Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File: o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier: Cp5TBSigCqUR+Mj5fWb/uJnfCpshtED940Fp1Na4hig=
Subject key identifier: F0:21:82:ED:E3:7F:21:87:C0:8F:C9:8D:04:11:73:99:0A:FD:A1:1A
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer: /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial: 0197CC83B4B836A17C63A59093979A6E37C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number: 1503
Signing time: Wed 02 Jul 2025 19:01:12 +0000
Manifest this update: Wed 02 Jul 2025 19:01:12 +0000
Manifest next update: Thu 03 Jul 2025 19:01:12 +0000
Files and hashes: 1: Wl5iM62c4902uaF6CR15o54SPrY.roa (hash: 9nSLjWOMe+TkmfFAZIjgcyogPeRigHrBzwxJ+UFPC0s=)
2: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: +fwUBlAWdgj9fS0RI8pcC4yRvTK0CpjElyu2qaepPJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:b4:b8:36:a1:7c:63:a5:90:93:97:9a:6e:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Validity
Not Before: Jul 2 19:01:12 2025 GMT
Not After : Jul 3 19:01:12 2025 GMT
Subject: CN=f02182ede37f2187c08fc98d041173990afda11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:c9:3d:4b:20:4e:3c:d0:da:2c:a8:9c:f7:
2b:74:58:ac:0e:32:da:ce:89:63:ac:59:f5:77:63:
a4:26:0e:c1:0d:c4:2b:4f:08:fb:9e:c5:00:90:41:
5e:d7:fe:b8:c7:8e:ff:7d:f5:3f:88:cf:ab:4c:cd:
ef:b6:63:6a:da:e5:76:e5:4c:7a:bc:a9:cb:4a:81:
fd:3c:d5:ba:6f:46:6d:d3:bc:35:97:30:d2:f2:50:
c3:37:f9:55:90:38:e2:75:ac:7a:a9:4b:9f:15:a6:
48:7c:7e:0a:61:2d:f5:c4:b4:2f:89:ac:b7:99:8e:
ae:60:21:46:28:22:bf:6d:85:c0:fe:11:c9:6d:26:
62:b1:71:9d:82:b0:64:15:6e:e3:3a:bc:fa:96:75:
01:77:1d:cc:a4:1d:1b:31:1f:83:30:cd:21:b9:1b:
ae:c5:40:11:27:f6:db:57:9b:c3:da:00:3e:da:0b:
5c:81:1f:8e:6a:72:99:93:11:fc:2f:22:5d:77:98:
b6:9f:26:41:74:e4:d4:82:31:df:45:6d:cb:b5:fd:
be:94:ab:fb:c5:15:2f:63:c8:54:d2:80:82:a2:49:
63:68:9d:e4:80:66:81:be:50:0a:01:1c:2e:cf:5f:
eb:96:34:c6:54:a3:58:7c:ef:6b:23:2c:0e:30:01:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:21:82:ED:E3:7F:21:87:C0:8F:C9:8D:04:11:73:99:0A:FD:A1:1A
X509v3 Authority Key Identifier:
keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:22:99:35:f4:ec:22:1e:88:ae:86:13:b8:e1:73:30:4a:4a:
f0:bc:b4:6a:19:80:43:9f:f6:c8:69:ce:d5:0f:57:0f:5c:96:
7b:11:a5:cb:32:b5:83:64:bb:20:2d:a2:2e:3c:64:db:b3:e2:
4c:46:ae:9f:ea:59:c5:a5:ba:ab:02:ea:38:b1:f4:c1:71:ef:
fe:0f:61:41:63:29:d3:ac:0e:1d:a4:c3:22:12:de:05:17:27:
3d:21:52:c0:41:33:fd:db:d1:cb:5b:74:3d:02:4a:90:fd:f0:
62:e9:00:01:e4:c9:4f:ec:37:b3:b7:99:0a:07:c3:38:d2:0f:
1d:df:ef:6b:d4:31:4f:96:d0:71:d3:91:c2:1c:d4:3e:f1:74:
ba:85:ab:05:66:ee:de:67:85:83:49:3c:9e:46:a7:67:be:21:
84:23:63:3f:98:54:c3:64:8b:3a:af:59:c8:5c:92:65:99:1d:
b6:f1:9f:1b:d1:70:8d:3f:7f:fe:36:58:fd:41:3b:ba:95:4b:
4c:14:7b:24:9c:0a:2a:c9:53:77:a3:84:b3:58:ce:a3:fd:04:
00:17:6a:c0:bc:c8:3c:16:de:11:e5:57:9d:77:2c:fc:7a:95:
a3:b1:2f:77:a5:1a:ab:2f:79:30:02:f3:0e:a7:9f:8b:c7:34:
6b:aa:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:34:13 2025 by rpki-client