27:ce:a3:e9:
5e:1d:ea:e7:38:16:46:a1:20:1f:db:d8:36:37:80:
a7:73:cc:64:99:b7:17:09:13:98:d8:dc:7a:5c:da:
7e:e9:ac:3e:1b:7d:38:df:56:22:e6:f9:04:3a:c2:
6f:30:dc:a0:eb:d3:81:ff:c7:8f:74:92:62:1a:b4:
50:60:99:1f:3f:c2:9e:5b:5c:ee:5a:b7:e7:df:e5:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F5:46:9A:2D:CA:82:FF:B2:8C:2B:08:CA:1C:1A:9F:96:42:09:3C
X509v3 Authority Key Identifier:
keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3e:5a:db:3b:50:83:b4:14:bd:98:aa:b4:f4:fc:6b:5b:13:
24:76:f4:4e:8b:9f:b6:66:16:41:5b:7e:87:e2:20:1b:b2:24:
9c:cc:2c:b1:f3:21:ad:b1:43:8d:a3:73:f0:29:16:c2:89:9b:
83:cc:bf:1a:28:11:8a:f2:4d:1c:cf:95:7e:44:5f:d1:ed:e1:
90:44:81:09:c9:0d:49:59:75:6e:c4:00:11:ed:7c:ad:00:a5:
0e:32:46:88:bc:1d:e4:dc:12:a3:5e:c2:cf:1f:a3:b6:ca:e3:
8d:86:45:58:fc:ba:35:d8:5f:3a:01:10:2c:5e:e2:58:61:e9:
9a:7c:67:1c:02:31:6d:c6:fc:5b:56:1b:77:dd:d9:e1:e1:61:
a5:61:db:01:60:88:61:40:ef:fb:51:0a:12:ab:a2:93:68:cc:
f6:ce:41:9a:03:44:bf:72:10:a5:fe:a4:3f:3c:27:57:0d:a4:
22:04:52:5e:6e:4a:eb:46:27:2d:7d:93:5a:f7:44:42:50:1e:
74:71:db:2b:54:1d:77:28:91:61:17:20:96:51:76:9f:53:1d:
66:e6:a3:db:cc:b1:16:6f:a9:27:d9:6e:cd:ed:2b:73:77:1b:
19:27:10:b6:71:f9:d1:84:da:79:6a:c5:56:4a:ab:af:b9:c5:
2d:ce:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:45 2025 by rpki-client