Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: +IRpzaxT6cPtk58hN2dh+peEnXrWUgCb3ske+AEZ5vs=
Subject key identifier: 60:7A:E0:58:E2:1A:1D:CB:79:BA:1D:0F:78:9D:EC:2E:F1:54:33:A6
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 0197B7EA15A259352F8DB54BBF6E8888218D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 0D80
Signing time: Sat 28 Jun 2025 19:01:00 +0000
Manifest this update: Sat 28 Jun 2025 19:01:00 +0000
Manifest next update: Sun 29 Jun 2025 19:01:00 +0000
Files and hashes: 1: 0lerfjDbBomfVzh-fPpNdTuZC_w.roa (hash: K04vSVynMPGD818PT8TEi3joicn16R1AClxmk8kzM/M=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: 34grqzBN+Gdpty1NdIBSVitC+hJ6xTcuwvuiqZrX+bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:15:a2:59:35:2f:8d:b5:4b:bf:6e:88:88:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Jun 28 19:01:00 2025 GMT
Not After : Jun 29 19:01:00 2025 GMT
Subject: CN=607ae058e21a1dcb79ba1d0f789dec2ef15433a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:88:05:1e:fb:cd:cf:12:2f:0d:dd:36:5f:
90:bd:b0:42:ba:ce:ab:ad:1c:c3:fe:a6:15:8e:73:
f2:ba:33:75:14:38:f5:d6:ed:69:f2:6f:09:9d:97:
1a:b1:cf:e8:39:fb:ed:93:cc:83:e4:83:ef:ee:01:
03:f2:fa:bd:9b:d7:a5:67:5c:a6:58:2c:44:b9:7d:
23:08:b9:83:e0:1d:1a:13:ec:e6:84:6b:02:6f:f3:
40:f0:09:a7:02:ba:ef:1c:4b:df:05:c2:57:03:1d:
dc:c5:d3:06:ec:63:5f:5e:99:54:62:17:c9:3a:bb:
74:4d:bb:2c:6f:4a:c3:ee:ce:a6:07:3f:b1:85:dc:
fa:80:cd:cd:2e:57:bb:a3:4e:48:05:a2:73:88:44:
b7:18:2d:de:4d:63:8f:20:a5:36:08:fc:3d:38:1b:
ef:82:f4:93:fd:da:aa:9c:f4:83:e3:6a:78:12:f9:
a7:40:28:88:19:52:f1:f8:db:5c:fa:ec:9d:09:b4:
05:a7:ae:63:ce:c7:1a:b0:28:70:cb:4b:85:82:14:
34:06:d0:4c:4c:62:a4:ff:4a:b3:5b:b8:a1:71:14:
f0:bc:50:de:55:92:7a:fb:bd:99:cb:b3:f4:ef:f6:
e6:53:6f:11:fe:05:ac:0a:4b:b0:95:69:9e:0e:54:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7A:E0:58:E2:1A:1D:CB:79:BA:1D:0F:78:9D:EC:2E:F1:54:33:A6
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:cd:d5:af:e5:c6:f7:ea:d1:a8:30:7c:32:e1:30:4b:1a:
3f:b6:20:cd:d7:db:cd:75:1c:49:7d:92:8b:00:ef:4c:ba:62:
50:ca:f6:5c:08:2e:ef:a1:33:76:86:9d:d1:63:13:77:8c:a8:
a5:fe:86:ab:4e:81:97:0e:ae:54:99:e1:53:59:fe:10:4c:f1:
91:d4:8d:3b:d2:2b:fb:1b:91:93:81:60:61:b1:74:d7:6c:0d:
2e:b8:18:38:62:0e:09:75:c0:d2:7b:5f:17:2c:ae:6e:2c:96:
d5:d3:bc:ed:1c:07:d8:cf:25:08:4a:6d:5d:3e:cb:f8:e3:89:
bb:e0:bf:eb:0a:92:0c:1a:b2:7e:a3:1f:76:0f:6d:d3:e0:da:
1f:3c:9f:18:26:d1:19:ce:fa:8c:9f:00:b6:f1:cf:44:25:59:
cc:f8:ad:6c:f2:49:32:69:ad:05:5c:5f:ec:f0:c9:2d:e8:11:
c1:0a:07:ea:5f:9c:fa:1b:e6:11:52:85:97:61:3e:f6:02:78:
d6:a7:fe:7b:7b:71:02:b8:d0:1a:b4:43:20:80:62:a1:b2:75:
04:05:4f:ca:eb:11:a7:5b:72:e9:cb:c6:e0:dd:3f:41:4d:16:
56:05:b3:88:1b:c3:22:72:a1:19:a7:ee:c6:b1:c0:4b:d8:73:
d5:36:a2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:12 2025 by rpki-client