Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: YRwK0/Iljs+YCjI/lGHaBWptMn6zreYngWAUCLZhT3c=
Subject key identifier: FE:69:E7:9A:A3:CF:8D:DD:E7:F7:C7:5E:7F:44:FC:80:B0:AC:78:9B
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 0197C9825707F6DF680777D06D089DDB881C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 1517
Signing time: Wed 02 Jul 2025 05:00:51 +0000
Manifest this update: Wed 02 Jul 2025 05:00:51 +0000
Manifest next update: Thu 03 Jul 2025 05:00:51 +0000
Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: K/16vI0zZFE1App+TIsKlonBdtzWpCsmFXj5NoxWCcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:57:07:f6:df:68:07:77:d0:6d:08:9d:db:88:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Jul 2 05:00:51 2025 GMT
Not After : Jul 3 05:00:51 2025 GMT
Subject: CN=fe69e79aa3cf8ddde7f7c75e7f44fc80b0ac789b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:95:21:ea:7a:9b:e0:6c:27:95:26:86:b2:
56:72:2e:07:42:e2:4b:dd:d4:b7:63:7d:fd:02:6e:
08:37:0d:13:e3:7f:74:a0:01:cb:7b:74:7f:f0:c5:
aa:c0:c2:83:1f:f8:b0:48:6c:f9:43:0a:1b:65:d7:
1d:66:4b:2f:63:8e:55:ef:29:62:92:e3:14:c0:d7:
f7:74:60:9b:8f:99:84:c7:c7:12:05:f9:d1:57:a2:
17:e2:1e:a9:2b:44:09:49:8c:5c:69:13:2b:78:a0:
ec:8f:32:e8:4e:3a:b8:4d:41:96:13:80:6a:26:3f:
26:03:4d:a9:d7:01:f5:50:58:00:69:cc:86:ca:9c:
9c:ae:66:a5:e8:f7:14:8b:1b:0b:fa:f1:14:80:6f:
81:fe:0f:9a:79:5c:0d:24:80:72:ca:6b:79:85:28:
2a:06:d7:33:c0:ea:38:08:e2:74:2e:9a:e6:6e:6a:
7f:d1:d0:dc:33:d6:96:dc:be:8c:a6:0a:1c:2d:eb:
ec:aa:fe:6e:41:a9:fe:d5:c3:74:6c:88:4f:d0:5a:
c7:50:74:f3:19:24:24:c4:c7:e5:9c:f6:42:f0:4e:
74:82:d7:f5:d0:c7:50:9c:1e:fd:4f:a5:f7:fd:24:
17:62:77:03:94:fc:3b:c1:be:5f:f5:6b:7f:a3:89:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:69:E7:9A:A3:CF:8D:DD:E7:F7:C7:5E:7F:44:FC:80:B0:AC:78:9B
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e7:0f:13:27:2e:81:1b:00:61:20:c9:99:a5:7a:29:b7:92:
27:44:6d:7b:69:60:47:89:45:1a:1b:f0:04:f8:6f:38:e9:ff:
f4:6f:56:7c:b5:3c:5e:f9:a5:28:5e:04:b6:94:c5:c0:ff:82:
df:e0:d5:59:ae:21:90:e4:24:b2:43:3f:c5:e2:2d:30:a7:73:
18:5a:70:2b:38:9a:f4:44:42:86:04:fb:19:4d:8d:55:0d:68:
97:87:a5:a1:9d:4d:6c:ca:61:0e:12:c3:08:05:ba:8f:e8:e6:
7b:58:c8:c8:27:b6:fe:d8:79:65:45:71:00:be:89:91:a2:9e:
09:96:88:d6:8a:a0:c1:3c:f3:00:e4:2b:90:83:dd:93:e7:21:
11:86:cb:42:c4:97:fa:a2:c0:50:07:c6:6b:6d:1f:3a:a1:d4:
f2:31:7d:61:f6:c6:74:2f:74:fd:06:94:6f:2a:c3:be:6d:71:
d3:9a:9d:34:72:e7:d3:e2:df:58:cb:df:c6:f4:a9:68:b8:8a:
e4:7b:1d:b9:02:43:8e:6d:c4:2c:92:72:99:19:9e:76:08:50:
8b:97:07:64:ca:cc:56:e7:43:de:74:96:25:bb:8b:8f:10:8f:
ba:66:d5:0e:ec:34:0b:08:47:6e:64:d5:b4:b1:f3:a2:e0:0d:
7c:01:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:50:25 2025 by rpki-client