Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: /0GBswHs0ufJ2cxF5ftsNUoJJA3pDgftgT4wbxMyvaA=
Subject key identifier: DB:77:48:BD:0F:89:02:FF:53:38:A6:E9:2A:0A:3F:E2:7D:85:C0:03
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 0197BB58F38D1D797B2AB1A5D7E46ACCF71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 0E79
Signing time: Sun 29 Jun 2025 11:00:58 +0000
Manifest this update: Sun 29 Jun 2025 11:00:58 +0000
Manifest next update: Mon 30 Jun 2025 11:00:58 +0000
Files and hashes: 1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=)
2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=)
3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=)
4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=)
5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: gmhZiL82h26FQzfFPXn5I4yDAT4o5l4dRSwg9TUcWZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:58:f3:8d:1d:79:7b:2a:b1:a5:d7:e4:6a:cc:f7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Jun 29 11:00:58 2025 GMT
Not After : Jun 30 11:00:58 2025 GMT
Subject: CN=db7748bd0f8902ff5338a6e92a0a3fe27d85c003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:6d:37:04:f6:65:58:cb:cb:9a:a4:70:3a:
9d:4d:60:e4:21:9a:7d:0a:30:81:00:8f:3a:b1:7c:
02:ee:3c:49:42:2d:90:95:9e:32:87:98:f4:02:5b:
69:f8:10:79:90:b0:ca:3f:6d:ab:db:24:89:5d:5c:
8b:cb:9c:db:98:0b:e7:df:8e:74:2c:61:c4:51:a0:
f5:ff:d7:6e:88:0f:5b:9d:00:2b:c9:29:b6:8e:d2:
24:c3:5d:39:f7:de:27:a5:fe:75:98:27:63:ba:9e:
27:2e:99:ea:8b:73:85:c3:f3:3e:13:81:a0:7a:f3:
d5:8a:b9:52:51:31:17:4e:29:05:0d:79:50:b5:d9:
53:72:6d:c4:cc:3c:c4:ad:30:3d:03:44:61:4e:7d:
6f:b1:22:9d:2a:47:35:68:86:c0:9b:f1:7e:09:06:
5e:74:2e:95:76:25:21:63:88:2a:81:99:5d:a8:03:
11:d5:0e:d8:81:d4:8f:6b:d9:fc:10:1e:8a:e1:3c:
88:f1:51:39:b9:80:8c:33:8b:cb:a8:d3:25:01:b5:
fe:8a:d5:6b:ad:0a:41:a5:91:37:71:b9:1f:5e:be:
2f:05:79:a5:5f:32:3b:56:28:69:8b:9b:a2:2e:d4:
3c:a1:68:26:58:18:70:54:81:97:43:9d:f5:b1:ba:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:77:48:BD:0F:89:02:FF:53:38:A6:E9:2A:0A:3F:E2:7D:85:C0:03
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:25:9b:00:91:76:02:cf:ea:2a:9d:6a:84:b6:f1:54:ca:30:
09:a7:e6:51:02:91:fb:ba:b2:bc:15:84:4e:36:f4:1c:fc:a0:
ff:e3:91:9e:b9:70:71:8f:75:c0:9d:50:a1:13:76:3f:77:38:
ad:1a:33:be:c8:77:55:88:ee:af:7d:2a:a5:6e:e1:a0:27:d7:
24:1e:c2:a9:11:9d:e9:71:6f:c2:39:83:74:20:11:25:7a:1d:
df:62:d4:0c:c2:40:fb:47:4a:6f:cc:fa:ea:7f:73:08:9a:a5:
22:ec:f5:30:85:14:75:6e:24:4d:27:79:0b:04:d8:3c:c1:b2:
40:9f:0a:f0:d4:7a:a8:07:e2:c3:58:97:01:67:59:29:47:f6:
b7:e8:e1:87:3a:05:70:e2:70:c5:6f:1a:a3:e9:66:50:e5:58:
95:02:85:34:9b:08:85:f1:5e:23:74:52:62:89:b9:4e:70:18:
dc:ae:72:ce:22:c6:fa:27:89:00:6d:d3:59:5f:fa:2f:ee:8e:
15:67:4a:07:60:44:93:78:f3:7a:a1:74:43:61:57:c3:fa:01:
00:55:24:e3:2a:8b:5a:b8:4c:a8:cf:bb:d3:6a:63:b3:62:8d:
fc:74:50:4f:23:2b:2a:66:fb:41:31:80:cc:ce:9d:26:e1:54:
29:5d:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:31:16 2025 by rpki-client