Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: 0an17W0p/rGR4dTJlgytRdxIHuxctINvTHcmf/zorCw=
Subject key identifier: 55:B9:23:BF:31:F4:42:39:A1:35:DF:32:4F:44:CF:F0:B3:34:AD:4A
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 01974D0E1703E0DD87537773B73126D3E5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 01:00:58 +0000
Manifest this update: Sun 08 Jun 2025 01:00:58 +0000
Manifest next update: Mon 09 Jun 2025 01:00:58 +0000
Files and hashes: 1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: SFGRWMRw3Mq7MjCBAu2g6NxDDCCIoVdC5GiJLy7qCfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:17:03:e0:dd:87:53:77:73:b7:31:26:d3:e5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Jun 8 01:00:58 2025 GMT
Not After : Jun 9 01:00:58 2025 GMT
Subject: CN=55b923bf31f44239a135df324f44cff0b334ad4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:fd:34:77:1e:75:c0:eb:52:a8:14:61:8f:
f7:b3:da:9b:dd:c4:df:74:fd:84:dd:97:07:f0:b6:
76:ef:4e:d3:0f:d2:62:8b:a2:e9:e3:45:c4:c8:b5:
75:1e:7f:d9:32:04:b8:dc:12:90:1f:f1:64:b2:3c:
99:b2:ce:2a:6e:28:57:c8:eb:fa:76:1e:5c:2e:19:
24:fc:af:09:dc:0c:dd:03:e1:ac:28:b4:8d:98:f8:
44:c4:f1:a5:dc:e5:ee:1f:bf:a1:36:15:c1:e2:37:
ca:70:d1:ce:0f:79:26:11:3b:af:45:d8:84:ec:f8:
05:1f:13:d0:76:dc:45:79:ef:3b:5b:5d:9f:cb:a0:
d4:45:9b:29:31:f9:8b:7c:5a:4e:3a:17:b8:cb:a0:
ed:a4:8c:a2:5d:67:56:b1:5f:e5:95:50:18:da:59:
79:81:53:ff:51:be:1e:4b:b2:17:fa:22:d5:08:8c:
b8:2c:1f:6d:0f:2f:4e:a5:70:d3:08:13:a5:75:4d:
7e:4e:70:a8:3a:a5:04:53:5a:a3:f5:eb:1a:e7:dd:
31:3f:f7:96:dc:d5:bc:7f:f0:39:96:cf:b4:bc:e9:
50:44:c2:51:aa:f7:25:75:b5:21:b3:9e:f2:5b:75:
77:c6:10:10:41:7a:1e:8d:4e:d7:95:fe:e4:f2:84:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:23:BF:31:F4:42:39:A1:35:DF:32:4F:44:CF:F0:B3:34:AD:4A
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:69:51:25:30:bc:78:36:df:5c:c2:ec:f1:8d:88:64:f1:8c:
f0:99:ab:19:4f:6e:68:07:60:66:77:84:17:88:83:2b:82:b5:
cd:51:c0:c1:d5:04:93:d2:3b:b5:06:1e:3b:fe:0d:34:ae:67:
3a:d5:12:e6:c2:11:85:20:e1:2d:e5:f8:e8:68:d6:c0:3e:3a:
9d:f5:58:3e:f9:fc:d4:79:96:00:f4:d8:90:42:6e:e5:d1:e4:
e2:04:9f:c2:d8:9f:9c:36:f8:75:d2:b4:d2:dc:e7:3e:5d:9a:
d0:21:24:a5:e7:88:b1:de:82:dc:d8:da:82:75:15:b5:83:6f:
53:db:ed:52:da:13:76:c5:d5:d0:ec:98:48:5f:a6:ee:5d:79:
a9:fa:71:c5:98:60:c4:0d:9e:d9:ff:6b:19:f6:7a:d1:45:fb:
c8:51:83:bf:61:68:65:12:7c:af:df:f2:59:c2:38:e3:81:e5:
9d:53:42:bc:1d:e9:fc:76:0f:46:e9:4c:28:ff:04:af:97:d1:
c6:f5:80:a2:ba:a1:e0:f2:57:e8:74:8c:f9:5b:c6:ff:be:2f:
80:49:78:0a:eb:80:2c:28:2e:bc:64:c4:76:bb:23:28:00:c7:
3e:d6:6e:2d:89:92:29:b0:b7:ef:f2:98:94:6c:a9:19:21:52:
a5:bc:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:53 2025 by rpki-client