Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: 14CiKOk4smvGFsavoNZb4nCONvgSER+Qzswr3QgT7Pk=
Subject key identifier: 5D:F3:89:10:1D:67:DC:9C:4C:0A:9C:67:4F:4D:BC:89:88:27:1C:82
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 01975121F1F27CBF87EE087C4B462253A162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 20:01:08 +0000
Manifest this update: Sun 08 Jun 2025 20:01:08 +0000
Manifest next update: Mon 09 Jun 2025 20:01:08 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: loJ1dQEm/Kkv1f7qnBzygOoTpimBAXS7rDwnIGeUuFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:f1:f2:7c:bf:87:ee:08:7c:4b:46:22:53:a1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Jun 8 20:01:08 2025 GMT
Not After : Jun 9 20:01:08 2025 GMT
Subject: CN=5df389101d67dc9c4c0a9c674f4dbc8988271c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:38:46:26:fc:5e:82:f4:42:c1:2b:b3:40:
61:e6:5b:64:cf:e0:61:b0:e4:04:05:cb:4f:14:66:
49:d2:be:0c:8f:51:61:f3:46:a0:62:a3:f6:e2:0f:
02:e2:59:1b:63:c6:b2:7b:61:cb:36:46:d1:ee:d4:
5a:44:50:d6:9c:2b:9c:9a:76:81:20:9a:d2:95:c4:
20:4c:3d:1d:9a:3d:7d:c2:4d:e3:4d:d1:e5:7a:36:
8e:02:99:e3:9d:7c:4c:43:89:70:e2:15:cd:92:b3:
5c:34:e7:52:92:63:7b:32:37:7a:58:9c:b7:83:6d:
73:81:27:99:ab:5f:91:f0:bf:c0:6d:44:5f:fd:69:
ab:16:b9:bb:87:34:2e:91:fe:6c:e9:3b:5b:05:1e:
b5:28:80:63:ba:f0:96:86:f1:d3:29:cf:7a:65:9f:
ef:5a:eb:be:1b:d4:6c:34:b4:01:fa:63:a7:46:8d:
ce:1a:53:6c:2c:bc:c4:46:04:4b:d5:61:ae:bc:f0:
4f:be:98:1b:bd:7a:11:37:a2:37:a9:6b:5f:f3:3b:
69:1b:af:16:ae:61:de:3d:c7:4e:99:c5:e9:74:f9:
25:86:19:47:86:04:31:07:b2:53:68:90:c7:d0:5a:
8d:3d:80:00:0d:a3:60:a4:83:97:9e:87:66:d0:c4:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F3:89:10:1D:67:DC:9C:4C:0A:9C:67:4F:4D:BC:89:88:27:1C:82
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5b:ec:48:73:1c:c5:48:c5:d0:54:9c:b2:f9:88:76:cb:47:
ee:19:17:46:e6:9c:b2:52:4f:de:6c:3a:a5:af:55:46:a7:71:
94:6a:ec:f8:bc:45:bb:5d:fa:df:e1:89:b0:42:27:b5:d5:67:
00:3f:6c:58:1e:d5:6d:7c:c3:fa:1e:c4:7b:fc:ee:49:0f:04:
55:bf:b5:b5:eb:c2:6b:34:e7:27:ef:e8:98:7e:7c:57:db:b0:
e0:99:01:a3:be:95:31:fa:62:e9:d9:52:22:ce:e4:76:f5:22:
e3:c7:6a:8a:8b:fa:ce:59:14:0b:91:20:08:98:6b:8c:3c:45:
e2:46:f6:f7:00:59:e5:84:9c:30:54:b1:7e:c0:8c:1c:2f:c9:
d3:5f:12:14:ba:ba:7d:46:9c:73:a3:69:a0:c4:26:b4:5c:bf:
31:4f:04:07:4c:1c:1d:15:35:9d:1c:7e:4a:06:4a:06:60:c1:
81:af:8d:80:85:1c:86:e8:bc:39:56:6d:17:31:d7:b7:ee:e1:
d6:65:c6:18:54:c9:88:3e:17:4c:df:9c:5a:2f:27:42:30:be:
ba:f8:69:2b:d7:08:c3:51:4b:d4:1b:4c:9d:c4:35:73:21:f8:
55:29:33:06:95:48:70:9f:5a:3e:60:90:e1:47:34:9a:bf:29:
bf:b7:97:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIfHyfL+H7gh8S0YiU6FiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzgxMThkYjA1ZTRjOTNlNzZmYTFmMWM5NTY3OWM3MDVi
ZWIyMDgwHhcNMjUwNjA4MjAwMTA4WhcNMjUwNjA5MjAwMTA4WjAzMTEwLwYDVQQD
Eyg1ZGYzODkxMDFkNjdkYzljNGMwYTljNjc0ZjRkYmM4OTg4MjcxYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWw4Rib8XoL0QsErs0Bh5ltkz+Bh
sOQEBctPFGZJ0r4Mj1Fh80agYqP24g8C4lkbY8aye2HLNkbR7tRaRFDWnCucmnaB
IJrSlcQgTD0dmj19wk3jTdHlejaOApnjnXxMQ4lw4hXNkrNcNOdSkmN7Mjd6WJy3
g21zgSeZq1+R8L/AbURf/WmrFrm7hzQukf5s6TtbBR61KIBjuvCWhvHTKc96ZZ/v
Wuu+G9RsNLQB+mOnRo3OGlNsLLzERgRL1WGuvPBPvpgbvXoRN6I3qWtf8ztpG68W
rmHePcdOmcXpdPklhhlHhgQxB7JTaJDH0FqNPYAADaNgpIOXnodm0MSplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3ziRAdZ9ycTAqcZ09NvImIJxyCMB8GA1UdIwQY
MBaAFKN4EY2wXkyT52+h8clWeccFvrIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2Yt
ODY2NjA3YWYyZmE1LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2YtODY2NjA3YWYyZmE1
LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVvsSHMc
xUjF0FScsvmIdstH7hkXRuacslJP3mw6pa9VRqdxlGrs+LxFu1363+GJsEIntdVn
AD9sWB7VbXzD+h7Ee/zuSQ8EVb+1tevCazTnJ+/omH58V9uw4JkBo76VMfpi6dlS
Is7kdvUi48dqiov6zlkUC5EgCJhrjDxF4kb29wBZ5YScMFSxfsCMHC/J018SFLq6
fUacc6NpoMQmtFy/MU8EB0wcHRU1nRx+SgZKBmDBga+NgIUchui8OVZtFzHXt+7h
1mXGGFTJiD4XTN+cWi8nQjC+uvhpK9cIw1FL1BtMncQ1cyH4VSkzBpVIcJ9aPmCQ
4Uc0mr8pv7eX1g==
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:28:12 2025 by rpki-client