Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
File: o05gF-H-A5MnjChZ9DBDsx7myJo.mft (raw, json)
Hash identifier: bu6bF+SlbNOlMVxaH11sBwBTAOCzu0YqsbAk3SPby+U=
Subject key identifier: 97:01:75:6E:C9:46:C5:61:D1:E1:10:15:AB:06:82:7E:68:2B:F6:35
Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Certificate serial: 0197CDCE10C184D3A72D18F19A1A623FCDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
Manifest number: 0285
Signing time: Thu 03 Jul 2025 01:02:03 +0000
Manifest this update: Thu 03 Jul 2025 01:02:03 +0000
Manifest next update: Fri 04 Jul 2025 01:02:03 +0000
Files and hashes: 1: IThQt7fbZjTxBPjVToQUiBMJLfw.roa (hash: oQVD23q0+FFPZozW7epeAMXOc9QR32sT9Z0RYH7NZss=)
2: o05gF-H-A5MnjChZ9DBDsx7myJo.crl (hash: is3YW3R4h6jZT3gG7j4nfGUtedGLe1KKYKEhTcWeP4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:ce:10:c1:84:d3:a7:2d:18:f1:9a:1a:62:3f:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Validity
Not Before: Jul 3 01:02:03 2025 GMT
Not After : Jul 4 01:02:03 2025 GMT
Subject: CN=9701756ec946c561d1e11015ab06827e682bf635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:39:3c:06:51:62:ba:9b:3e:49:1b:85:70:
97:08:7f:b6:4c:a5:10:55:2e:71:02:85:d4:e1:ae:
1c:03:82:5e:e2:c3:ce:ce:c5:cb:e6:74:21:40:b1:
0b:92:86:ac:9d:e6:be:18:81:84:35:88:9d:2d:e6:
f3:a5:f1:f9:39:f7:da:b2:3e:63:a8:32:08:9c:a9:
9e:af:39:23:8b:96:57:bc:72:58:16:97:78:4e:e1:
dd:b8:4c:44:91:db:2a:35:eb:e4:89:99:ca:ba:ea:
8b:d0:91:20:be:ca:c7:f7:5f:e3:21:22:2d:86:e6:
64:15:b1:c7:ca:82:dd:e2:0d:dc:36:62:44:b5:eb:
7f:c4:d5:64:74:74:91:0d:ca:e2:1a:11:bb:42:62:
19:d2:c9:a9:6f:3f:9b:1b:77:b3:2b:89:7a:07:f8:
8a:cc:3c:c0:f1:70:0a:2a:43:ee:21:96:ae:63:19:
4c:1b:d7:8b:fd:ff:4c:a5:f7:cd:4d:bd:12:57:bf:
87:fc:86:53:21:8a:e2:74:65:8d:69:e9:e6:c8:1b:
53:f9:d6:bd:08:94:1a:57:f2:fd:4c:19:fa:eb:56:
4d:cd:e7:70:97:2b:ea:89:fc:5a:81:6d:3f:aa:3f:
85:59:e1:10:6f:f8:ea:7a:79:8b:d5:85:65:ea:c3:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:75:6E:C9:46:C5:61:D1:E1:10:15:AB:06:82:7E:68:2B:F6:35
X509v3 Authority Key Identifier:
keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e8:67:e7:a5:10:3b:3b:4d:7c:33:13:0d:0e:f0:f1:2d:e0:
04:31:f4:f4:ae:6c:29:b2:6b:45:95:b0:91:93:17:7d:79:ad:
c9:91:d2:42:b4:d9:79:8b:13:5a:11:16:c6:37:fa:d0:91:88:
7b:e4:f5:19:85:89:ce:28:42:96:6e:e3:a0:80:f9:bd:fa:35:
11:56:fa:5f:e1:e8:ef:b4:9d:eb:43:01:79:80:20:ea:38:e1:
d0:1d:58:93:1c:b3:c2:32:2b:9c:09:ef:25:14:16:ef:ed:e6:
95:b6:7c:ea:c1:e7:06:94:c5:51:f2:b5:10:22:d0:a8:be:d0:
84:96:dd:8e:55:75:a7:c9:15:83:b7:cf:bb:cc:0a:9a:f6:9c:
89:2d:a2:69:45:ab:49:d8:9e:ff:f3:2b:f3:45:61:43:9c:0a:
62:28:7e:29:01:4d:ee:e8:d3:4f:f4:48:ce:72:c2:21:fe:f9:
0c:1c:3c:1c:64:1b:c6:e3:a8:e1:ce:41:c8:6b:dc:98:1d:99:
6b:e0:f2:e4:e5:dd:e6:9a:07:8c:39:bd:66:47:e9:21:df:59:
55:f3:c0:b5:55:45:99:01:b9:f0:36:56:63:fe:66:de:88:1e:
4b:82:6c:1c:60:44:d7:34:b1:c2:70:c5:25:ea:9d:62:0e:2f:
7d:9e:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:14:22 2025 by rpki-client