Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: kAXvXmVExjPWLqADJP8SmAGlPOpk6bQoEGfThg4d8Rg=
Subject key identifier: D6:E2:0E:18:58:40:82:E4:D0:07:83:6B:27:37:CB:60:5A:B0:CC:B3
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 0197D5F4CAFA48CED0A7E880E329A3FC5552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 1260
Signing time: Fri 04 Jul 2025 15:01:19 +0000
Manifest this update: Fri 04 Jul 2025 15:01:19 +0000
Manifest next update: Sat 05 Jul 2025 15:01:19 +0000
Files and hashes: 1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: q0RF2ORm9yOWzrCf9Bb+pAD2dbgri2lZuS6aQQHhF8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:f4:ca:fa:48:ce:d0:a7:e8:80:e3:29:a3:fc:55:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Jul 4 15:01:19 2025 GMT
Not After : Jul 5 15:01:19 2025 GMT
Subject: CN=d6e20e18584082e4d007836b2737cb605ab0ccb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:8f:31:c1:af:9c:0d:a3:4f:a7:d3:4f:6e:
0d:26:53:70:10:fb:c0:3a:66:e8:b9:6b:f1:90:ac:
6a:9f:c3:9b:d3:ba:82:d5:2d:9f:c8:1a:f2:21:b1:
fa:c9:fa:75:20:85:cb:2c:f4:53:f3:1c:85:10:2e:
21:37:02:b5:c2:82:89:9d:8d:4b:e3:20:34:5f:a5:
f8:3d:f9:74:9f:c6:45:d5:07:46:6b:70:81:02:b7:
b7:c9:4f:2d:da:8e:91:93:5c:cc:3d:da:3e:a1:94:
17:0f:10:53:ba:2f:26:93:bb:4c:64:2c:cd:6b:92:
ca:52:ed:4d:fa:e3:15:85:d1:aa:c8:7e:1c:ce:76:
27:9d:a3:79:00:d7:20:4f:26:63:97:7c:54:69:e5:
8d:58:56:75:70:f4:c7:78:35:f0:b8:5b:cc:e5:0a:
a8:a8:f3:ef:e0:1b:9a:12:b9:4c:c4:02:b3:cc:d4:
17:33:a5:5c:5c:81:52:e0:3d:0f:b5:e7:fb:c2:c0:
63:d7:fb:c0:d8:5b:e6:49:db:e3:a5:48:fb:a2:9e:
b7:d3:8e:85:b6:55:10:ab:51:c1:10:e7:e1:d1:a5:
cd:a7:48:cd:39:ad:d7:fd:af:26:6a:68:38:34:bf:
67:05:67:6f:90:15:23:01:ca:cd:8d:79:3a:9c:b4:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E2:0E:18:58:40:82:E4:D0:07:83:6B:27:37:CB:60:5A:B0:CC:B3
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e5:c9:9f:d8:94:27:ae:81:e9:39:70:de:ba:53:d4:39:a7:
c5:9d:44:c2:01:62:71:ca:71:81:e7:9e:ef:f3:55:e0:a7:73:
48:72:41:da:38:32:55:2f:b3:af:7c:f0:3c:09:7f:f6:36:c4:
30:2a:5d:80:61:cb:00:69:da:31:e8:f7:93:de:3a:9c:b3:29:
dd:2e:e1:6e:60:21:6a:14:e3:aa:b6:dc:67:a4:12:fc:08:10:
8e:7b:9d:be:02:13:ca:f4:88:f8:54:02:56:0f:d4:d8:cb:18:
88:0f:c1:66:99:3c:c2:36:c5:f2:83:8e:26:9e:12:68:d1:62:
a9:ef:63:c3:0a:1d:20:e2:9a:66:1c:c1:36:0e:af:7c:2a:2f:
a2:63:f2:5e:ca:91:1a:0b:2c:46:e1:c8:ee:2f:b4:7a:b8:a2:
da:cb:f1:22:81:e2:ff:ca:20:66:50:8c:fc:84:98:4e:51:03:
92:53:1b:9c:fd:b2:43:3d:47:39:b9:48:5e:4c:78:5e:53:02:
ba:ac:84:a2:1f:58:4b:46:9a:40:00:c7:39:1d:99:77:1c:e5:
cc:e0:9f:b6:4f:aa:c2:3a:fa:a8:84:e1:ca:dc:d5:6f:64:1b:
5e:d1:3f:ea:d6:b0:ab:13:ea:4c:06:88:2a:6b:26:02:53:c5:
67:84:73:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:11:59 2025 by rpki-client