Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: LbHEiy7gLWgs2BmFMqsElGvI+4CQr07fJbKznX2KXQM=
Subject key identifier: 2D:71:AA:59:6B:87:76:F1:03:24:E1:C2:94:D3:09:08:92:3E:62:AA
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 0197B70ED8B938FB76285F7D9866A53A3A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 01BE
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: miHlM9LoOvhYbZQONUYiQ010Y0Y.roa (hash: lxFbzya4PF93jTfC+wdGWG8lRjQOoMqPwgxmgMabAZw=)
2: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: 66AzyaCdX98PsM7+inkvyyZOzX7T4iw7K9V2CTWPUn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d8:b9:38:fb:76:28:5f:7d:98:66:a5:3a:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=2d71aa596b8776f10324e1c294d30908923e62aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:85:34:c0:11:bb:fc:0a:ec:63:c3:80:2a:
ce:ae:1c:94:b0:98:af:bb:fd:f3:be:b2:7c:1f:10:
26:e2:d9:16:b1:94:d7:d7:2d:0f:9c:df:62:92:69:
4d:bb:33:20:dd:73:0f:db:ab:29:e1:af:bd:73:02:
a2:9e:4b:20:4e:44:e9:39:7d:80:b7:35:4b:ed:2b:
6f:56:4d:26:a7:c7:28:18:8f:83:dd:bf:a3:7a:02:
41:6c:fe:04:b1:80:58:36:ed:33:15:6c:38:ee:a9:
41:49:1a:99:9d:79:8c:50:76:07:a3:ef:ec:ff:48:
91:79:4d:a6:e1:cb:b2:3a:7b:93:63:1d:93:fc:bd:
5d:c1:55:98:d9:5b:e5:89:8a:ef:ab:ce:f8:59:df:
15:81:5c:b4:6a:3e:4c:16:29:92:a5:eb:1b:c5:fb:
e7:20:31:b6:b6:9e:5e:ee:81:1f:61:d9:72:89:68:
c8:7f:4b:52:0f:5f:20:9d:50:07:8f:43:9b:23:cd:
15:01:a7:84:02:71:0a:6a:1a:76:10:b7:68:91:4d:
a2:16:5d:c9:69:0a:ad:22:be:6c:5b:65:98:ce:d8:
38:68:06:71:99:6e:9c:14:81:1c:75:40:91:83:7f:
f1:8d:0c:30:83:94:2e:07:ac:74:bd:4f:ca:38:6a:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:AA:59:6B:87:76:F1:03:24:E1:C2:94:D3:09:08:92:3E:62:AA
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1e:d8:ea:fc:01:99:fb:5a:01:4d:bf:11:e8:71:8d:5e:00:
61:86:34:08:c7:39:d0:eb:f8:e3:9a:8c:d3:67:5b:c9:54:86:
ee:5d:18:1d:c6:e3:2a:0f:b8:85:eb:bf:c6:b1:4c:8f:79:60:
13:58:37:73:75:f8:de:33:aa:da:af:ce:1a:ec:8c:53:69:8f:
dc:66:5c:68:5b:e8:7e:3d:3d:4e:f3:55:04:c4:19:85:83:15:
a6:99:57:cc:f3:cc:b4:45:ca:b8:73:57:7f:e6:6e:5c:a2:9f:
a6:a6:6a:b2:5b:9a:be:6b:1f:44:a4:86:5e:75:ae:14:1e:27:
f3:0d:1a:3e:49:54:63:0d:52:65:7d:d2:d3:8e:f1:45:f9:e8:
40:4d:72:00:da:ca:d6:9f:24:4f:8d:17:03:45:98:a0:19:bf:
63:3a:a4:6a:ea:33:9f:01:b1:cb:30:05:c1:4e:f0:3e:50:c7:
c2:69:48:51:97:1f:b3:f6:89:89:31:55:82:23:cb:3f:ec:aa:
d2:9c:4d:83:ee:b5:f4:ae:0a:fc:93:16:69:0e:73:4b:e1:2d:
ed:f5:95:c3:f4:59:bd:44:53:ca:77:1c:68:f9:78:86:63:2a:
f9:a3:20:8b:cc:2c:46:c4:be:39:e7:3f:4f:c2:a2:26:15:a1:
6e:75:5b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:52 2025 by rpki-client