Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: AQ5ytBjDnLuBs4uBZpDJ1BG4BVhrZkk9M0s3aOfgvDE=
Subject key identifier: 39:1A:70:87:BB:41:F5:FE:6E:7B:0C:65:3F:FE:F0:7C:15:62:92:F9
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 0197BAB4820FE45809DBF059859FB6C76531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 04F5
Signing time: Sun 29 Jun 2025 08:01:21 +0000
Manifest this update: Sun 29 Jun 2025 08:01:21 +0000
Manifest next update: Mon 30 Jun 2025 08:01:21 +0000
Files and hashes: 1: 6v0nzfvGeTgWbd7HMB1o0jugKV4.roa (hash: FIng+1902A4Yeb0hTmwd9v/HruvnzrDdoUL01BIRQaM=)
2: ZF1SC7MrVuGK4fd5ZmYRiHDlL3I.roa (hash: KgxBB1nnxX0nfT2Gm3/SgLbCQQuHnTl1fS9TiWSDHoI=)
3: eI_RQ6AJ4E0z9B7GOJa52wr5foc.roa (hash: HGEC1odkERakp/sMpWBFo962FhRjB0yXI9SlY4RDrwU=)
4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: S5tlAhcQdpWcHS1B2lFIi5PNS1vuK5oSlYitQQcWZsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:82:0f:e4:58:09:db:f0:59:85:9f:b6:c7:65:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Jun 29 08:01:21 2025 GMT
Not After : Jun 30 08:01:21 2025 GMT
Subject: CN=391a7087bb41f5fe6e7b0c653ffef07c156292f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:18:d4:95:6c:95:73:6a:6b:67:18:63:ab:
be:b6:71:3a:d3:e4:a3:d4:80:3b:73:8b:9b:1d:2b:
1a:cf:4d:75:ab:0c:9f:e9:61:75:45:ac:9c:f1:18:
d3:ed:8b:9f:a7:e9:c3:2c:2a:c7:d9:41:0b:c2:54:
49:e7:3a:3a:cc:67:13:b0:b9:05:20:87:3c:5e:25:
20:32:ea:73:5d:64:f6:d6:4a:0b:7c:d7:ff:2e:9b:
2b:99:30:9b:09:17:27:f9:1d:8a:69:4c:a9:84:23:
21:89:b4:75:c8:e1:cd:3b:f0:28:db:48:84:21:f5:
9e:e9:13:e0:ba:76:94:f3:98:12:f6:2c:21:b4:52:
89:ac:8e:ec:a2:72:11:9d:59:6e:0e:53:3f:93:74:
d6:90:42:0e:d3:11:7b:e0:47:d9:ba:20:eb:1c:4d:
2e:19:5d:48:54:5a:41:4e:89:2b:21:a6:f2:83:69:
b4:52:57:e2:c3:55:66:9c:4f:57:43:8f:6a:90:4a:
f9:ca:98:a2:f0:ce:33:1f:17:05:c9:bd:68:70:d6:
58:97:bc:2e:d9:32:39:28:5f:58:ae:e4:3a:a6:9e:
a0:f0:a7:ba:1d:5e:42:20:a1:5a:a8:64:0c:d7:42:
70:c5:50:21:d2:c5:b1:99:6f:ec:a1:dd:d1:99:b9:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:70:87:BB:41:F5:FE:6E:7B:0C:65:3F:FE:F0:7C:15:62:92:F9
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3e:6a:48:2e:4c:74:11:2d:f1:b5:2c:fc:6f:a6:7d:7d:c1:
0a:a1:1e:17:50:67:81:e9:2a:0c:e9:22:eb:cf:c4:cf:76:a2:
2f:06:ee:c3:cd:ac:94:6e:d2:9c:f6:f8:eb:99:c0:ff:38:7c:
c8:44:77:94:26:2b:6b:8a:82:41:3f:7f:80:3b:6b:0d:e1:58:
46:46:7b:39:98:74:1e:cc:87:8a:5c:c2:c1:af:c0:29:20:43:
0a:6b:d5:09:7f:f8:5d:77:4b:3d:25:58:ec:d3:42:f9:40:c4:
7f:fd:bb:aa:41:16:7c:3d:ad:3d:c7:8d:79:56:2c:45:06:ff:
d2:04:a4:b7:b0:d6:d3:62:ed:42:76:f4:e3:a5:e7:f1:14:ae:
6f:41:31:1d:8f:b4:42:91:41:b6:1d:96:8c:b9:03:8c:b4:bc:
46:34:bb:64:a7:7d:46:6b:e1:04:d1:9c:05:29:67:2c:ea:5a:
cf:44:59:ea:51:ba:9f:49:ca:4d:99:ef:4e:13:d7:d5:07:60:
d6:8c:a6:c7:65:d7:89:2e:ed:ab:70:54:9a:b8:76:6b:87:9a:
88:e8:ed:15:39:c8:37:bd:8d:c6:dd:e6:14:29:7b:55:e8:b2:
17:4d:17:32:55:1f:7f:68:42:2e:07:a6:bb:b1:26:ff:db:0b:
87:96:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:56:57 2025 by rpki-client