Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: 2n0TtcykFP2jFM8AZ5p9Ni5TMcBgETJOk5v7UbRbEts=
Subject key identifier: FA:18:F6:B3:19:53:E5:27:03:7F:9C:7F:DC:A3:EA:18:7D:B9:10:57
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 0197B96B01734169A0C5661549F12E980679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 02:01:27 +0000
Manifest this update: Sun 29 Jun 2025 02:01:27 +0000
Manifest next update: Mon 30 Jun 2025 02:01:27 +0000
Files and hashes: 1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: BOhgNEWWj5Zvc/dKdQ6b2YtwoAQWmr5bXZGUotH4q3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:01:73:41:69:a0:c5:66:15:49:f1:2e:98:06:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Jun 29 02:01:27 2025 GMT
Not After : Jun 30 02:01:27 2025 GMT
Subject: CN=fa18f6b31953e527037f9c7fdca3ea187db91057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:b9:11:4d:c1:89:21:9d:4b:c9:01:68:10:
3c:da:20:b7:eb:95:7b:33:42:cc:af:56:5d:f4:d6:
1b:b1:60:ba:6f:3d:aa:e7:7e:7b:4e:83:30:8b:13:
58:bb:1f:c2:bc:bf:e9:26:1d:f0:2e:79:bb:ae:7f:
ef:25:b5:fb:64:3b:99:77:ef:15:1e:be:a9:ee:b1:
e5:3a:4b:b8:a4:8d:c2:be:ae:2b:7b:49:db:8b:cd:
da:a4:b1:67:76:59:25:5d:a3:96:17:27:90:f3:29:
48:60:cc:00:7d:8b:30:06:6b:6b:a2:bb:0a:19:6c:
39:c6:27:13:a7:52:4e:7f:d8:cd:b3:7e:6d:db:fe:
a5:e9:84:bb:d2:9a:71:bc:3c:8a:c8:3d:4d:e5:eb:
58:43:79:25:3b:ea:ac:a9:0a:80:5a:aa:4a:66:2c:
20:b2:d1:57:aa:f4:d4:8d:f4:d5:69:f9:ae:9c:9a:
2a:1b:1f:b2:20:59:ec:16:90:bf:bc:08:4a:94:93:
f5:db:d8:7a:50:e2:0b:c3:28:12:30:75:36:fa:b9:
40:77:65:80:b2:c7:12:6d:c8:af:85:ca:9d:64:61:
21:b2:e9:f6:50:ca:7f:8e:ba:50:e0:15:ee:25:a9:
81:4f:85:74:b3:9d:1f:8f:50:dc:52:ca:68:18:95:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:18:F6:B3:19:53:E5:27:03:7F:9C:7F:DC:A3:EA:18:7D:B9:10:57
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fd:a5:63:1f:37:18:97:6d:17:cf:df:32:e6:b0:ff:39:55:
ca:59:2d:fb:63:1a:8f:af:b0:c6:53:55:78:7c:62:42:99:41:
9c:ad:f2:a8:4f:5a:db:ac:20:44:cd:be:0d:2c:11:82:3c:7a:
cd:34:ce:5c:55:36:3c:52:cc:63:c3:64:27:59:73:6e:a1:2f:
a2:4e:0a:24:6e:f3:3d:df:c6:a1:ff:12:9e:fb:8f:35:5e:a7:
6a:e2:4f:60:e8:48:e8:5c:c1:f9:b3:d1:4e:f2:7f:5c:64:85:
dd:52:ad:d1:90:7d:00:4e:27:45:c6:1e:a3:41:95:e4:84:c0:
4b:35:f2:f1:4c:5e:47:25:98:5d:51:a4:72:b2:1d:e1:b0:8b:
7b:38:f9:49:3d:e7:19:f7:84:44:2f:52:3b:40:49:b8:63:82:
66:fd:70:b1:c3:45:da:30:58:99:5a:f3:40:de:7b:8a:37:de:
32:73:75:7a:a7:f1:0c:d1:81:97:ce:5a:3c:08:7b:12:0c:7f:
bf:be:32:9c:21:e9:28:61:7a:4b:1a:80:2a:07:67:d8:9e:0d:
70:83:bc:88:62:23:10:04:44:4e:4a:86:d6:3f:62:8a:47:0c:
eb:68:e3:88:b9:b8:67:c2:b0:57:78:46:17:81:41:7e:b8:96:
0d:d4:f7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:22:49 2025 by rpki-client