Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File: o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier: vlbkwTRhkdmSSZUfFTwfqZPDhmFy3XqhZNumlvT6lV0=
Subject key identifier: 34:C5:D5:C5:DD:CC:6A:2F:D3:5B:83:7A:08:85:E3:7A:30:10:00:85
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial: 0197D58774EBF0246377A7AFDEF228F3DF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number: 11BA
Signing time: Fri 04 Jul 2025 13:01:53 +0000
Manifest this update: Fri 04 Jul 2025 13:01:53 +0000
Manifest next update: Sat 05 Jul 2025 13:01:53 +0000
Files and hashes: 1: CbvTUoVTI9OkiUvPHuJ57q9cBSY.roa (hash: M2lLf2osrJPDAkfEBP++DLdBvZ2RZq2vDWq4YQYtA7g=)
2: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: uxF27N1pi1WXwdO9oH+5jeWdFMpqh07VwDaP+R6gkpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:87:74:eb:f0:24:63:77:a7:af:de:f2:28:f3:df:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Validity
Not Before: Jul 4 13:01:53 2025 GMT
Not After : Jul 5 13:01:53 2025 GMT
Subject: CN=34c5d5c5ddcc6a2fd35b837a0885e37a30100085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fa:7f:77:09:9b:9b:38:3b:9b:60:b6:25:8e:
c0:90:a4:39:3b:a3:28:95:79:72:8a:2e:f5:ed:87:
65:dd:44:1a:8f:c8:fe:07:51:00:da:91:1d:ab:d1:
6e:89:2c:d7:49:4e:8c:b0:43:68:ab:df:05:6a:8e:
d0:7e:27:6f:92:00:23:7f:42:f7:c5:aa:47:b4:94:
ff:9b:f7:39:5f:5d:1f:0c:3a:c1:77:74:99:dd:62:
77:c4:e7:15:bb:70:de:51:fb:82:10:72:f6:c6:b1:
12:39:2a:a2:67:7a:4a:f9:d1:45:bc:ba:35:99:9f:
eb:26:da:d3:21:db:b9:9b:34:8f:dc:50:4c:61:9c:
15:5e:43:a2:19:74:cd:70:ca:a7:69:6f:9f:69:e8:
bb:50:fe:ae:b2:91:fb:fb:e5:ca:a6:b8:0e:1d:f3:
54:c0:83:be:23:04:64:55:ee:2b:2b:94:fe:ed:2c:
23:cb:39:4f:66:85:14:f5:67:53:cb:9c:7f:cb:c3:
63:26:d4:c6:1d:85:72:16:33:8e:91:30:49:53:04:
c7:76:32:20:3f:27:e3:10:bc:6a:ce:7b:9c:3d:69:
11:a3:96:ea:91:dc:ed:9a:15:e5:b0:82:70:36:2c:
2a:45:46:24:60:fd:06:8c:3f:b6:a2:f6:9f:fc:8d:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C5:D5:C5:DD:CC:6A:2F:D3:5B:83:7A:08:85:E3:7A:30:10:00:85
X509v3 Authority Key Identifier:
keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9d:46:30:80:df:4d:6e:af:25:b0:11:87:e7:72:96:55:94:
fa:d5:da:70:6f:71:7d:43:8b:27:4a:e9:15:46:f6:5b:f4:85:
68:88:c9:88:2e:53:48:4c:e1:a2:38:fc:d6:08:d3:9a:25:27:
6a:cb:3d:06:17:5e:e8:1f:9d:15:60:de:93:8d:01:ef:71:07:
13:2f:bb:9e:f1:a7:4a:4e:6b:b1:bd:01:8c:71:3d:0a:ed:a9:
0e:88:a7:c2:49:99:86:bd:50:0e:67:89:f9:a6:7e:d1:3d:a7:
02:3c:5d:44:28:74:00:cb:38:69:de:aa:2f:97:c9:b5:77:9f:
1e:af:3f:ee:4a:f5:4d:94:42:56:a0:29:0b:85:f1:06:84:0a:
cc:b0:7d:d9:5e:a0:9a:ea:fa:a5:d7:df:91:f8:2d:99:23:69:
3f:50:81:43:5e:61:3b:c4:c4:fd:a9:56:92:57:4f:f0:2e:4c:
3a:cb:3d:08:29:d8:3a:22:2b:90:98:3e:6e:4a:12:fa:c1:92:
03:02:8b:e1:fc:61:34:ef:a5:19:90:6f:75:93:54:3a:f3:72:
5c:f4:63:a4:44:44:cf:23:fb:4a:89:c4:f4:2a:9b:9a:c3:27:
52:3f:2e:1b:51:87:4b:52:28:c1:1c:97:6d:b3:fe:6a:c6:4c:
0a:eb:0f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:57:10 2025 by rpki-client