Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: +FvtqQU4Ga2z0I5McQAnHdxRRI/lhFxYAaQvn+F7plw=
Subject key identifier: 5F:7C:B3:3B:B1:21:8F:15:9C:25:EB:34:C5:F6:B4:F5:D3:08:9E:62
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 0197B820FF96F840FEBDF7C7BACFBB9B6E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 0678
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: rsq4y/rx1l9sMYmseMLjIFmUAGPExSXMrV4UksvR5Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ff:96:f8:40:fe:bd:f7:c7:ba:cf:bb:9b:6e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=5f7cb33bb1218f159c25eb34c5f6b4f5d3089e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:c8:69:6e:ef:58:13:f7:c4:3b:66:ff:fd:
a7:47:f7:72:ea:16:d4:38:a1:9a:73:39:d6:8f:ea:
ec:f7:a8:dd:e5:b2:d4:3d:57:e7:e8:15:e5:f2:3d:
5b:30:ef:aa:51:23:61:75:60:46:7a:8c:33:c6:cf:
e7:fa:d8:8e:c5:96:ae:da:fa:36:d9:4d:26:4d:db:
cb:c5:49:58:58:41:db:3d:b0:87:21:69:ab:d6:5f:
1b:e4:7e:db:da:48:d7:c2:78:49:27:e7:8a:df:5b:
bb:00:be:06:40:fd:e0:a9:46:9d:76:5b:31:19:c0:
81:97:83:63:ef:4c:5b:bb:be:ea:04:9f:ec:97:95:
c9:b7:4e:c7:c1:31:eb:ac:02:f1:cf:14:b7:b0:5b:
91:71:74:ca:fa:1e:3f:00:ac:7d:41:6c:bd:40:ff:
05:24:72:ae:91:aa:e6:3a:7d:63:67:45:dc:8f:5d:
20:0e:c7:59:d6:62:a9:55:61:b4:d9:5d:65:ae:86:
08:aa:4b:45:2f:18:1b:b9:1a:87:77:b4:55:e6:a2:
3a:a0:96:56:d8:c7:6b:aa:ff:76:77:65:b0:8a:7b:
46:7e:64:84:08:b4:0e:9c:15:c1:22:37:38:00:fc:
57:e0:6d:c3:15:9a:6f:09:f7:25:e3:80:44:77:b3:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7C:B3:3B:B1:21:8F:15:9C:25:EB:34:C5:F6:B4:F5:D3:08:9E:62
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c8:a7:f8:dc:1a:94:02:e1:dc:8e:99:b1:72:a0:ec:e1:f7:
25:4a:c2:a0:3c:e8:2c:50:6b:ef:31:88:e1:20:51:36:1f:2c:
a8:5c:99:c9:50:65:c4:ef:09:b6:b0:b1:85:c7:2c:22:23:14:
d6:1e:30:d1:7e:bc:64:60:e6:08:e8:bb:71:f6:aa:61:7c:8c:
8a:3c:be:cc:65:6d:48:8c:a7:4b:bf:81:b9:48:3c:2d:ed:db:
38:d5:a4:5b:df:9d:a8:2e:0d:b0:91:f1:93:8f:35:2e:dc:32:
bb:5a:f7:23:ff:ed:4f:7b:31:24:1d:e2:55:ba:87:b4:2e:b5:
a4:f2:ab:ae:45:e4:8f:7d:e3:82:fc:96:bc:73:a1:81:16:d3:
fc:83:51:4b:2f:d8:23:e4:0a:77:5e:59:c2:60:79:50:bd:b6:
eb:53:7e:57:8a:08:aa:d3:89:35:28:9f:bf:e5:34:9b:13:17:
d1:bc:50:b1:13:0d:6e:6f:36:1e:5d:58:a9:71:d2:38:a7:2c:
b5:35:5f:e6:46:1a:b2:7d:0c:8c:cb:06:9e:78:60:92:f3:e8:
2b:c5:7e:4b:5c:31:1f:fc:5a:a1:b4:7c:8b:36:b0:00:d2:a2:
62:4a:6f:74:a4:42:2b:c3:4e:ba:49:23:a1:09:78:95:3a:f4:
eb:66:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:53 2025 by rpki-client