Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: egy0Rt7UaSpp5reK4UW/Z9lMk9PdahWT+HtYvCfI/tY=
Subject key identifier: FF:C4:B3:FA:44:C4:C9:EA:49:06:03:86:59:82:C4:AB:4B:F0:D2:E0
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 019767726ABB6430EA130A85EACF386494DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 0FC6
Signing time: Fri 13 Jun 2025 04:00:40 +0000
Manifest this update: Fri 13 Jun 2025 04:00:40 +0000
Manifest next update: Sat 14 Jun 2025 04:00:40 +0000
Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: ebbey0Sb/OitQz8LEmAty/K4yEYewPzkv9IGlHqL0CU=)
2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:6a:bb:64:30:ea:13:0a:85:ea:cf:38:64:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Jun 13 04:00:40 2025 GMT
Not After : Jun 14 04:00:40 2025 GMT
Subject: CN=ffc4b3fa44c4c9ea490603865982c4ab4bf0d2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:fa:f1:46:bd:dd:68:cb:f2:32:cf:77:c3:
63:d0:f6:c4:c7:f4:b1:9a:a9:e1:2a:e5:7a:f9:99:
70:52:fb:fa:d7:26:85:1e:1b:8a:99:63:d9:64:48:
83:7a:55:ad:7e:38:d0:15:96:4b:dd:b0:f9:4b:31:
1e:fd:e4:31:7b:c2:d9:09:c6:bf:1e:5e:f9:c5:5d:
ac:0c:c5:3e:b2:8e:1b:7a:8d:3d:ae:00:91:84:db:
7d:d4:32:e3:11:67:57:91:13:c6:58:e1:fb:c8:42:
cc:c2:5c:3b:b4:ad:28:80:d8:8d:49:14:90:63:0e:
ae:c6:26:37:83:d2:b0:9b:f4:63:92:75:a7:e3:22:
34:e9:62:8c:f4:50:6b:65:85:58:3b:5f:f2:84:b4:
a0:f5:1d:ab:d7:f0:11:98:cb:54:eb:2d:28:45:a0:
e7:69:f2:ce:88:7e:2b:15:d7:2d:cf:0c:ef:ad:d8:
47:a9:dd:f4:4e:de:13:38:5f:2f:9b:b0:44:c4:6f:
ce:ee:0f:5f:47:03:a6:c1:18:b6:52:86:10:a2:28:
94:6a:d7:1b:24:87:6c:77:ca:11:2c:b1:a9:13:53:
05:10:44:0a:96:ce:29:04:69:27:e7:ce:fe:e4:c7:
44:e5:01:0e:f6:ae:e1:61:95:30:58:8a:47:d5:10:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C4:B3:FA:44:C4:C9:EA:49:06:03:86:59:82:C4:AB:4B:F0:D2:E0
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:87:20:6d:fc:19:10:f5:7f:87:5a:be:df:26:fa:8f:f4:77:
73:18:1c:4d:fc:ca:b4:61:36:db:2f:48:0c:a8:ca:9f:4a:89:
8c:e5:70:aa:1c:08:bd:a1:f2:7a:d9:c9:35:ab:0b:31:03:9f:
ca:ed:e4:dc:cc:cd:1c:36:2a:9e:35:4c:5d:9a:ad:da:d7:00:
24:23:73:38:4a:ee:81:47:c1:ae:7d:a5:f0:b2:0f:63:7f:b6:
70:d0:7f:7d:21:f2:e8:7d:f7:b0:1a:b9:b3:e1:46:23:80:b2:
11:27:73:a8:93:00:de:6c:ed:9c:4a:f8:4d:e4:d0:5b:7f:d8:
4b:4a:17:2e:0f:58:9f:fb:84:4b:1a:3d:10:a9:5e:70:ec:28:
32:c9:d1:c6:48:ca:75:9d:c9:61:f9:7a:da:3f:f8:b8:ca:07:
a1:b9:2d:ab:71:81:38:3d:ce:02:c4:de:b6:5a:d1:0c:3d:f0:
e7:18:66:08:b8:cb:b8:15:4b:56:f9:db:67:c6:01:a2:17:51:
a4:28:d6:79:4e:03:61:6f:6e:2e:74:58:f0:0e:19:a7:5f:75:
48:83:36:ba:af:c8:4e:db:c3:b4:ba:7d:21:32:59:61:ed:82:
2e:c2:37:73:2c:b2:d9:f5:33:10:62:bd:3a:d9:ea:e1:2f:28:
85:81:07:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:47:29 2025 by rpki-client