
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier: iUeY4u9abM9rO9Q01uvI0XC14Pvv9nnklwklrjropVE=
Subject key identifier: 20:36:55:F4:1C:D6:EF:7D:2B:71:D0:C6:BC:72:D9:3B:28:53:E1:9A
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 01975F4AF25AEA484C5B4815EC3E79BEB50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number: 0ECF
Signing time: Wed 11 Jun 2025 14:00:36 +0000
Manifest this update: Wed 11 Jun 2025 14:00:36 +0000
Manifest next update: Thu 12 Jun 2025 14:00:36 +0000
Files and hashes: 1: GLHmVae2R6jaakZk3moUBxJAeJc.roa (hash: mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=)
2: McmEoR42go_NL-e1B7HnbupLbKE.roa (hash: l0MQWVd1GEY0hlnVKUF+5hVPuDs45GKOy6rfNmqbWI0=)
3: cQbtoMzIsUrEiz2_R7FPTDe-83o.roa (hash: uIgSp+mYNVkKY/oukv2IXYpbIzAsJVvw3J0CKtfAk+0=)
4: uW8kB1S11N80An97YmPIheyw1-I.roa (hash: qgctSfTl7OMOIHcXisfgovamPsJVbiOdGZzBwp6qf14=)
5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: Adt1Sj+SIOgAW8H+b83RKAs9rbDdW6Ii7aBhuXHBdt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4a:f2:5a:ea:48:4c:5b:48:15:ec:3e:79:be:b5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Jun 11 14:00:36 2025 GMT
Not After : Jun 12 14:00:36 2025 GMT
Subject: CN=203655f41cd6ef7d2b71d0c6bc72d93b2853e19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:bd:4d:08:3e:65:47:eb:65:38:80:b6:d8:
d0:5b:3b:83:5a:2c:6b:ac:fb:07:f8:a1:bd:fa:69:
38:e4:76:cd:9b:f4:ec:16:00:8b:f8:81:83:61:90:
e0:6a:2f:33:b4:06:0c:c4:1f:fd:fa:da:a3:35:08:
66:20:98:07:97:59:0a:f8:04:5c:6c:78:f4:f8:c7:
65:7b:11:a3:a0:25:b7:17:85:df:be:d1:4c:d5:b1:
14:63:8f:6b:f7:1b:2e:ef:ed:b6:4c:78:9f:38:22:
ee:5a:94:3e:b1:89:b0:05:90:40:f3:eb:4e:3e:62:
df:b5:a2:32:eb:52:8c:44:13:98:ac:40:b4:8d:d4:
1b:6b:5f:67:0a:98:69:92:13:18:54:94:db:71:59:
11:32:a6:45:e1:ef:39:33:3d:fa:02:47:d5:a1:96:
36:f4:8c:ff:d2:58:67:d8:6e:40:12:dd:99:a6:7e:
66:a8:69:ab:1f:a6:0e:92:f8:f5:7a:97:a0:6e:04:
fb:c3:ba:03:2b:df:35:1c:91:12:6f:6b:d9:59:6d:
87:67:b2:86:25:c3:28:1d:1b:ec:fe:07:7a:18:3d:
dc:88:18:31:7c:a4:ad:f2:6c:ac:bb:eb:5f:a4:6d:
5d:fb:3d:33:d6:1d:fb:79:bc:15:8d:8b:de:9e:44:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:55:F4:1C:D6:EF:7D:2B:71:D0:C6:BC:72:D9:3B:28:53:E1:9A
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f4:60:72:b3:62:53:6e:ee:cd:70:21:45:96:39:2f:53:5f:
00:6c:a2:88:ea:f8:79:94:bf:27:c6:47:fb:70:77:39:66:cf:
be:35:1d:1b:41:20:ed:22:5f:a9:76:14:a4:bf:ef:73:1a:3e:
b6:0b:d5:30:64:13:47:c2:f4:a1:d5:58:0d:69:3a:03:9f:0c:
5d:15:da:06:e3:6d:d3:f7:4e:ae:6f:87:36:c8:cf:3e:09:bb:
bd:1c:b0:90:a9:04:bf:af:d3:cc:b6:48:6d:a6:2c:f1:d9:47:
eb:c0:3a:e5:83:07:98:de:ff:54:92:74:11:2a:1e:fc:82:3c:
7e:01:72:96:12:57:3b:1d:fd:61:5b:80:1f:0e:ee:d8:2a:58:
c0:6d:4f:27:51:4a:60:2c:2e:af:46:92:d4:4a:b1:8b:9c:74:
85:fe:be:a6:96:3c:ad:52:04:66:ed:ab:06:3b:20:b5:dc:51:
3e:ed:2c:72:5c:39:04:22:98:d1:24:2d:8f:c4:6c:49:c6:2d:
04:6f:ca:76:82:de:5f:59:e8:79:85:32:c6:5a:74:0f:35:ad:
12:9e:2f:20:b7:e4:86:a3:c0:8d:d9:3b:18:4c:88:72:80:9c:
11:c5:b9:5b:2a:16:e9:25:0b:08:3f:db:af:1f:9a:84:c8:c1:
87:a6:74:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:29:23 2025 by rpki-client