Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: de5ANKvnGCaZUCes1mguYATIcSELRXtwAxu+F1t4tu8=
Subject key identifier: 07:7A:BC:04:3C:8B:57:9E:41:03:21:5D:92:61:CA:FA:77:F3:4C:24
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 0197B96ADD90B826D1B36B6BFFF1A8B0CD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0AEB
Signing time: Sun 29 Jun 2025 02:01:17 +0000
Manifest this update: Sun 29 Jun 2025 02:01:17 +0000
Manifest next update: Mon 30 Jun 2025 02:01:17 +0000
Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: wsbGCFPx/7EevEHM0htnYF02uSDnGngTY6mQpc/gp4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:dd:90:b8:26:d1:b3:6b:6b:ff:f1:a8:b0:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Jun 29 02:01:17 2025 GMT
Not After : Jun 30 02:01:17 2025 GMT
Subject: CN=077abc043c8b579e4103215d9261cafa77f34c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:0b:80:77:76:11:63:f9:33:2f:59:78:ac:
d0:52:fe:48:04:3d:82:1f:a2:a0:f8:b0:93:52:50:
7f:b8:20:cf:26:8f:89:80:82:6c:cc:fd:67:86:5d:
df:60:4a:f5:e3:f5:96:35:35:20:ce:d3:7a:80:76:
20:f2:85:bf:e2:45:34:41:34:f6:e7:ed:7e:1e:30:
c3:5e:80:e7:65:5d:ed:84:04:a3:4e:45:2d:32:92:
d0:7b:0c:6a:0b:ea:94:76:29:54:d9:dd:73:df:59:
3e:1e:da:8b:64:bc:8a:b8:8b:3d:14:62:55:ed:cc:
f3:c7:d3:80:4d:1c:77:72:e7:cd:c0:0a:0f:5c:f6:
0b:a2:bd:5d:83:3c:1a:c5:94:93:45:80:eb:3e:21:
2c:24:c4:06:fb:d9:01:f7:e1:ab:16:d6:c3:23:d9:
16:a6:0d:d2:33:52:b0:80:de:3f:e9:19:20:ce:4b:
2f:28:4e:39:d2:c4:bd:34:d1:ce:c5:9b:c7:54:81:
0e:15:d4:83:b8:9e:84:37:b2:ac:22:b0:f3:1f:52:
a6:e0:52:a3:4c:51:f9:b8:6a:83:de:7c:db:3e:69:
ee:fe:0a:e9:2c:bc:0b:81:ac:41:c8:18:85:ba:de:
13:f6:00:f4:ad:e0:bf:65:e8:58:2c:da:cb:24:e0:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:BC:04:3C:8B:57:9E:41:03:21:5D:92:61:CA:FA:77:F3:4C:24
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f3:40:f6:e0:3b:bd:4e:d8:d5:19:de:5c:fb:71:ee:10:cd:
1a:9a:6a:ac:80:6c:08:cd:ef:af:86:36:1e:40:37:aa:fc:ac:
df:d0:00:d6:12:4f:5b:40:9d:30:ac:ee:b6:c5:e9:1f:10:40:
4a:5e:c3:50:21:34:ff:96:7e:35:7a:ec:eb:3e:50:b4:b2:94:
27:45:93:c4:1f:2e:c7:6b:56:e2:d5:6f:fe:4a:7e:28:42:c6:
b2:ab:36:1d:63:46:03:51:27:7d:15:57:e0:e8:19:51:76:19:
da:44:a8:73:f5:0a:54:d2:96:5f:a3:1a:cb:bf:a8:b9:d8:d3:
c6:22:fd:63:14:28:80:93:9f:37:2b:2b:78:38:ae:22:30:b5:
f6:70:d0:cb:8d:52:a1:05:dc:be:78:0f:a4:df:32:22:63:3d:
cc:28:11:07:d2:8d:56:05:12:8d:5b:b0:15:1f:2e:17:69:d8:
07:72:97:59:b0:4a:66:a2:9a:f1:62:b4:a8:2a:00:69:ae:ca:
69:ff:50:7a:13:92:13:81:13:0d:7f:57:52:c6:19:57:a8:b5:
53:9c:c9:fc:96:76:ec:aa:55:68:98:79:72:3c:2d:d6:e5:7d:
27:c3:35:bf:22:7f:f3:2d:43:d3:09:2a:db:a0:a2:20:4f:1b:
4c:a2:e5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:18 2025 by rpki-client