Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: 9X07s8ckBTQb7oacKQu7AkQF1d6cSmXBHQcIdjCzBKU=
Subject key identifier: D2:01:7B:5E:E0:8A:A0:CC:55:D3:98:CF:E3:72:2C:5B:B5:6A:5E:D2
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 0197B8C5F73488CC2F04BEE4B14F79766B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0458
Signing time: Sat 28 Jun 2025 23:01:10 +0000
Manifest this update: Sat 28 Jun 2025 23:01:10 +0000
Manifest next update: Sun 29 Jun 2025 23:01:10 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: eehbR1jU5BvNxldkBDNk6Srpy0R4KCSljSh2+gKu0H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:f7:34:88:cc:2f:04:be:e4:b1:4f:79:76:6b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Jun 28 23:01:10 2025 GMT
Not After : Jun 29 23:01:10 2025 GMT
Subject: CN=d2017b5ee08aa0cc55d398cfe3722c5bb56a5ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fd:2d:c6:73:2b:0a:b9:d7:22:0c:7d:a6:72:
3f:bc:ac:3e:77:ce:5d:47:fb:5f:8f:2a:02:0c:19:
8e:67:ee:c7:3a:97:4b:cd:c0:31:6d:77:38:20:49:
86:13:47:74:32:5b:dd:ea:ee:7d:21:7e:ea:85:ea:
ac:17:78:cb:55:c6:68:64:da:0d:a7:5d:ba:7b:d0:
fe:fe:33:8e:df:31:9f:46:d8:d4:77:b5:5d:2b:08:
99:22:af:d1:61:87:8b:da:4f:ea:3c:ee:eb:cf:6b:
9a:37:8a:89:6d:f3:ea:6e:c9:a3:b5:e4:7b:cd:04:
cf:c2:c4:3d:ae:62:22:b0:d2:7d:74:4e:bd:74:52:
2d:18:b0:37:66:0d:dc:e7:db:c9:ec:a1:5f:08:4b:
25:1a:c7:77:61:0e:b6:2d:e7:a1:95:0a:a1:ee:1b:
a6:ac:32:24:1b:3d:ca:cc:95:45:d4:b6:8c:8d:1f:
a8:d5:45:da:af:4f:3e:40:eb:e5:a4:9a:5d:bc:7c:
c3:e2:d7:92:81:52:63:1d:7b:3c:0f:9f:37:4d:9e:
14:85:8d:06:b1:ef:f1:9d:64:30:e4:95:cf:71:9a:
e3:ad:f6:af:55:bc:cb:25:fb:7a:f8:7a:96:4e:79:
06:74:ce:f8:e5:72:33:7c:a9:bd:36:0d:53:eb:5b:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:01:7B:5E:E0:8A:A0:CC:55:D3:98:CF:E3:72:2C:5B:B5:6A:5E:D2
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d5:55:b6:e2:71:f3:92:86:4d:70:16:62:af:76:c3:da:27:
b9:75:a4:7b:33:46:73:03:b0:9d:5e:4e:d6:39:a8:d9:48:f1:
7b:15:29:70:b3:4a:e3:e2:d0:46:39:4e:f1:d6:6c:df:b7:da:
ac:4e:d0:bc:3b:87:57:bb:e0:da:d8:e7:fe:1d:b1:4f:20:87:
25:bd:b1:01:5b:4d:c0:c0:93:4b:23:a4:a2:74:cc:1f:93:6f:
56:c2:4c:9b:be:2f:24:27:27:7c:e1:c5:3e:69:61:92:ca:59:
d8:41:66:b3:b9:83:c1:32:fc:d1:09:35:26:34:9c:bf:68:c0:
e5:14:a0:b5:3a:e7:c3:ef:20:67:5a:f8:df:a6:56:33:e3:f6:
a0:2f:8a:80:80:5f:5e:91:35:68:61:4b:64:38:55:cb:7d:75:
9a:91:b3:88:56:bf:a6:72:3b:0f:42:92:de:7e:ab:46:99:7c:
17:d4:99:76:de:aa:3f:04:f4:83:53:1d:ce:a6:cd:ca:f1:0f:
c7:32:e9:eb:15:c3:06:bb:b2:84:de:45:8d:2e:f7:68:d5:24:
e1:19:13:45:d9:23:fd:09:a7:f1:67:fa:5c:0c:3f:4c:4f:89:
80:24:5d:b4:07:ca:9a:f0:fb:84:d5:16:5c:c1:40:86:3b:f4:
44:37:fa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:26:45 2025 by rpki-client