Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: 9LBi0KOUZEcTle6aG1Wk41m/hT0n5FJ9co/RQane3CE=
Subject key identifier: 81:D0:DA:F8:D5:F5:02:87:9A:F8:AC:54:8F:87:D6:BB:DA:6F:93:BE
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 0197C68128E9C40584A8C448DE72570AA14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 01E2
Signing time: Tue 01 Jul 2025 15:00:42 +0000
Manifest this update: Tue 01 Jul 2025 15:00:42 +0000
Manifest next update: Wed 02 Jul 2025 15:00:42 +0000
Files and hashes: 1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: lqnokUsYklvQ3/zPh6yuQuX9VwnGZYyfMRqgaGrHje8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:28:e9:c4:05:84:a8:c4:48:de:72:57:0a:a1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Jul 1 15:00:42 2025 GMT
Not After : Jul 2 15:00:42 2025 GMT
Subject: CN=81d0daf8d5f502879af8ac548f87d6bbda6f93be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:a1:64:21:77:3a:2c:c3:75:24:94:95:8f:
fb:52:37:90:ad:7e:00:f5:72:ff:ac:ef:39:29:30:
ff:a0:d1:78:09:95:a9:5e:ea:b9:d1:e7:5c:14:2a:
c4:44:da:6d:48:33:a9:77:0a:6e:86:af:bc:04:d2:
10:45:93:4c:0d:6f:f1:b5:ad:15:b6:5a:99:7f:e9:
18:4b:3b:f4:be:47:b1:32:40:0f:e2:85:ad:f4:b8:
95:3b:c0:15:90:81:f1:c6:97:f2:f5:70:77:43:d5:
41:e1:76:99:99:4c:ba:fe:14:65:d9:4b:02:a3:0f:
d9:00:76:f6:0f:b1:ab:bd:0e:56:8b:b6:3e:8a:63:
21:2b:4a:8c:8b:ff:42:d4:ca:03:fa:d9:ec:96:ed:
98:45:4a:af:02:8a:3e:df:f2:c3:57:05:4b:47:a8:
37:e2:80:d6:18:d9:d3:6d:4f:a4:b1:c3:17:51:25:
d1:57:c8:92:89:e0:46:f9:0b:eb:3b:22:5c:df:57:
b9:de:84:69:32:48:20:18:15:2e:af:bf:c0:92:11:
a0:12:13:9d:4a:b8:0c:38:29:57:c6:1f:c2:20:60:
08:ce:6b:d0:3d:cd:57:40:e7:2d:7a:ad:17:92:b6:
b2:4c:31:87:84:16:a3:3b:8a:4a:57:13:8a:da:de:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D0:DA:F8:D5:F5:02:87:9A:F8:AC:54:8F:87:D6:BB:DA:6F:93:BE
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:17:18:1b:13:7d:a2:54:d2:93:d7:90:a4:6a:20:8b:dc:8e:
c3:1f:b1:32:f5:ab:10:e6:2b:cd:c0:a0:e7:c5:9c:a1:7e:25:
fa:29:68:1e:e1:55:1e:cb:3c:92:94:8a:da:61:ce:a6:9c:d4:
e6:69:46:59:f2:8a:41:c1:ef:a8:35:d8:f9:40:28:2b:aa:70:
42:13:c6:f5:21:6f:17:d0:27:6e:4f:61:6f:ad:26:f0:1f:0f:
1b:35:00:55:4d:4a:1f:16:28:2d:42:f4:ac:3c:08:06:d1:b2:
bb:9b:aa:46:97:cd:d8:4c:c2:8a:5a:e7:b6:e1:90:44:6c:93:
a0:e3:83:f4:b7:c9:0f:2e:93:12:43:7d:9c:4a:09:c2:90:be:
ed:3f:72:de:60:ff:a6:e8:e1:9c:e1:b4:37:4d:f4:b6:de:69:
a8:bd:99:83:a8:8f:38:f8:3e:63:c3:16:be:f0:e5:7e:ea:70:
af:84:1c:b8:e7:20:b2:b4:b3:b3:1f:ea:66:18:eb:17:45:b8:
3f:f2:61:61:9a:2b:cd:b1:80:91:a9:53:e2:78:0b:55:93:d3:
58:f2:de:de:df:5b:dd:a3:6a:ef:05:2f:b3:f2:73:5a:a1:0b:
72:15:f7:9e:ea:f9:ea:7f:21:2a:72:ff:a3:8a:ea:78:21:40:
34:7f:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:28:12 2025 by rpki-client