Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: 3aSmBAyDuWqL5BTZ/DgRQ/1nZQOOljsW/zhYZaChQ/Q=
Subject key identifier: DF:F2:30:F9:0D:18:F8:30:BF:BD:76:92:91:F0:DC:A0:02:89:0D:92
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019748552ECFF0CC89CF36C2FF237F2AF547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0B08
Signing time: Sat 07 Jun 2025 03:00:31 +0000
Manifest this update: Sat 07 Jun 2025 03:00:31 +0000
Manifest next update: Sun 08 Jun 2025 03:00:31 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: Bx6c49srz45dHzaeaxsazJEswTp3dAwmj27j/J+ISBM=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:2e:cf:f0:cc:89:cf:36:c2:ff:23:7f:2a:f5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Jun 7 03:00:31 2025 GMT
Not After : Jun 8 03:00:31 2025 GMT
Subject: CN=dff230f90d18f830bfbd769291f0dca002890d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:d3:af:12:64:af:dd:2e:95:28:f5:29:b6:
4f:9b:a2:bf:12:ce:28:eb:35:70:ac:e0:14:95:8a:
c2:f0:c6:8f:a5:3d:86:46:13:e7:f9:98:99:45:ed:
63:d5:d8:ff:ff:56:03:b8:c7:07:8d:92:17:a5:b4:
06:f9:87:ab:81:1c:a8:b7:31:bb:c4:54:a5:c2:fe:
a6:e5:7b:77:c1:f1:7b:8a:67:af:20:e2:8a:1c:c1:
3e:bb:3e:72:b8:fe:4c:ca:61:4b:ab:2c:0d:75:b0:
c1:82:ef:e2:6c:3f:ee:cf:bf:35:cc:ad:94:fd:c2:
c4:e1:83:d8:42:27:91:f1:8d:ac:e8:6a:a6:0a:14:
8f:db:a9:d0:fa:87:cd:d7:e3:0b:2d:1c:21:ce:19:
df:23:78:a5:75:85:04:00:48:cf:24:40:f2:8c:1f:
37:50:00:ef:05:b6:0a:cf:85:7d:2f:13:99:45:2f:
fb:a4:df:8e:67:9f:28:a0:f3:47:10:98:47:a1:78:
d8:ca:2f:1d:2a:0e:15:62:a5:6f:26:53:4e:b6:fc:
db:96:7e:da:81:9d:da:81:1b:98:86:bd:79:b0:4a:
66:06:1e:5d:f2:fd:f5:ff:16:d0:4b:74:6f:28:28:
97:72:f5:b0:30:b2:6d:17:fc:8d:49:68:41:fd:50:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F2:30:F9:0D:18:F8:30:BF:BD:76:92:91:F0:DC:A0:02:89:0D:92
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e0:cf:26:b7:5f:74:2f:6f:eb:3a:df:67:c7:96:6d:9e:9c:
b2:7a:de:bd:10:a5:f7:7e:42:7e:7c:2a:39:25:fc:f4:1d:cf:
ad:22:d4:c6:9d:95:0c:93:a3:f2:d2:71:22:1f:b5:bd:4c:0d:
78:87:a8:69:e0:15:c9:41:5d:0f:cd:6e:aa:14:f6:aa:60:c4:
a9:be:0e:a3:e4:58:9f:52:fd:ae:2f:65:19:de:b8:bb:ea:68:
c3:99:86:e6:2b:53:af:67:17:a6:c9:b0:32:3c:ee:f7:49:da:
47:a9:ad:d7:ce:7c:21:75:42:cb:05:d7:4f:31:0e:95:c6:4b:
33:cc:9e:d9:9f:fb:2c:a5:ab:d2:06:e0:3b:a7:35:d6:3b:35:
79:5b:2a:fc:a5:5c:7c:4e:61:35:74:19:e1:8c:11:bb:3c:39:
90:c3:64:cf:51:b5:d3:97:1f:14:e2:3f:39:44:87:53:37:01:
5e:f2:e2:c8:0b:80:03:8a:5d:3a:99:a4:8d:c3:80:27:d5:ff:
f4:a6:3e:ad:af:b8:d8:69:e6:71:40:b3:05:d9:11:31:f1:2a:
37:89:0f:43:7d:33:40:2a:6c:d1:2e:74:34:9f:ad:92:d2:3a:
db:ab:9e:dc:e7:47:22:84:71:b7:36:a7:6b:c7:21:2e:75:75:
a4:f7:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:10 2025 by rpki-client