Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: 34S4l3g3vPse31AHKJTkRXQTVYEnj16AnCO9irnonK0=
Subject key identifier: 23:BA:34:F2:A4:CB:2C:7A:7C:5A:A0:D3:3C:DF:24:47:54:D9:B2:6E
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 0197B70F1A84F5422381A5A43B575840318D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 105C
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: AItoBBXTr3JSVEunHoKYVScHBBA.roa (hash: bQ8pPRnSjhK+OHhk4/Jjzl0/46sUTmdeipylWtU4pOg=)
2: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: wz5fEnnrOCK/z3OzeDP3Y/2JvtsSBiLAGeQsCCo1pJk=)
3: ublcR1AG8bTtIDegIl4XF5yKZ2U.roa (hash: EReps1m4UdW66UXSYxPeRRxVic46xc68n57xt40fmWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1a:84:f5:42:23:81:a5:a4:3b:57:58:40:31:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=23ba34f2a4cb2c7a7c5aa0d33cdf244754d9b26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:d5:9f:d1:cd:15:45:46:19:4e:d3:b7:81:
b2:18:57:24:cd:07:93:e9:4f:8d:54:7b:3b:01:bd:
84:6e:ff:b7:b9:40:55:6f:bc:7e:3a:f3:29:9e:be:
48:b8:c5:31:b1:21:0c:77:41:04:37:7d:c0:5d:70:
27:4b:14:68:52:cd:02:6e:34:f7:57:06:f9:49:7c:
26:79:69:8e:92:cf:f0:47:c3:9f:08:60:ae:c2:0e:
d3:cf:e8:dc:73:9c:32:4d:40:7e:b8:78:2e:de:3f:
d8:b2:fd:66:d6:53:2f:14:4b:89:96:63:0b:53:58:
9d:88:68:25:09:d0:35:97:d6:60:9b:1f:72:75:3d:
46:fa:db:03:e9:98:35:b1:62:e8:08:e5:ff:6e:96:
e7:39:53:a7:7e:b5:fa:43:05:b1:a2:b2:ca:1a:e1:
1b:a0:07:4a:11:6f:53:cb:3d:ce:b7:c1:21:6d:8e:
d8:24:4e:62:13:03:e1:64:1f:72:88:49:30:bf:bd:
0f:60:54:30:e8:22:29:1c:35:02:e0:08:90:91:c1:
08:76:a0:9e:0a:79:f6:77:0e:18:fd:a6:1a:ba:da:
1f:40:f9:1c:4e:9c:b1:c1:d9:55:5a:f6:55:6f:79:
cb:87:46:77:3c:7d:f4:b3:dd:e5:df:79:88:0e:6a:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:34:F2:A4:CB:2C:7A:7C:5A:A0:D3:3C:DF:24:47:54:D9:B2:6E
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e0:5a:52:53:a6:1c:97:c7:f5:a2:ac:ec:8e:af:1f:b0:a8:
ee:b6:be:dc:cd:3e:3b:fe:da:a7:62:39:1f:63:db:bd:4c:f1:
2f:87:74:84:ce:58:8f:5c:39:b4:2d:8f:47:d0:35:1b:59:1b:
a0:62:34:35:8e:cd:ac:fd:f3:32:71:3a:24:23:20:d8:23:6c:
67:ba:74:10:dd:7a:d4:3f:24:15:a1:15:0e:fc:8e:46:b5:7d:
10:57:d9:a7:4e:7e:58:d6:a7:3b:e2:52:90:2b:77:2a:12:fe:
9a:f8:2a:4b:ba:2e:66:6f:b1:17:cd:ec:43:e7:5f:2c:3d:b3:
4e:3d:89:a7:d0:98:db:03:b4:f7:73:50:b1:04:fd:5f:79:11:
e9:e4:69:5d:e4:82:72:1b:af:a2:2f:e6:82:ee:a2:22:32:6e:
82:94:2e:2b:e5:31:c3:41:fe:3d:8b:68:f7:5f:36:b5:86:02:
f3:4d:89:65:5f:d7:db:da:2f:7c:0f:a8:a3:91:48:a8:ce:38:
66:4f:b0:0a:1c:00:56:21:8d:c3:c7:73:44:00:a0:d1:e3:4a:
64:b0:55:08:08:d8:d5:5f:19:7c:a1:fc:f7:8e:83:63:bc:91:
05:a8:2b:41:2a:fb:f5:19:95:f8:1f:4b:c1:af:65:b2:34:a0:
5c:1e:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:22 2025 by rpki-client