Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: plAjmyElwjwPPzOYLM0naStF6oRrqIU0AEiO+5uOFTI=
Subject key identifier: 49:56:F8:19:8B:91:C5:46:57:42:4A:16:57:87:03:11:DD:3F:04:1C
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 0197B77C74A2ECB3D8796EB5566A074DD849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 01D8
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (hash: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: EF3sKXfdsAgVsuHm8XKsL1N5TFYXdLnwWFR5uRk16xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:74:a2:ec:b3:d8:79:6e:b5:56:6a:07:4d:d8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=4956f8198b91c54657424a1657870311dd3f041c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:26:f4:28:ba:87:79:af:df:fd:8b:98:7d:
73:0a:09:4d:4c:50:ae:14:23:43:88:65:5e:33:28:
38:1c:34:59:ea:59:ee:18:75:93:21:26:2e:2e:79:
8d:76:67:17:29:c4:08:d6:31:2c:cb:1e:55:19:1e:
f0:43:1a:22:b9:ba:f0:37:1e:bd:1d:07:55:c8:cd:
45:7c:c6:c9:62:12:7f:0e:0f:85:36:38:6c:4c:f5:
0b:01:aa:87:c4:04:0b:49:5d:0e:dc:bd:f2:e8:d1:
d6:e6:79:ad:08:a7:32:ce:5f:d0:ca:71:d3:6b:8c:
b4:54:ec:ec:67:37:84:97:fe:76:c1:a8:7c:9d:48:
7d:da:e1:6e:63:0c:73:b2:a5:2e:6d:00:ef:3b:23:
c5:72:f6:67:ce:bc:01:07:f6:ce:e3:e4:e7:66:11:
97:dc:d7:7a:ea:fa:c3:96:ba:4d:c2:73:f6:a0:49:
89:e7:7b:9c:3f:8e:74:73:6b:de:c4:61:71:77:02:
4d:f1:c5:03:43:4e:ac:57:0d:20:e5:d2:63:58:57:
61:43:9c:af:31:33:dd:f3:6c:3d:57:a4:4f:22:4a:
c7:bf:de:33:54:44:76:40:f5:e0:59:37:3a:6e:ad:
55:df:2f:29:29:c1:d3:85:fb:4d:8b:8e:6d:97:4e:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:F8:19:8B:91:C5:46:57:42:4A:16:57:87:03:11:DD:3F:04:1C
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b2:12:54:49:43:99:92:77:c7:fe:99:ca:ba:91:3e:64:d6:
06:d4:f5:98:30:ac:f4:2a:97:ab:35:ad:8b:3a:af:5f:dd:ee:
81:dc:ac:1a:f7:5a:a0:8b:48:22:6f:1c:d3:5a:2f:79:d6:b2:
94:bd:37:e6:61:39:79:f3:3d:06:1f:e2:6b:c4:1f:59:fa:eb:
40:f5:56:4e:cd:79:27:33:1f:6e:9f:c8:b8:72:f6:8b:11:ff:
10:36:25:5a:77:e4:d3:29:d1:ac:03:d7:99:59:54:a4:90:80:
8c:b8:b8:ec:29:96:49:f6:e7:77:0a:2b:bf:98:e2:80:65:47:
86:5f:0c:55:4a:1b:91:16:3c:cd:bb:c0:0d:b6:a6:36:1b:01:
b3:04:90:34:cb:45:80:8d:a0:c5:4d:53:b8:f1:f0:a5:dc:c8:
4a:59:e7:eb:f2:95:07:52:b6:b3:1a:c0:1d:44:a0:12:3b:7b:
8b:01:ea:68:58:eb:5a:c6:42:7a:a4:34:1a:7c:00:8c:d4:5c:
fc:7f:e9:58:c9:02:86:a1:9a:98:05:f5:90:84:23:e1:a0:7f:
01:cd:ae:23:f5:ca:76:b7:f9:12:da:07:4b:d6:cd:8c:bb:a8:
82:66:d3:a3:cd:d7:a0:ee:aa:65:99:bf:3f:81:79:9c:50:5a:
1a:4e:f6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:45 2025 by rpki-client