Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: VMQsyZo3aH1dXV029EEg7cGX+5pQPD4qDuE4UfqInuI=
Subject key identifier: 7D:24:12:D3:BB:97:81:62:AD:75:F9:BB:08:50:85:5D:31:48:F2:5E
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019749D609A8B9964943927E42B9F06C06F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:53 +0000
Manifest this update: Sat 07 Jun 2025 10:00:53 +0000
Manifest next update: Sun 08 Jun 2025 10:00:53 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: YLOyxqquao9QJWUtybnrBa6nYWNAEAvlBBEsy8MinYM=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:09:a8:b9:96:49:43:92:7e:42:b9:f0:6c:06:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Jun 7 10:00:53 2025 GMT
Not After : Jun 8 10:00:53 2025 GMT
Subject: CN=7d2412d3bb978162ad75f9bb0850855d3148f25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:dd:00:09:ed:68:fd:52:93:a1:85:95:15:
b4:1b:5b:a9:f6:52:bc:04:59:58:fe:13:9a:68:61:
64:01:8b:37:97:4c:a4:64:50:fe:68:29:ea:07:25:
13:b2:6c:ef:26:4b:98:7f:0f:04:ed:b2:f7:ed:c6:
ac:0a:78:99:98:2c:dd:8c:a8:66:89:4c:2e:66:fc:
b4:fc:f9:9a:dd:35:19:1e:62:1a:65:7f:3d:d0:a5:
0c:15:1f:29:07:f9:7e:f0:5e:b1:01:26:ee:9c:20:
08:1a:3d:44:3b:9a:3c:3c:6a:63:13:4b:17:e5:a3:
46:61:3a:5d:6c:55:c8:f3:56:31:69:74:be:ce:dc:
3b:5d:7b:84:5e:64:24:51:18:17:d8:7b:44:ba:3a:
48:0b:e0:dc:53:e1:02:49:f7:33:cb:f7:a5:da:30:
a9:e6:8b:ea:86:1d:dc:94:3b:8e:8c:46:f0:b9:fe:
8b:6b:8f:60:80:96:28:97:97:60:0e:79:90:96:7f:
f9:bc:fe:32:30:e7:de:1e:22:e0:c4:0d:59:90:9b:
53:83:1c:6f:2c:f4:b5:65:67:52:f1:ad:b7:12:c7:
df:f5:ee:5a:02:28:d8:b6:0d:1b:d4:2e:25:e5:77:
71:bb:b9:1f:ab:3f:7f:ed:0f:ca:f4:70:b5:7c:8e:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:24:12:D3:BB:97:81:62:AD:75:F9:BB:08:50:85:5D:31:48:F2:5E
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:57:7e:4d:a8:90:13:87:6d:cd:67:f8:dc:5d:16:34:94:61:
ab:e2:18:95:c1:02:c0:bd:11:de:5f:7b:ee:55:21:fc:d4:ef:
d7:49:11:b9:30:88:f2:f4:df:9f:30:06:47:c9:6d:c7:a2:a7:
1e:65:0d:7e:8d:c4:66:f9:fe:88:49:44:f8:46:e1:ee:83:3b:
c5:5b:07:9a:7b:8d:8b:6e:66:48:a1:9f:81:0f:1c:80:bd:ec:
e2:17:66:4e:b0:4c:0a:78:24:65:5e:c5:32:f7:e3:09:f2:b6:
e1:57:43:14:e5:e4:6c:0a:64:96:14:5d:f9:c6:6f:03:6c:0f:
49:5c:44:a2:e1:01:24:91:0e:e8:77:d9:d8:2d:99:03:c5:3b:
1c:5d:03:a2:5a:93:48:ad:d0:51:57:d2:12:fd:3c:2f:03:45:
49:50:d5:24:f2:90:ea:9f:e9:d0:cd:3b:ad:aa:82:2a:61:76:
e3:95:42:77:c1:b1:7b:04:e7:a5:13:e1:93:3b:de:93:fb:5b:
a5:59:a7:ee:6d:ce:90:21:7e:46:2a:47:e6:be:45:f9:2a:51:
23:d3:79:ff:f4:81:c0:fc:18:2f:ce:08:11:2c:23:00:22:83:
01:3f:30:2b:3d:65:f2:70:e6:0d:1f:f6:a9:f4:32:83:2e:d9:
21:19:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:46:37 2025 by rpki-client