Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: f0BpMBIW+qB1C8Vtw7+5qDqzhWACH6REmWrbo4+TS/o=
Subject key identifier: E9:AC:76:30:7E:26:50:51:CD:95:AA:EA:45:69:3E:30:4A:4B:B8:50
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 01984A40C9FABF78BFC0624F2F372A2DF854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 15A3
Signing time: Sun 27 Jul 2025 05:00:16 +0000
Manifest this update: Sun 27 Jul 2025 05:00:16 +0000
Manifest next update: Mon 28 Jul 2025 05:00:16 +0000
Files and hashes: 1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
2: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=)
3: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
4: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: 9Ie/H9BlA+OSQFkqGKEOP40spew0N1OsSFPuprwBYZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c9:fa:bf:78:bf:c0:62:4f:2f:37:2a:2d:f8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jul 27 05:00:16 2025 GMT
Not After : Jul 28 05:00:16 2025 GMT
Subject: CN=e9ac76307e265051cd95aaea45693e304a4bb850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:02:b8:a3:f4:10:bb:44:cd:81:47:ce:21:
9e:79:b4:be:4b:c9:b2:e5:c4:21:de:ef:ac:4e:5d:
d2:c6:99:13:55:fa:fb:aa:28:bb:35:30:d3:ad:3a:
cb:c5:15:80:70:f1:f5:8c:1b:1d:23:e2:04:7e:33:
10:68:ed:14:b1:9b:7e:b0:e3:9c:d9:d8:60:f3:ec:
63:b0:77:0d:34:15:ba:83:d7:d0:16:21:89:a5:ec:
f8:e4:4b:29:37:86:80:bd:f2:8f:20:da:ef:ed:80:
f1:bd:31:b3:65:5e:9e:22:ec:77:fe:8e:8e:a8:fd:
19:d2:b2:ee:b2:a9:0d:1a:08:99:a3:01:90:db:4d:
99:fd:00:a7:ba:80:a6:24:e7:1a:81:0e:c3:c9:b1:
11:d5:a3:a4:37:ae:79:e2:c1:f9:df:39:35:0e:01:
95:d5:58:3d:33:91:62:92:8b:36:7c:b6:56:d1:ff:
87:68:79:9b:52:dd:59:d7:f0:46:7d:f8:20:be:ec:
bd:42:f4:17:d3:a6:c9:83:fa:c7:7f:24:e2:50:97:
ed:64:a7:07:3d:90:c3:0e:2b:15:a0:c4:60:8a:6e:
98:2b:a1:49:81:3f:89:a7:4f:25:18:a7:e8:33:5f:
d6:c9:12:64:bc:ac:54:98:1b:f6:b2:f5:44:f1:72:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:76:30:7E:26:50:51:CD:95:AA:EA:45:69:3E:30:4A:4B:B8:50
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:36:49:da:06:cf:cc:2a:8e:33:18:61:d2:33:e5:09:a3:91:
41:31:5b:ef:20:51:ce:d0:8f:73:4e:ec:5c:d7:a7:21:ef:60:
72:93:c7:0c:84:74:4a:12:cc:34:27:af:84:17:51:13:42:35:
9d:07:a5:0d:55:39:da:d9:a6:69:fd:f2:41:c8:92:7a:c7:fd:
28:f3:7f:5b:a5:ac:6b:e6:95:65:97:be:a7:7d:01:79:09:f2:
a8:16:40:5e:12:9d:16:48:38:db:92:e3:1c:b9:b2:d0:98:34:
c1:bf:ad:d0:51:ab:de:fc:3a:e7:8c:3b:76:2c:49:96:b3:96:
73:0f:0e:01:ac:2b:ba:9a:c7:6f:f5:dc:1c:99:bb:3a:7d:07:
00:4e:0c:79:34:fd:f9:75:ce:b0:cb:34:4e:44:82:3e:34:00:
c1:a1:f4:f7:1e:fb:33:fd:da:97:e5:4d:ca:b2:1d:6e:31:58:
c9:02:f1:f1:06:b0:75:6e:91:61:d9:1a:5b:2e:a5:f0:fe:21:
51:32:f4:f3:9f:34:ee:ca:37:89:14:23:7d:2a:79:07:a8:25:
90:07:6a:96:4b:2b:75:58:da:12:7c:6e:65:87:67:7d:b2:7b:
24:3a:6d:92:5d:2e:cb:04:1a:fb:a3:00:b4:7e:12:cf:80:b7:
bb:8a:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:23 2025 by rpki-client