Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: y9JzXJeeZNpSrzPmp6SpIbN2DjlaD14d+qg45xnrt64=
Subject key identifier: 3A:CA:7C:62:84:D3:88:FB:83:15:52:89:6A:5C:23:42:C6:29:AA:06
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 019752344F3935D02B0B1D7DF2C92920A795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 0349
Signing time: Mon 09 Jun 2025 01:00:49 +0000
Manifest this update: Mon 09 Jun 2025 01:00:49 +0000
Manifest next update: Tue 10 Jun 2025 01:00:49 +0000
Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: Jlqcr+USrq0k5vt3fbhMIqCsfYaIdP/QHNjo6wMUwUQ=)
2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:4f:39:35:d0:2b:0b:1d:7d:f2:c9:29:20:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Jun 9 01:00:49 2025 GMT
Not After : Jun 10 01:00:49 2025 GMT
Subject: CN=3aca7c6284d388fb831552896a5c2342c629aa06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:c7:16:d2:42:b5:3d:b9:c9:a5:1b:73:9f:
6f:e4:97:09:0a:ac:1a:c8:8f:69:c6:1b:cf:c0:06:
b5:63:60:c7:e6:2e:e6:95:dd:ff:7d:b2:2b:5f:ce:
10:16:a2:3b:4e:ca:fd:8e:43:27:dc:f1:43:5d:6b:
10:bc:3b:d2:d2:53:6f:4f:2d:c5:40:9c:8f:15:db:
c3:01:b6:d8:aa:8c:03:1c:9c:e0:c3:39:2a:5a:19:
a6:e9:82:27:d3:69:f2:71:01:34:23:4c:91:67:b3:
46:72:f5:f7:58:29:da:57:dd:76:dd:0d:da:68:0e:
3c:75:55:c3:d0:b8:e3:45:27:c6:e5:d5:b2:02:58:
e4:fa:49:d4:81:0b:98:44:c2:83:ab:95:4a:a8:3e:
d1:d9:55:5b:73:2e:fd:8f:45:2c:e8:0d:fe:a0:ab:
da:a3:ee:04:15:ea:c3:21:b5:30:53:45:50:d4:cb:
38:d9:43:5f:a4:48:3e:b7:05:7f:e2:b6:2c:b3:e6:
d6:d3:44:63:43:ea:26:40:d3:40:e9:6b:71:cf:ae:
e9:d6:fc:27:92:d8:33:92:58:07:4b:39:75:33:68:
d3:3f:dc:5a:fa:1c:36:3a:70:76:2d:42:15:fe:cd:
41:a1:97:04:22:c3:5e:98:ae:08:09:a7:f5:a6:35:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CA:7C:62:84:D3:88:FB:83:15:52:89:6A:5C:23:42:C6:29:AA:06
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2d:c9:52:5a:24:1d:90:e7:18:a9:c4:ae:07:15:01:07:49:
97:98:fa:93:bf:d3:85:df:b0:e9:aa:bd:43:ed:a5:92:ed:f6:
67:0b:84:2d:4f:32:c8:5d:c8:2f:1b:80:21:d2:06:8d:6e:02:
ec:45:da:0c:da:e5:c6:3f:9e:0b:d4:7b:f9:5b:79:dc:5e:5d:
a8:82:b7:68:00:a2:bf:4e:9c:cb:c9:ec:96:47:16:58:78:00:
a0:0e:35:06:1a:44:4b:ab:c9:c8:a4:e7:94:8a:3f:cb:e7:c1:
f5:40:bf:f1:66:40:72:cf:cd:61:f4:9d:75:5a:ab:06:fb:ff:
8b:f3:1a:74:9e:4b:1f:46:20:96:37:e6:89:8c:f5:06:ee:08:
96:27:0b:4c:3b:c4:20:d6:35:5c:88:3d:68:b6:91:78:7c:0a:
52:dc:db:51:c1:79:88:cd:02:0c:12:57:2d:9a:90:19:46:b1:
ea:be:fd:73:49:fb:93:5f:74:f0:ae:9d:7b:12:13:0f:a4:87:
0f:71:53:f8:01:b1:48:c5:b5:15:2a:49:8a:70:93:1a:87:9e:
1d:97:40:7e:0d:db:bb:cc:37:06:8f:39:29:35:ec:ff:b7:05:
be:4e:1a:7f:0d:ae:36:67:53:35:5e:74:30:8e:6f:02:1e:13:
20:e0:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:23:56 2025 by rpki-client