Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
File: oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft (raw, json)
Hash identifier: B2uOu4cyhADxHXuS9jZTQ0nV1QZfJr93upoCnQFsUcE=
Subject key identifier: 81:09:05:44:29:07:3F:32:38:78:49:DD:14:58:75:E7:33:B9:7A:2D
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Certificate issuer: /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial: 0197CEA962E9D2E236C5E0BA0278257E333E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
Manifest number: 0406
Signing time: Thu 03 Jul 2025 05:01:36 +0000
Manifest this update: Thu 03 Jul 2025 05:01:36 +0000
Manifest next update: Fri 04 Jul 2025 05:01:36 +0000
Files and hashes: 1: WacUruZTE83WEEePnyB3KKF0YFU.roa (hash: IGW0uLOK6yIPDXD8+jDEju++6EJZMklynz//i9x70Jo=)
2: oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl (hash: JbTomQv7uVK6t8kOOZBFkAn16XgNOP7CPlNRXOUWpa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:62:e9:d2:e2:36:c5:e0:ba:02:78:25:7e:33:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Validity
Not Before: Jul 3 05:01:36 2025 GMT
Not After : Jul 4 05:01:36 2025 GMT
Subject: CN=8109054429073f32387849dd145875e733b97a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:d2:83:92:0f:45:4d:d2:5e:3f:53:92:0f:
89:75:aa:98:f9:92:5a:4b:e6:d5:1a:14:c8:e9:f3:
98:b0:9a:f3:a3:ce:b7:4e:54:02:fe:c3:44:af:2d:
c2:fd:67:50:79:cb:58:2a:ed:33:ad:c8:f8:f4:ef:
3a:8a:77:f4:83:6c:82:c0:6b:e0:cb:18:9d:f1:b0:
49:8c:b5:dc:e1:a5:72:82:fb:de:02:d0:de:54:98:
a0:79:43:59:08:f2:f0:bd:d8:8b:31:9a:b6:39:06:
5c:68:8b:ba:49:bd:24:76:fe:ee:af:a3:5d:7e:49:
a5:70:a5:0e:69:fc:dc:6b:5c:4e:07:53:b2:ec:39:
2a:f1:77:80:2c:5c:c6:ae:95:54:ce:1b:9b:ce:5a:
f0:d7:d3:14:4b:03:4c:2f:f8:1f:ab:71:a0:83:a7:
37:b6:0e:b3:29:29:f6:c6:dc:46:a5:e1:48:c4:9a:
d8:5a:f3:1d:0e:d0:89:4b:85:9f:8b:96:45:2c:ff:
8a:1a:7f:aa:1a:92:a0:ad:2e:c6:c6:4c:9c:98:1b:
65:2b:41:17:81:46:67:09:58:49:8e:b7:c3:df:b6:
1b:03:e1:ec:21:dd:83:f5:ac:d0:fe:3c:57:72:ed:
68:03:9e:8b:6f:c9:e5:a7:cb:df:62:06:ad:af:42:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:05:44:29:07:3F:32:38:78:49:DD:14:58:75:E7:33:B9:7A:2D
X509v3 Authority Key Identifier:
keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f8:63:8a:de:73:e9:3c:1b:a8:ef:2c:48:91:20:52:45:6e:
60:11:a2:26:cc:a0:4a:07:9f:be:78:db:41:70:70:b1:2e:59:
50:0a:ec:b9:e4:95:04:56:e8:33:53:fe:5c:f1:8a:d9:fc:c3:
fa:cc:9a:aa:60:fb:ff:ec:9a:ea:95:5e:f0:6c:08:fc:65:59:
6a:72:4b:84:ce:ae:d3:96:47:b2:5e:d1:db:96:22:38:c5:fd:
cf:bc:60:e9:76:17:10:dc:3f:b9:ff:81:4b:c7:f7:5d:19:00:
78:a9:30:88:7e:6e:30:b1:12:ae:57:8b:bf:d4:cd:ad:70:af:
d6:fd:e3:48:f1:1e:dc:51:59:44:ce:c5:e8:77:8a:f7:9c:f0:
fc:1d:49:bf:91:10:e7:e3:7b:a1:f1:b6:8d:ea:44:e2:0b:2b:
4f:43:d8:22:c1:f1:2f:03:81:17:e1:20:ab:01:08:16:41:e9:
05:0b:06:68:7a:fa:b1:08:8b:62:ac:dc:f7:b4:50:68:e8:3f:
73:59:79:46:57:a5:71:7a:05:1f:b5:e3:d9:8d:80:d0:73:1d:
80:cb:45:27:c3:7f:6e:2a:a8:ae:48:14:b9:e0:d7:7a:64:03:
96:1d:55:e1:61:f1:42:40:89:93:ad:bd:03:eb:3d:58:67:1a:
11:83:2f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:31:17 2025 by rpki-client