Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
File: o7R_qStyxJ6grFNx3jU7HicdxdA.mft (raw, json)
Hash identifier: rgawMO+yWzgfmMv6zx5CT6S52rsordBxQEzLmBySnjM=
Subject key identifier: 3E:02:33:44:AE:EA:C9:A4:29:A6:6A:86:93:99:CD:BB:DE:75:91:97
Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
Certificate issuer: /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Certificate serial: 0197B7EAD6E7B40E643AF4F87F0FF6708D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
Manifest number: 0D45
Signing time: Sat 28 Jun 2025 19:01:50 +0000
Manifest this update: Sat 28 Jun 2025 19:01:50 +0000
Manifest next update: Sun 29 Jun 2025 19:01:50 +0000
Files and hashes: 1: WIaOxFihvMngyRoJ51mATU-OelM.roa (hash: yYmLv2domUt4Svy4VBfcVVdHWZ/TicTJ4cMQnZnE8zs=)
2: o7R_qStyxJ6grFNx3jU7HicdxdA.crl (hash: 6rVJMds0IrxjGNGkKgq97ElF5B0GA42kV5Q8Bt8WAnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d6:e7:b4:0e:64:3a:f4:f8:7f:0f:f6:70:8d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Validity
Not Before: Jun 28 19:01:50 2025 GMT
Not After : Jun 29 19:01:50 2025 GMT
Subject: CN=3e023344aeeac9a429a66a869399cdbbde759197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:78:c5:8f:6c:cb:9e:b5:86:98:b5:df:d8:
27:0b:b3:00:e6:f2:bd:34:8c:21:46:0a:cc:17:50:
7a:d3:2c:69:a4:1f:1e:0d:e5:fb:8f:48:09:53:bf:
34:7b:f4:39:93:33:7e:30:51:f7:0c:07:8d:d0:56:
1b:6b:84:84:a9:dc:06:3d:45:a4:7a:f0:1e:34:e1:
e2:8e:7f:fa:96:e0:b7:f6:d3:4b:dc:32:27:fb:4f:
3b:9c:d0:9d:e2:9a:1b:ba:93:d9:b8:31:9b:d9:90:
73:42:e3:db:79:35:bc:a4:77:50:b7:6e:60:d9:24:
94:6d:af:53:6b:b7:4a:6d:2f:93:9f:6a:97:cb:8a:
64:fb:f0:2e:03:ed:c8:a8:e5:87:5a:24:82:59:68:
88:52:a1:62:fc:59:08:b7:d2:67:b3:57:45:4e:b8:
49:10:f0:37:58:44:2c:24:5a:86:99:ae:57:09:f8:
56:04:0f:10:cd:67:e5:b7:a6:27:73:94:8d:0b:f9:
55:9d:81:39:e4:0c:2f:56:b3:06:11:54:5e:4d:43:
81:fc:f7:29:8f:c7:74:9f:cf:55:ca:75:aa:72:04:
d2:b3:01:4d:f4:41:db:f3:fd:62:bc:b4:01:ab:02:
a9:8a:79:9f:64:95:6d:43:40:ae:47:16:68:50:89:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:33:44:AE:EA:C9:A4:29:A6:6A:86:93:99:CD:BB:DE:75:91:97
X509v3 Authority Key Identifier:
keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ba:95:65:64:48:58:5e:ab:11:3b:c5:df:fc:df:12:a6:a6:
44:28:94:2a:6b:b9:17:01:76:72:85:93:5d:a5:1e:7d:96:52:
10:24:94:27:6e:f1:4c:62:e0:12:2d:ae:d5:b2:40:99:03:99:
9c:1d:d1:c3:cd:bb:7a:1f:55:49:0f:3e:b1:f5:fd:82:a1:13:
9f:46:8f:97:be:5f:8d:c5:df:d2:d2:a0:2a:76:7a:e2:b9:c9:
7c:35:6b:b1:5a:77:10:cb:a9:5f:d1:87:dd:a0:d5:0e:b9:b8:
14:40:04:a8:d0:51:3c:70:a9:68:a6:c0:24:02:5d:45:2a:77:
e4:c2:d1:d0:5d:ef:b6:6d:fd:80:f2:d1:51:6e:de:46:79:3f:
4b:a8:a4:95:1a:fa:39:b2:f6:27:d0:3d:09:f6:12:90:58:71:
b3:1d:6d:01:43:37:3f:25:b5:e4:dd:b5:6f:8e:2e:de:43:46:
59:7e:42:bd:7d:f5:9c:9b:f2:4c:21:3a:eb:3f:1a:17:b1:ac:
61:0e:04:cd:5a:99:4f:99:22:96:54:b1:b5:51:96:4c:75:d8:
a5:c3:ba:7c:f0:c0:84:0a:4a:cd:8c:87:78:dd:ef:e6:01:ed:
0d:4c:bb:9e:1c:c6:e1:d8:0d:18:f0:98:ad:53:5c:dd:fc:1c:
26:ec:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:15:21 2025 by rpki-client