Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: j+sPKu20/lgbKNTOrJZVQegMdSSjnL9pPK4UNgGxgy8=
Subject key identifier: 54:1E:C4:1F:47:BE:71:49:A9:33:B4:D8:11:9C:4D:08:5F:AF:68:04
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 0197C6EFEAD10C842BFDE685E902126984F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 17:01:41 +0000
Manifest this update: Tue 01 Jul 2025 17:01:41 +0000
Manifest next update: Wed 02 Jul 2025 17:01:41 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: sRBmqF1cFEYYhIBGp4xecg4kJ7bxgXTErIOOoGXPXDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:ea:d1:0c:84:2b:fd:e6:85:e9:02:12:69:84:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jul 1 17:01:41 2025 GMT
Not After : Jul 2 17:01:41 2025 GMT
Subject: CN=541ec41f47be7149a933b4d8119c4d085faf6804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:99:95:3c:b6:ba:82:88:b0:7b:de:e4:fc:
9c:76:7e:a0:61:c7:b7:5c:9e:ae:4f:55:a0:85:d1:
f9:02:0a:64:99:92:a0:99:2f:03:38:92:64:ef:db:
5c:6b:85:47:ed:bd:0c:38:65:7c:20:e9:b0:18:df:
e1:bf:33:ba:f2:ee:94:33:86:92:16:36:1a:2a:36:
c6:d2:72:f5:af:a7:1e:1c:37:29:fa:6a:93:5e:84:
1e:b0:d3:86:31:11:d3:2a:f8:07:4d:d3:fe:20:e4:
d8:01:db:33:ff:d5:42:35:bc:55:15:9f:48:09:4c:
54:33:66:84:b9:88:7d:e1:1b:54:8f:0e:c3:fe:32:
68:74:43:a7:c2:85:ea:9c:bd:09:18:e1:f0:77:0a:
6a:ef:47:9b:ed:07:bb:d4:e4:01:38:33:71:3d:38:
6d:16:0d:ce:0f:c9:c6:a7:2a:ab:8b:3a:0e:22:8a:
9f:84:64:e4:3a:a2:c3:58:38:51:35:07:99:36:cc:
d2:17:11:42:51:cc:a6:59:79:1a:76:e0:1b:3f:90:
0a:37:0b:ab:46:b4:4c:8b:3b:c9:ef:b2:d3:3f:27:
dc:d9:86:6d:fc:a2:89:36:2f:58:7e:c5:1e:a9:aa:
0e:04:0a:ff:e6:6d:f3:70:e5:e9:da:31:fd:fe:49:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1E:C4:1F:47:BE:71:49:A9:33:B4:D8:11:9C:4D:08:5F:AF:68:04
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:96:cd:4a:ae:55:7f:5d:b0:fe:7a:e0:ed:aa:28:f9:64:9c:
1c:4a:a8:2a:05:b7:aa:42:2f:8c:0a:bb:24:7a:7f:78:0a:aa:
ae:34:48:3f:57:21:a6:8c:49:8f:80:d2:27:ce:43:85:be:61:
c3:06:07:49:f0:f6:2e:fb:1b:0c:4a:56:39:07:8d:55:12:62:
8f:ca:51:cd:f3:c5:59:84:18:18:f6:4b:40:a3:37:1e:97:ec:
5e:57:75:43:27:a3:bb:f5:c7:28:f3:1c:1e:74:1a:c7:32:36:
91:5e:49:58:32:61:25:ee:bc:60:cc:8d:3e:db:fa:82:4d:15:
b9:da:27:05:32:8f:2e:31:cd:6c:56:70:cd:18:65:5c:3f:c4:
4f:67:2b:c7:02:e3:bf:7f:8b:59:04:05:91:89:25:3b:8e:03:
5d:82:8e:f8:8a:6e:ba:8d:e5:fc:70:7c:fb:9d:c3:b4:65:93:
54:11:54:ea:24:0a:7d:42:71:cd:77:aa:5b:ed:c1:0d:1b:94:
a2:86:e3:64:ac:fa:d7:23:6a:fa:99:3f:96:d4:fc:93:84:3e:
34:8d:9c:9c:a5:1d:15:d8:b7:4f:1a:5b:ef:60:75:3e:bd:26:
97:2b:b4:65:c9:0f:32:09:3c:77:1f:7b:5e:b3:36:93:da:3c:
2e:58:06:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:50:20 2025 by rpki-client