Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: L9J1IRuK7gUV6ixDM7X5z3Lhe5tXTJWxGkGAOc7RLaQ=
Subject key identifier: F7:3C:28:0A:32:EB:40:D4:5D:B8:2B:26:5F:29:93:4D:C9:BF:0D:64
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 0197B6A0AD8B3CDA90446DAE4A0CE7A490F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 0A73
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: BrYhHrEUiC6KPPt0z5zIenofLis.roa (hash: DE5/RvrYo8fEFuVG34PaeU1d6iLiNdb+LH6pRfnNAg0=)
2: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: pZ/OSJ2otREL4QJSQmtYnWkSK++QsLuAyjZbKhNlfIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ad:8b:3c:da:90:44:6d:ae:4a:0c:e7:a4:90:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=f73c280a32eb40d45db82b265f29934dc9bf0d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:93:9c:4c:5b:22:0d:c4:a0:e2:73:6f:79:ec:
1f:82:49:9a:d6:cb:43:66:c4:77:38:91:99:4c:fd:
7f:89:22:7e:62:76:09:c4:cc:72:ac:81:df:d8:39:
17:89:fe:ea:ea:70:3c:31:c5:f8:fe:74:6b:09:ae:
c6:e8:7c:4d:b2:92:5e:01:39:4a:83:67:4e:23:40:
04:f6:5b:54:b4:e2:40:fa:cb:e6:14:a3:35:40:5c:
d1:0a:a9:27:c7:fa:2a:86:bf:4c:5d:34:40:dd:7f:
41:bb:0f:59:76:87:da:bc:c6:53:c2:5c:8b:05:b3:
1a:00:e6:9f:22:99:5b:a8:df:7b:13:c6:1e:4c:5f:
1b:92:57:01:34:a4:0c:8d:12:70:cd:df:68:c7:dd:
6a:ed:f4:d2:5a:bf:5d:90:ed:de:d7:3a:af:bc:af:
72:f9:7d:9a:6e:ff:3a:a9:85:11:2f:38:6a:b2:be:
50:bd:5d:7f:52:07:4e:66:4a:6f:77:80:f6:e3:28:
cc:43:0a:d8:4c:33:12:8b:69:2d:ad:8c:ce:01:22:
e2:1a:39:25:ae:e5:b4:95:38:08:52:4f:fc:6b:f4:
38:97:4f:8a:1f:22:67:91:c9:22:7a:11:c9:4c:5d:
63:3e:a3:e9:53:0f:de:7a:bf:70:b5:ef:aa:02:36:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3C:28:0A:32:EB:40:D4:5D:B8:2B:26:5F:29:93:4D:C9:BF:0D:64
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f7:c8:74:c5:b6:12:49:fb:67:35:fa:39:91:77:14:cc:a0:
90:4b:b5:73:f2:99:3e:d4:5d:af:d2:c6:bc:9a:d2:61:0f:f9:
cc:6f:d0:39:d5:81:45:3b:f3:3d:77:ee:de:e2:cb:4e:0a:e7:
08:dc:b7:3d:13:41:31:bb:b6:fe:22:51:50:20:00:b9:a5:a1:
cc:b6:16:3d:91:90:1a:ff:66:4b:a9:73:d9:87:a3:49:cd:4c:
a5:cc:8b:1e:6d:75:f6:29:cd:03:8c:a0:a7:d2:af:28:52:90:
21:88:4a:a2:48:eb:36:ad:13:18:5c:cf:6e:a5:72:0b:24:84:
98:1e:7a:9f:4c:3f:f0:41:8e:2c:3e:4f:53:a7:bc:88:ab:9a:
a2:d4:aa:c2:a9:70:32:da:0c:2e:0b:72:f3:f3:33:02:d4:f1:
11:58:af:33:bf:21:a6:05:15:7f:2f:3e:8d:f0:a1:30:aa:6b:
cd:1e:4d:9b:85:8c:2f:77:5b:49:dc:1e:e0:96:d7:04:0c:ea:
8b:16:d3:77:58:77:b5:0a:80:79:1b:47:b5:6d:4d:4b:f0:03:
91:4c:de:33:65:e4:f2:9c:6b:cc:9a:6d:4b:bf:c7:67:f6:16:
3f:c3:8a:b8:88:e8:7a:56:f4:53:51:1b:d5:d3:c4:61:1f:58:
fe:ef:93:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:28 2025 by rpki-client