Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: KmJmKWp8YsGb2V5hNCJAxTltstIirYsijHvRYp+Js90=
Subject key identifier: B9:06:D9:CC:EE:19:82:96:E0:10:11:EB:67:2C:C0:D1:AB:AA:A3:3E
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 01974D7C344963907AA3E2842A620FD0EB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 0663
Signing time: Sun 08 Jun 2025 03:01:14 +0000
Manifest this update: Sun 08 Jun 2025 03:01:14 +0000
Manifest next update: Mon 09 Jun 2025 03:01:14 +0000
Files and hashes: 1: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: NokaZrVHokd7H7yPFB0OWhpdNhgWL5CrbLQRO0xsV1c=)
2: Wwk65fWkkC0KWWHed6RDHU5zdWE.roa (hash: OdE2ZmnpDqD8iDsUuCtPuylwN6Gs7CMSGI3EhFPXcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:34:49:63:90:7a:a3:e2:84:2a:62:0f:d0:eb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Jun 8 03:01:14 2025 GMT
Not After : Jun 9 03:01:14 2025 GMT
Subject: CN=b906d9ccee198296e01011eb672cc0d1abaaa33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:78:e8:0e:92:95:db:77:96:75:32:25:ce:85:
16:39:27:f9:59:be:34:0f:9e:2a:ff:bc:79:8e:64:
1e:30:dd:a5:a9:16:9b:aa:4d:74:34:d1:53:e4:e6:
30:8f:61:a8:01:a9:b2:7a:60:56:54:9a:48:d4:73:
fd:be:a8:57:1c:57:9d:2c:56:92:32:2e:ce:d8:fc:
18:be:62:d1:2a:ee:ed:44:ef:a7:ae:b1:2c:24:cd:
9d:11:15:ba:da:43:52:cc:00:42:f0:a6:eb:15:86:
59:18:55:ab:8f:14:53:1f:61:0c:ad:dc:ef:25:21:
06:2c:c7:7e:fb:4f:f9:95:8b:8f:90:80:c1:23:1d:
b1:22:19:5e:43:46:6b:fa:78:50:30:ca:f7:6f:9d:
0c:88:0a:ad:d7:1d:2e:03:b5:a6:fb:5a:2e:fd:31:
3d:e2:d1:76:1d:c8:37:9b:d9:f6:48:a0:65:f8:88:
d7:15:f7:8c:17:cd:40:11:c2:99:da:63:5a:dd:c0:
e2:05:62:80:4c:12:d8:87:28:a1:16:32:f7:a3:f7:
7f:47:b2:05:1b:9b:4a:38:8c:d2:73:c8:3e:f4:e8:
64:4a:3f:5e:ae:85:61:10:e9:38:e0:84:1d:7a:93:
db:fc:3b:9e:90:f2:30:d2:18:25:73:ff:50:c5:59:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:06:D9:CC:EE:19:82:96:E0:10:11:EB:67:2C:C0:D1:AB:AA:A3:3E
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:78:e5:b4:95:d6:53:75:ec:50:dd:43:0c:1f:8b:d5:ce:86:
6c:78:1b:10:8c:af:4d:ac:19:5c:40:86:4e:8b:59:e8:d4:f9:
7a:90:87:ec:dd:cf:c6:15:8b:5f:8a:44:a8:27:e5:2a:3b:af:
b3:55:82:32:74:c4:a3:d3:a8:73:24:72:59:22:a1:91:61:87:
91:bc:84:54:5f:b1:0a:2f:38:7a:5a:08:21:cf:a0:1e:77:bc:
ae:81:62:8c:17:49:09:09:d1:7a:47:ad:81:b7:3e:23:7a:da:
6c:40:d5:ad:82:06:34:39:aa:f7:54:c0:7c:a1:c2:6b:0c:2d:
d8:52:e5:a1:96:37:89:ed:10:53:2d:b5:54:51:a7:0d:8b:87:
ef:13:2e:7c:d1:27:b6:b6:16:4d:56:c5:ce:26:30:72:98:44:
63:61:bd:6b:f7:77:a7:28:46:e4:3c:c7:d7:37:9b:97:a0:34:
29:e1:8f:bf:d7:c6:a1:c4:e1:7b:9d:46:1f:d2:02:bf:4f:ab:
c0:12:ca:3a:19:a7:09:ad:65:7b:e3:23:ea:55:f9:00:61:fc:
2d:c0:1c:92:58:4d:2e:90:ff:97:c1:f2:f7:75:1d:39:8e:f4:
6c:8c:76:ef:37:13:30:22:a7:38:28:67:7e:4f:c3:60:f3:f7:
48:ab:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:14:29 2025 by rpki-client