Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: +m/bFU6rkc/0nycTx0LUXQ48Yzm2XxO9cxYt5Y6IT00=
Subject key identifier: 3E:AB:E2:C7:92:C9:4C:20:C1:33:12:E9:32:37:9D:DB:74:74:CC:31
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 0197B6A03D77A0B18485817CFF2514C0DF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: /XmKTB/vQ/483ExdE962+6btOXWjjW9x7qQdba+erQg=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3d:77:a0:b1:84:85:81:7c:ff:25:14:c0:df:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=3eabe2c792c94c20c13312e932379ddb7474cc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:c7:c4:53:72:ed:fb:5a:f4:c5:92:8c:e7:
c0:c9:b1:5a:83:7d:2b:b5:ae:e8:d2:79:ab:2e:00:
3c:56:c3:f2:e3:4e:2c:ff:3f:19:37:fa:54:02:3e:
8f:ab:30:90:1c:65:95:4b:4c:c4:25:4e:92:6f:c4:
09:77:c2:0b:37:80:28:f2:ef:e7:d5:fa:c1:71:1b:
52:e4:31:65:c0:e5:b6:3a:47:ca:fb:15:c6:f0:96:
a3:04:b4:ff:27:53:49:35:d6:4b:4e:c4:38:84:c6:
33:a5:ed:84:94:0d:79:74:38:6e:bb:08:52:86:89:
ea:5e:91:43:39:9e:02:97:0d:a5:cd:f8:02:10:c1:
0f:2b:0e:88:d3:5c:3c:85:ee:a0:1e:c5:84:55:64:
00:35:b0:e5:5c:3d:71:c4:98:b4:84:77:33:f1:24:
ab:4d:f4:9f:b7:e3:97:67:9c:cb:f0:f6:3e:28:d2:
62:d2:85:3f:80:1d:31:e6:6e:56:19:3c:f7:86:43:
43:6c:0b:6f:d1:e0:4b:80:6b:75:8f:5c:7c:cd:75:
c4:fe:9b:48:30:dd:99:f4:96:38:13:21:be:d3:23:
b1:45:e7:b2:1c:ca:f5:32:00:8e:86:75:bd:9b:ea:
16:72:d4:bc:d6:c2:74:e1:bf:09:8f:9d:9d:70:84:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AB:E2:C7:92:C9:4C:20:C1:33:12:E9:32:37:9D:DB:74:74:CC:31
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e9:e0:8e:ab:16:a4:93:af:82:3b:f1:24:f3:ef:15:bc:dd:
6d:ff:60:21:43:97:7a:dc:6f:06:67:0f:b5:d0:d3:b3:7d:1f:
cf:af:36:ad:31:a9:a3:13:23:2c:dc:05:69:fc:6a:c2:db:47:
37:be:23:ef:5e:c7:f0:01:dd:a1:b8:98:60:58:ec:50:a1:f3:
4d:9b:39:9d:7d:5c:28:29:75:bc:20:e1:e9:3d:70:17:fc:eb:
46:e4:98:34:56:ea:68:59:02:a3:ea:d3:b8:b5:bd:46:94:48:
bd:37:25:a6:ad:97:32:20:98:53:f3:a4:fe:e9:cb:5b:a1:86:
ea:0e:f2:aa:a4:4b:68:6a:a6:ae:1b:75:8f:53:cd:94:4e:28:
c1:a7:7a:36:7e:a0:ff:b8:56:a9:f7:cf:c5:10:0c:57:72:46:
48:15:b8:1c:2c:d5:82:fd:75:f3:19:a6:3d:9f:25:ab:a8:40:
64:c8:c4:37:b1:2f:7d:b2:ac:c7:e0:97:31:5b:31:67:b8:2f:
05:76:9e:8c:ad:ad:f4:1e:72:77:da:92:a2:c3:fd:e0:bf:e6:
28:54:8a:84:fe:7b:52:5e:0a:81:0e:46:31:58:ff:7a:1e:ab:
d8:bd:ed:a3:49:26:d2:9e:bc:6d:dc:c0:7f:91:20:fb:20:02:
eb:b1:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:45 2025 by rpki-client