Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier: 4DDaRbZJrmD2ssokMGSqXXlzPAHfmT8S2mDfPOkJ8s0=
Subject key identifier: 6A:5F:F4:BA:45:5F:EB:4E:FA:AD:DB:D0:DB:28:AF:1C:02:31:98:C1
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 019748FAA74C4BF5D2971FDC326FB929A847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number: 03B5
Signing time: Sat 07 Jun 2025 06:01:15 +0000
Manifest this update: Sat 07 Jun 2025 06:01:15 +0000
Manifest next update: Sun 08 Jun 2025 06:01:15 +0000
Files and hashes: 1: Uua6yM2rrGnji--Kv2Pn_xDUCUQ.roa (hash: kXckJ9Wq2st2kAYy1iDEHvhVUEJf4YmXaasq7C+0rWM=)
2: WpAem0y3mJRbP65lGL1BbYc7ewY.roa (hash: 9FtB6GE1KbOq2c/Ao/RtTSsyLPIeyA8GKr7sC11YD4c=)
3: ktIBl0vO2PiY2N18cJ-d_fSxe4Q.roa (hash: PaoiyedZ99+u6zVUTqQy6HmR360bMO4FcWgPO5UfmIs=)
4: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: NZEbLm7FFYNnvzOLjKsNsArK+cLToSnmJ2dlG2wjIO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a7:4c:4b:f5:d2:97:1f:dc:32:6f:b9:29:a8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Jun 7 06:01:15 2025 GMT
Not After : Jun 8 06:01:15 2025 GMT
Subject: CN=6a5ff4ba455feb4efaaddbd0db28af1c023198c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:1a:ae:b0:68:ff:d4:16:12:22:ad:88:81:
93:37:14:d4:6c:1a:f7:e1:5a:28:7d:9a:7f:9f:44:
15:b9:47:67:7d:21:a2:c8:29:fd:2b:b9:28:25:f4:
9f:7f:7a:11:04:88:ab:9e:a4:f1:43:fa:07:8b:25:
14:6d:f3:c5:59:3c:05:fb:57:b0:ee:6a:a9:47:f6:
80:ae:bc:39:a7:5a:9d:8c:ac:fc:10:bb:9d:ff:d6:
a5:b6:3e:d4:51:f2:64:b4:90:9a:0f:8a:7c:e1:20:
99:c9:9f:4b:b4:99:ea:cc:ed:12:8c:56:62:90:05:
e4:99:f4:ca:37:fb:1d:a2:c8:44:a7:7e:74:dd:f8:
47:47:7c:3b:34:9f:6f:01:d5:8c:2e:f8:d5:50:9d:
83:41:dc:f4:c2:42:9f:a0:b2:1d:09:4f:c2:3d:b6:
e8:df:a8:be:9f:43:1a:81:19:c7:48:8f:ba:06:cf:
4b:06:f6:b6:dc:64:31:6a:bf:60:a8:fc:87:e5:ed:
6e:d9:62:61:eb:75:db:58:f6:d2:94:a4:df:bb:22:
ae:42:75:52:46:93:7b:a8:f4:9c:c5:9c:1c:3b:91:
0b:f5:6b:b2:91:38:d6:ee:19:e1:cc:ea:90:e5:17:
ce:d5:dc:e9:ef:12:88:a0:65:9f:95:4d:a9:21:0a:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5F:F4:BA:45:5F:EB:4E:FA:AD:DB:D0:DB:28:AF:1C:02:31:98:C1
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2b:7e:4c:5c:12:f8:f0:e9:2a:d8:92:3f:bc:ef:78:81:73:
64:a5:f0:de:a2:63:54:f0:33:ee:17:4f:5d:f6:47:71:35:14:
8c:de:06:bf:61:c1:c2:2b:f7:05:96:56:f4:39:bc:3f:34:48:
9b:52:1d:7a:44:53:eb:12:ce:51:19:af:12:b5:5f:b1:bc:99:
57:e0:e7:fc:60:59:ce:d9:19:fc:59:a0:37:97:db:fa:42:f4:
95:77:fd:e5:2e:8a:cb:a2:02:94:5e:4b:74:9c:c5:7c:d0:0b:
b8:8f:fa:fe:88:b6:64:ea:d7:a9:3e:aa:76:40:1b:93:97:91:
6c:14:e7:2a:d7:a5:43:10:21:6b:34:ec:43:a7:04:73:86:01:
3c:b5:de:77:a5:61:56:d8:d4:3f:a0:9a:81:d6:85:0e:fb:5d:
15:df:95:d6:45:cd:aa:51:3b:ab:73:46:ac:51:d9:e5:6d:2a:
b9:07:86:5f:85:a7:d1:43:8a:87:e9:ec:1d:cf:28:01:86:ab:
ff:59:0f:fe:0f:93:b9:49:01:52:5d:18:b3:7f:b3:36:c8:15:
6b:fb:39:40:c8:34:7e:9e:c2:a9:37:25:d1:0d:ab:2c:a2:d5:
0b:b7:cb:0e:40:a1:24:52:97:9f:5a:d1:5f:bc:f1:2e:5c:04:
32:2f:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:33 2025 by rpki-client