Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier: 2YPVjTrnuHhlXGZ5UNOxgj7LQFmhVVieVsjon6vAKGQ=
Subject key identifier: 37:CC:45:7D:6C:45:E9:10:F9:19:22:31:09:EE:B6:2D:F1:6C:20:32
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 0197C537BADA352C39A952D30634ADA1EA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number: 101D
Signing time: Tue 01 Jul 2025 09:00:53 +0000
Manifest this update: Tue 01 Jul 2025 09:00:53 +0000
Manifest next update: Wed 02 Jul 2025 09:00:53 +0000
Files and hashes: 1: DfIfeCsjxuTLGxOswS1IRTtCtFo.roa (hash: BfLaITLvBopGuXyhXf+VexAjyd8LBGCkT8+9wJK+KLI=)
2: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: wA4/OJ282JTMdxHehy1XjbVzZMV6OJAY0mSlLAlwa+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:ba:da:35:2c:39:a9:52:d3:06:34:ad:a1:ea:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Jul 1 09:00:53 2025 GMT
Not After : Jul 2 09:00:53 2025 GMT
Subject: CN=37cc457d6c45e910f919223109eeb62df16c2032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:94:67:a5:c6:92:b0:e0:d5:12:d3:7e:b6:
64:df:01:e3:29:6f:b0:10:e8:7a:a7:d6:fd:7f:c8:
a9:20:b3:ae:6d:78:8d:9f:f3:7a:8f:fa:f1:79:3d:
19:b3:66:67:d8:80:90:7d:e2:e5:bc:b8:ad:01:00:
8e:8f:bd:b6:55:37:d1:05:9a:1a:53:c6:51:2e:d8:
1b:48:f2:31:2e:5a:42:62:65:92:f6:24:4c:5c:e3:
7f:ce:87:7a:bc:41:dd:bd:b3:b0:75:65:c5:8e:ac:
c0:e3:77:a9:da:d6:c5:3b:ce:27:1e:1c:08:6c:86:
28:5e:14:61:0f:25:1e:dd:fd:85:20:30:32:f4:a1:
5f:6c:f4:fa:15:4c:dd:cc:c7:75:82:6b:1a:a7:4f:
48:05:1a:9c:69:3a:14:42:47:48:f7:4f:64:c1:61:
82:41:1a:36:ab:76:c7:f6:20:90:ac:ad:13:be:6e:
13:18:e4:1b:5b:54:6e:58:0f:a6:d3:8c:5c:71:3b:
5e:fd:d3:09:30:2d:a7:d5:2d:58:6b:9f:e9:77:ea:
ce:aa:e9:8a:fb:5a:3c:44:3b:e4:5f:26:ab:57:f3:
e9:73:05:04:71:12:1d:3b:fe:ae:fd:f5:6d:7c:42:
2d:39:39:71:5a:84:03:27:52:7c:b4:bf:13:84:0b:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CC:45:7D:6C:45:E9:10:F9:19:22:31:09:EE:B6:2D:F1:6C:20:32
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:da:02:c6:9a:44:3d:32:d0:0e:98:e4:43:bb:c7:96:4f:c6:
b6:33:5e:6d:38:09:a1:49:ed:53:10:7f:68:00:6e:72:4d:3f:
77:ee:52:1e:5e:8e:a6:e9:be:d1:2e:9a:d6:a4:0e:e8:9e:a1:
1c:64:06:a6:cc:30:3b:6c:a4:5c:11:1e:24:3b:b7:4b:99:1a:
48:bd:a6:6a:d8:04:32:92:a6:db:87:bc:f0:67:f1:87:a0:85:
7f:f7:d5:b8:da:93:f7:97:ca:bb:f8:e9:7a:5b:1b:01:bc:4e:
89:fc:20:ea:c8:0d:65:c5:c8:ae:e6:86:db:8e:58:f9:ca:29:
f6:66:1b:00:73:a6:a6:53:b1:04:45:51:fc:c3:d6:fb:a1:e7:
81:70:0a:80:dc:66:4a:d8:a5:be:25:f2:bc:e9:33:86:02:46:
e6:76:67:42:e1:cb:bf:da:bd:37:6e:c8:36:d8:7f:27:59:fa:
fc:8f:f7:4c:dc:da:55:25:2d:59:44:11:c1:f3:d0:85:95:06:
55:2d:e2:d9:cc:17:0f:77:e4:fa:f6:15:94:67:e1:32:05:70:
3c:87:15:44:71:b2:84:b2:f9:f7:e5:fc:ff:84:2d:22:f9:50:
ec:a6:da:4b:84:60:4b:d3:c1:35:a1:60:a8:30:8b:f1:11:23:
02:f7:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:50:44 2025 by rpki-client