Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: lX0TrHpbZnd8VZm3mXc0qutwdJIlR76zzWIe3oFI76c=
Subject key identifier: ED:79:D3:EA:40:57:4D:2D:0A:7F:B2:26:6D:B1:69:B1:8D:97:96:65
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 0197C6EFD20AA62722D6369E14B8343B5EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 0790
Signing time: Tue 01 Jul 2025 17:01:35 +0000
Manifest this update: Tue 01 Jul 2025 17:01:35 +0000
Manifest next update: Wed 02 Jul 2025 17:01:35 +0000
Files and hashes: 1: D_Ap7aX55j2mvnDRbvve0G_OwsM.roa (hash: rFKERfrglcdmlPd1vXc+xLBg8nNvQQZtBdRb9+OODlU=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: Lg7dF5fg4V0tsequQ9mlTh+fkIvzZV/sju4aKyD7DCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:d2:0a:a6:27:22:d6:36:9e:14:b8:34:3b:5e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Jul 1 17:01:35 2025 GMT
Not After : Jul 2 17:01:35 2025 GMT
Subject: CN=ed79d3ea40574d2d0a7fb2266db169b18d979665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:0b:06:f5:80:79:4c:95:10:43:de:6f:bf:
e2:93:dc:73:f2:c0:cb:ed:06:f1:b5:2d:f7:1f:b7:
25:d2:64:5f:d5:0b:94:40:7d:e3:19:bb:45:39:c2:
10:cf:96:0e:3e:59:de:ee:30:9d:a0:83:61:1c:ea:
8a:d0:54:25:47:10:5f:72:3f:6d:11:fc:6b:29:bd:
a9:23:a3:28:eb:cb:06:b4:0d:8c:b3:93:0f:a8:76:
f7:9d:db:ef:19:70:fa:57:05:0f:b4:ec:ea:ea:12:
89:6e:23:4a:44:b6:5e:ae:83:4a:2f:a4:76:e2:69:
a4:4d:71:8d:8c:ee:bc:bc:a7:14:d4:68:c1:bd:f7:
d9:b1:aa:c0:40:0a:27:4d:3a:63:c7:8b:7d:3f:a5:
a9:c8:9c:6c:a4:37:a5:dd:72:da:19:31:55:11:a8:
e2:7f:58:e1:f2:41:ac:68:b9:6e:94:ee:a3:ae:92:
d1:d0:56:65:ab:16:7d:c1:6f:00:35:1b:94:85:74:
f4:ed:23:61:9f:19:70:d7:50:80:dd:ce:6c:51:fe:
84:d9:a6:4b:5c:53:b2:30:fe:7f:84:dd:c7:2d:ac:
e0:5f:7f:32:a3:d3:b1:1f:57:81:f8:27:7b:e4:8b:
a4:16:eb:43:23:62:af:87:7f:7a:0b:ad:7c:f4:bb:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:D3:EA:40:57:4D:2D:0A:7F:B2:26:6D:B1:69:B1:8D:97:96:65
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:78:fb:18:55:b4:14:bf:4e:21:4e:46:6e:12:f1:b2:15:4f:
1b:6e:57:c2:8d:9f:c7:2c:07:d9:14:da:21:c8:d8:08:c3:5c:
f7:a2:bf:44:f3:48:85:14:62:63:14:04:74:7a:18:2c:d1:18:
f2:c8:4e:dd:26:c5:c3:4e:b4:be:19:6a:51:4d:f6:ad:9d:89:
bb:fe:71:b0:85:41:c4:6e:ec:7c:e3:27:0f:82:4d:ad:11:7f:
28:ae:fc:55:e3:69:fa:39:08:06:66:38:d7:8b:87:15:5e:67:
00:97:2d:70:70:3f:07:49:4a:9b:b5:44:69:f5:a8:08:f6:a6:
51:4e:df:ad:8a:ec:94:8f:97:b4:6b:13:10:81:12:1a:bb:9d:
c2:42:38:26:24:da:be:a8:3a:8d:35:22:5c:2c:d8:93:bb:4f:
6b:85:54:62:7d:6b:0a:85:ce:93:3d:b9:25:7e:1f:47:fa:ee:
cc:e1:db:49:2d:9b:15:db:7f:7f:9d:21:d7:9f:63:64:50:15:
3a:97:44:82:30:29:51:f9:4e:8c:e4:f9:98:07:4d:b0:f3:d3:
15:05:7b:01:4a:e9:40:32:39:e8:19:5f:3a:90:a9:33:7f:1a:
91:ae:45:bf:b6:8f:79:9c:73:7c:2b:98:76:44:6d:54:97:82:
d7:46:b9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:31:09 2025 by rpki-client