Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: J2EYD/8EbTZvDfkwqZDo+kXU9gyqfSGj+GrRFat1va8=
Subject key identifier: 34:BB:FA:BC:F1:64:59:6B:21:F3:0C:4A:D6:51:B9:E6:0B:EA:D6:AD
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 01976D3E4BC8F778ABE44F4FEA2B08332F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 0FC9
Signing time: Sat 14 Jun 2025 07:01:28 +0000
Manifest this update: Sat 14 Jun 2025 07:01:28 +0000
Manifest next update: Sun 15 Jun 2025 07:01:28 +0000
Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: e3GCaO/uwcg2kwWIheZ6ROBEcZZEugdrim70w9Tyzms=)
2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:4b:c8:f7:78:ab:e4:4f:4f:ea:2b:08:33:2f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Jun 14 07:01:28 2025 GMT
Not After : Jun 15 07:01:28 2025 GMT
Subject: CN=34bbfabcf164596b21f30c4ad651b9e60bead6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:1c:35:1a:c2:3b:f7:23:f3:24:59:91:b5:
53:4c:95:c7:f2:72:f2:85:cd:30:60:56:1d:2c:44:
53:cb:c3:c4:43:ba:50:0b:43:aa:d4:24:3b:27:91:
9a:7e:4e:dc:79:28:58:0f:fd:54:3e:ef:e0:89:de:
eb:e0:4d:73:9d:7a:b4:01:44:69:ef:22:e3:44:80:
4c:93:ba:b0:4f:db:de:79:03:33:8f:3a:a8:79:d5:
69:10:1f:ff:ea:54:21:43:6e:a5:5d:9e:4c:32:81:
10:5e:da:3d:e7:60:a2:6a:1c:04:4b:b3:b2:48:cc:
87:da:d4:4a:a2:74:fc:3c:b3:b4:b6:28:09:33:72:
41:c7:b8:67:ad:44:e7:c4:c8:f5:9b:d6:d2:0c:8b:
ea:1d:97:cc:dd:51:7c:30:fc:d7:12:34:7e:99:ae:
39:f6:d1:c2:28:de:23:53:cc:44:c3:e9:12:33:2f:
43:0b:eb:e0:c2:15:6b:a5:bb:7e:1f:2e:2e:22:6a:
79:29:5a:52:5b:39:96:71:2c:8f:e8:73:f5:e0:e1:
c7:28:2c:7e:f4:7f:ef:e5:7e:75:f1:41:d1:66:65:
f6:1e:fa:7e:c6:34:50:c0:40:ac:82:29:d7:bc:57:
9f:8d:e0:c6:e2:28:e8:45:85:5a:76:f2:e2:5d:68:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:FA:BC:F1:64:59:6B:21:F3:0C:4A:D6:51:B9:E6:0B:EA:D6:AD
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:34:c4:f9:93:e2:58:33:1a:04:f7:47:52:16:b3:df:be:18:
9a:f5:14:cb:8f:b6:10:6b:83:27:30:dc:1a:bb:9f:4d:c4:bb:
60:a3:80:d4:86:85:a7:1b:eb:d1:a6:af:c9:7f:87:99:57:0b:
e6:eb:2b:e3:9f:14:6e:85:9a:fe:f4:0c:ad:69:7c:3d:98:5e:
84:71:9e:77:b2:60:04:2f:ef:7c:a2:98:e2:b5:81:53:b7:16:
30:4e:a4:73:b3:2d:8a:d8:9a:c2:04:cf:fa:24:c2:b9:89:e4:
c3:c6:9f:ad:c3:55:8f:2e:22:a7:c6:33:d9:ad:77:6c:bb:b6:
a1:d2:50:fd:ec:ac:cd:ec:70:1c:b7:3a:33:72:b4:56:4d:b6:
e0:de:57:f1:9c:0d:76:08:bf:a1:e5:78:9f:7e:d7:20:51:75:
46:db:9d:23:c3:02:65:32:0a:9d:8c:28:0c:b4:23:9e:82:b1:
1a:8a:0c:7a:45:07:32:87:d8:a2:95:25:c9:c0:33:cd:0c:bf:
fd:81:eb:c3:eb:9e:37:cd:c3:25:0f:ef:a1:b2:86:b6:7d:31:
6e:f0:37:28:dd:b3:92:60:16:b2:04:87:0f:66:f7:2c:ae:86:
d4:5b:af:4d:fd:e6:03:8a:77:62:60:d8:35:8f:1b:a4:3e:c7:
c9:58:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:09:33 2025 by rpki-client