Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: 2DGBvpBEWxhjCekEx06afbX7YqCFzFRJvr3W1q/JkpQ=
Subject key identifier: 01:D1:59:84:04:8E:72:DA:05:6A:5F:C4:BD:6C:9C:D9:F4:07:BC:EE
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 0197B77CC65F04DAA6B188A0BD4430E0E97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 12AF
Signing time: Sat 28 Jun 2025 17:01:37 +0000
Manifest this update: Sat 28 Jun 2025 17:01:37 +0000
Manifest next update: Sun 29 Jun 2025 17:01:37 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: k/9Wi2L65H7Tl9eXH/OpS7HSStNZHcry92Vk87NzsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c6:5f:04:da:a6:b1:88:a0:bd:44:30:e0:e9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Jun 28 17:01:37 2025 GMT
Not After : Jun 29 17:01:37 2025 GMT
Subject: CN=01d15984048e72da056a5fc4bd6c9cd9f407bcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:b7:c3:5e:52:9c:f5:de:67:44:db:07:98:
c3:9a:80:e5:84:03:c9:cd:44:83:72:ca:b3:e1:06:
23:58:e3:b0:c8:93:38:73:6f:33:dd:c0:df:53:cc:
f7:64:8a:77:e3:37:e2:6b:1d:9b:44:d6:64:c1:91:
7f:3a:8b:e9:24:d8:f9:55:49:06:2c:ae:ca:76:99:
e3:30:2f:b9:79:27:a3:a9:25:51:bd:ac:3f:af:2c:
31:05:16:49:e0:3e:91:e8:7d:e5:cd:c5:54:6b:58:
2e:89:ad:6b:7e:0b:72:ed:32:96:45:f9:ad:00:a7:
86:67:19:71:47:93:2b:9d:da:d5:e3:18:67:5d:f2:
52:2c:34:70:60:8c:5d:1f:97:e0:db:8f:34:51:c8:
44:62:39:1b:59:99:ca:2e:13:a3:70:bf:ef:b4:07:
81:d0:4d:a4:2d:3a:c2:39:0f:3e:00:bb:b5:fe:24:
91:6b:6f:bf:a0:92:ca:73:a7:2e:98:21:6f:bd:f6:
c2:9f:d2:62:41:f9:05:ac:f4:e5:0e:7e:9f:c6:dd:
7c:10:c8:38:ae:2f:66:b4:56:5b:06:26:16:96:1f:
dc:aa:8e:9d:3c:5f:4e:db:68:85:14:58:ee:4e:4c:
d2:e6:48:bc:81:99:f8:50:2b:b3:3a:25:b9:70:b8:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:59:84:04:8E:72:DA:05:6A:5F:C4:BD:6C:9C:D9:F4:07:BC:EE
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:23:a8:d9:a7:67:26:c9:f9:f5:cf:e4:d7:48:3b:9e:37:1c:
f1:13:dd:c3:43:ea:5f:17:84:15:78:a8:66:9b:d8:f7:e2:73:
88:01:2e:4f:d8:0c:43:f2:52:b4:26:2e:e6:89:79:83:d9:f9:
4f:06:29:47:5d:04:89:0f:42:ea:98:b2:00:e9:3e:e1:b7:34:
98:6f:f4:16:dc:77:fc:e0:99:99:52:8c:d4:89:27:8a:9a:6f:
e0:f7:40:f1:1e:5c:98:2e:b3:e3:1c:ae:ee:3b:6b:60:47:a1:
eb:7c:19:60:74:1f:fa:e8:d0:d4:73:04:7a:74:19:79:9a:39:
12:a4:6f:9c:51:ac:df:2d:b1:ef:2b:2b:25:3f:22:29:50:a0:
74:a4:ae:14:e9:a5:55:06:e5:fd:87:eb:81:53:5f:4d:0c:23:
3c:a8:ac:b7:eb:a0:32:93:b4:72:94:79:26:f9:21:e3:e1:a7:
91:f6:1e:4e:e1:e8:3f:99:82:9d:11:d8:3e:18:65:e6:fe:52:
4a:bc:31:85:ad:f4:9c:26:89:a8:05:b0:e2:e7:8d:33:9b:43:
5e:4e:b0:5d:0d:58:7a:e4:b8:43:e4:1a:98:3d:9a:82:e3:7b:
05:24:52:ea:00:25:5c:ee:83:04:58:b6:8a:4a:82:3d:22:11:
4a:74:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:22 2025 by rpki-client