Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: 2rZCtWTS5JuBjn92h47v4vLtBAXutB1J18KkruqETe4=
Subject key identifier: FC:23:9B:DB:F9:CF:9E:21:A3:59:34:6B:DD:E9:F1:63:1A:1F:AC:9E
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 0197BB5971AA782AE144644BCC8B46B4F979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0CC6
Signing time: Sun 29 Jun 2025 11:01:30 +0000
Manifest this update: Sun 29 Jun 2025 11:01:30 +0000
Manifest next update: Mon 30 Jun 2025 11:01:30 +0000
Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=)
2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=)
3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: cLV+mXpTXhm9HI/qKvfkFREy6/hZ6HXqWpfVIPxptSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:71:aa:78:2a:e1:44:64:4b:cc:8b:46:b4:f9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Jun 29 11:01:30 2025 GMT
Not After : Jun 30 11:01:30 2025 GMT
Subject: CN=fc239bdbf9cf9e21a359346bdde9f1631a1fac9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:14:ef:8c:c7:ac:e3:41:24:8e:75:d7:76:
eb:ce:13:2a:22:38:ac:56:9c:7c:90:db:1a:45:78:
9d:1a:89:86:d5:ee:7c:fe:35:0a:6f:47:4a:9e:ec:
0d:ae:c4:0b:cd:3e:47:0d:7c:8c:6a:a5:fa:36:63:
7b:22:75:21:48:a1:34:9b:83:e1:f4:04:b3:9b:c0:
55:62:e7:08:61:1b:d5:48:2f:ac:7b:a0:68:b5:b8:
a0:7b:ab:5f:27:44:c7:8a:94:c0:b0:a0:9a:db:16:
4d:a0:f2:ed:45:2e:ce:c4:8b:5e:41:aa:ca:69:e3:
e9:02:91:1b:69:54:ef:ea:55:c1:98:3f:9f:3e:44:
5d:07:44:7b:12:5d:e8:64:f9:ab:82:78:cd:7f:c7:
57:1c:49:ec:35:a4:e5:84:a6:f4:94:3f:e5:bc:92:
f8:ea:fc:cf:d4:7a:36:54:4d:50:fc:dd:67:70:25:
d1:d8:7e:43:de:d8:2e:c1:2a:32:fa:e0:a2:31:c2:
73:60:ae:8d:59:aa:96:6c:ac:7a:b7:60:fe:1b:22:
78:b0:32:5c:d7:23:da:fb:14:ca:c8:83:31:12:c9:
86:65:c7:d5:33:53:6c:3e:b4:5d:4d:de:49:cc:e5:
23:52:59:ef:da:f7:b1:d5:70:2e:26:ea:ad:6c:c7:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:9B:DB:F9:CF:9E:21:A3:59:34:6B:DD:E9:F1:63:1A:1F:AC:9E
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bf:c9:d8:87:2e:b1:dd:40:09:19:13:8d:ae:2f:6c:69:4b:
55:65:4d:3f:bf:7f:89:dd:b5:a0:35:71:88:cf:df:98:b9:b7:
7d:f6:ae:eb:94:e4:ad:c8:b3:e2:b4:57:c9:b2:96:d1:5d:39:
80:2f:d2:29:dc:be:1d:c2:04:85:4e:00:0b:91:3c:ca:b7:8e:
5f:c9:c5:7d:c4:21:a8:6e:e9:0c:2d:34:29:da:79:2d:96:5f:
f4:b8:b1:84:fd:7c:9e:ad:2a:25:80:fd:a5:8d:9c:5a:7e:b1:
44:04:11:38:52:13:be:22:d3:4a:65:9b:48:35:58:3c:d9:a9:
41:12:3b:65:f5:4e:fa:4e:de:e0:e8:97:5b:9c:c0:d3:71:f6:
aa:c1:33:6a:f4:b3:3e:15:9d:69:32:c4:70:5d:69:16:94:cb:
2a:f7:a7:c8:3c:91:2d:e9:16:3f:cf:8a:51:21:af:f2:1e:1b:
c0:9b:a7:2f:4a:b6:38:d3:5a:50:e8:94:a3:fb:b3:0a:11:87:
eb:20:1a:8d:f0:b4:28:72:ad:01:0f:36:30:98:e2:ea:e1:7c:
cc:a7:6c:e8:ce:de:50:35:b2:83:33:35:5f:50:8d:3d:8d:20:
6d:02:eb:18:c6:be:e1:ba:7c:5f:97:40:5c:96:eb:00:e6:cc:
ae:ba:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:01:32 2025 by rpki-client