Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: 2KpdqV3PEBkQ252TLEovAfd8KO//CjNml+q2MI/vze0=
Subject key identifier: 20:0A:EB:02:6F:BB:65:5B:2F:C3:E4:82:9A:DC:5E:24:CB:5F:75:D6
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 0197B70F3DA0CF1D11667AE9080A24918766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:58 +0000
Manifest this update: Sat 28 Jun 2025 15:01:58 +0000
Manifest next update: Sun 29 Jun 2025 15:01:58 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: c9hZR7gCjWkEkH5D0GCH3rCRaQNoqcMKw6RZ2j07M8I=)
2: q9xJeN8PofnE74G9SyXfTH60ZME.roa (hash: yftwsdAWhtCdoWRv+jAeZvxiXWe//Rf4F2VF/Lbsjio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3d:a0:cf:1d:11:66:7a:e9:08:0a:24:91:87:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Jun 28 15:01:58 2025 GMT
Not After : Jun 29 15:01:58 2025 GMT
Subject: CN=200aeb026fbb655b2fc3e4829adc5e24cb5f75d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:ec:ea:5e:a8:5b:f7:d5:60:73:1c:de:09:
02:e3:53:76:1e:70:f4:40:0d:8e:a0:54:8f:d0:2a:
66:fc:8d:96:dc:a6:eb:19:ef:30:b0:97:8a:7c:2a:
4b:78:5a:7b:0a:24:ad:58:22:31:b4:50:b5:e6:b9:
29:16:b0:46:8b:47:21:1a:d1:f2:5b:bb:48:ed:1e:
cb:8c:85:b0:f2:c5:6d:11:96:4e:b3:3d:f8:55:64:
42:9b:12:46:dc:eb:72:a6:d1:64:2c:a5:cf:35:2d:
e0:fb:e6:6e:4b:10:90:76:b0:15:12:b1:06:1b:c2:
52:8c:19:72:5a:b8:e5:81:c9:89:ac:db:8c:02:a3:
a8:63:91:ab:2f:1a:a6:7c:03:38:2a:f8:1f:51:be:
5a:70:ca:02:93:62:42:39:7d:68:26:75:00:bb:af:
9c:21:da:91:11:53:a6:19:91:61:1a:5d:24:e3:79:
7c:66:84:bb:12:0e:8b:92:1b:42:d6:48:68:2f:62:
0c:cb:86:b3:39:2f:51:f0:eb:97:a7:f4:bc:40:21:
15:ec:a5:62:7b:dd:b2:6a:0e:20:01:5b:0d:4c:0b:
52:96:c8:a1:99:aa:ee:b1:3b:53:1e:d6:1e:8a:76:
7c:27:e7:38:d7:3a:8a:95:35:91:5f:90:7d:83:8f:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:EB:02:6F:BB:65:5B:2F:C3:E4:82:9A:DC:5E:24:CB:5F:75:D6
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f3:d7:db:05:24:1e:38:49:68:f1:28:c2:dc:f3:2b:48:a9:
57:86:3c:4c:c2:49:05:a4:16:d0:05:58:66:28:26:5c:ec:21:
c3:a6:14:03:d5:9c:04:96:9f:d5:e7:e2:88:47:ab:85:2a:b1:
ce:b8:e7:3d:69:19:22:99:95:60:09:e3:8e:69:5a:86:4b:cc:
e9:f0:a0:60:1b:a5:ce:35:72:2c:fa:35:40:e5:32:b1:c8:c2:
6f:1b:77:90:d7:2d:af:4c:92:4b:cb:da:ad:2e:b0:41:b7:7c:
2b:77:1a:4b:f5:50:05:0d:32:a6:6e:cb:79:f5:77:3c:b3:87:
cb:de:aa:b4:6a:05:71:bc:da:07:b7:29:e6:78:3c:06:e0:1e:
ee:e6:ba:87:49:73:f8:a2:c4:fa:9c:7e:88:12:3a:f9:0a:4c:
0f:e2:c8:b1:d3:6f:56:01:56:70:04:74:8b:6c:83:6d:db:07:
1d:a6:f7:f1:43:22:9b:0e:03:93:e3:11:00:9e:80:3d:3f:57:
aa:19:d1:ba:d5:23:82:e5:56:3d:80:6a:5e:29:6e:5b:2e:67:
bf:10:d5:54:1d:71:5a:07:ad:51:77:5d:e6:56:34:56:aa:ae:
d3:47:da:07:35:b0:4c:24:ec:27:6d:8f:4e:0a:70:61:96:f9:
27:00:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:54 2025 by rpki-client