Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File: oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier: Y06D+YLg64V6/ZhFw2cQMv2/RV2lCZ6TNvpb5sqXS90=
Subject key identifier: 52:FD:FB:A7:E4:ED:A9:D2:18:30:4E:4D:95:96:98:FD:38:78:F1:70
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial: 0197C0B6A9D8CBBACD241217820C1EEE0E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number: 070F
Signing time: Mon 30 Jun 2025 12:01:25 +0000
Manifest this update: Mon 30 Jun 2025 12:01:25 +0000
Manifest next update: Tue 01 Jul 2025 12:01:25 +0000
Files and hashes: 1: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: HemGsjLgIdmOl7pXP4K3wXJXGa97HmlOmfVxt16jc1E=)
2: vVp_ERdrnRIqLCUsItb5VjVaAYU.roa (hash: qquI+vjzguENR1gQyNKb61rrA2a/ZfrzpGtiqom6A+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:a9:d8:cb:ba:cd:24:12:17:82:0c:1e:ee:0e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Validity
Not Before: Jun 30 12:01:25 2025 GMT
Not After : Jul 1 12:01:25 2025 GMT
Subject: CN=52fdfba7e4eda9d218304e4d959698fd3878f170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:1d:65:e3:00:ac:bb:fa:0a:c8:c3:f0:28:
5b:6a:ed:fc:23:88:38:b1:c9:3a:d3:52:17:e8:95:
ce:a3:02:c9:b2:1c:02:6a:1d:ed:a3:bf:ad:2b:4f:
8b:af:e5:3b:37:7f:25:e1:2c:ae:89:bd:26:e1:19:
3e:04:85:ed:21:dc:48:58:36:6c:60:72:bc:48:8e:
ea:66:2a:52:07:a7:83:9b:dc:cb:9f:75:ea:67:8c:
1f:0d:df:4b:44:e9:f4:f9:26:4c:2b:80:6c:9e:a2:
c2:f8:58:ed:41:a2:55:40:15:3e:3a:8f:55:59:28:
35:71:60:1b:b5:66:4b:b1:03:34:fe:36:9d:d2:0a:
68:d5:b8:d7:93:f8:0a:68:c7:de:05:4b:67:4e:d2:
71:35:54:48:8b:8e:8f:ea:86:ba:98:34:f4:60:d1:
8b:cb:91:26:7a:36:ae:f5:49:ed:89:6c:3f:3d:c6:
88:00:14:a1:90:41:0a:8c:76:1e:48:4f:c9:af:05:
5f:80:66:0a:98:37:00:c9:94:bd:33:79:1f:49:d4:
53:9d:eb:40:43:41:f4:30:c1:8e:fa:e1:81:5f:37:
1e:7d:91:44:af:d2:24:51:4d:95:6a:e3:d3:9b:df:
76:19:1b:5f:8e:31:8b:22:c3:cf:1a:12:0f:c7:3a:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:FB:A7:E4:ED:A9:D2:18:30:4E:4D:95:96:98:FD:38:78:F1:70
X509v3 Authority Key Identifier:
keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:eb:09:cc:98:2d:0a:81:8a:fe:f0:3b:cf:7e:23:b3:70:78:
97:24:d9:fe:7c:74:24:8a:9d:ed:a0:ef:c1:33:94:cc:d0:7a:
23:e6:c8:55:7e:5e:aa:48:a6:81:82:be:2c:27:cf:56:97:af:
0f:14:b2:d1:e0:e6:2c:4f:da:b4:91:db:ab:e5:96:10:2e:13:
0a:1d:1d:a4:a6:25:18:e3:ec:cd:4b:04:2c:e3:f0:85:e5:8a:
43:85:dd:9a:d3:e3:3c:04:88:16:6b:1a:f2:6b:6a:f3:0a:eb:
6a:21:6f:e1:ca:64:d0:a0:3a:e0:55:dc:35:7e:93:ce:eb:2d:
04:04:e5:93:c3:81:4e:86:39:54:61:58:8f:a4:0b:80:da:83:
15:d1:13:8f:97:95:99:f0:fb:57:00:bb:ab:98:da:7a:35:bf:
a4:ff:d0:82:45:18:9f:5a:62:61:25:de:5c:f2:ca:ca:de:58:
ab:80:2d:24:2f:57:23:58:13:cb:6e:83:d7:e8:7c:ff:d4:04:
10:90:86:88:30:b7:bb:7f:39:32:90:58:16:37:03:79:91:45:
b5:58:a9:e1:8c:27:0e:fe:50:6d:b3:6d:fa:8f:a1:fe:47:76:
f2:e0:b4:17:34:e1:39:65:23:dc:55:7a:83:95:46:47:d0:e1:
1e:87:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:37:02 2025 by rpki-client