Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: OykuL8AEzX40YgS8ZCS72Zve55z6xji9hoVfWtA7qgI=
Subject key identifier: 4D:C6:65:A7:61:4F:6B:D5:C7:AD:26:B2:E9:B6:24:0C:FD:C8:B4:FA
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 01974E20A1B1B42A4C3D940835789C1693D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 06:00:50 +0000
Manifest this update: Sun 08 Jun 2025 06:00:50 +0000
Manifest next update: Mon 09 Jun 2025 06:00:50 +0000
Files and hashes: 1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: E//W123jdTG9kbDtMaCFOwBVqYHcWNrHNzwVR6FOCq0=)
3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:a1:b1:b4:2a:4c:3d:94:08:35:78:9c:16:93:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Jun 8 06:00:50 2025 GMT
Not After : Jun 9 06:00:50 2025 GMT
Subject: CN=4dc665a7614f6bd5c7ad26b2e9b6240cfdc8b4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:b0:04:39:12:a9:81:5e:db:d4:d1:4e:3d:
09:79:15:d2:9c:c7:8a:0e:07:89:6b:cf:33:0e:d7:
46:88:96:9a:68:b3:85:5d:6a:60:54:15:41:ca:bc:
72:92:25:eb:3b:1a:9a:45:2d:67:67:29:c6:53:c7:
05:94:dd:66:bc:f2:b2:22:50:93:05:c4:4e:e8:b3:
c8:9e:e6:bd:ba:c1:2f:89:64:4b:e9:cc:11:2a:ed:
56:ae:27:49:37:57:a7:63:c0:3c:6b:3a:f3:c2:d3:
df:49:d0:60:08:d6:69:47:0d:99:63:0b:2b:b5:36:
02:dd:f1:1b:67:45:cd:d5:3a:db:63:b4:fe:dc:12:
bb:b0:cb:ca:4d:0b:bc:8f:2a:5b:5a:b7:db:cf:23:
d0:31:b8:35:58:14:24:50:c5:7b:77:3d:75:fa:e8:
94:87:6b:50:59:10:1d:5c:f0:77:9b:38:b0:aa:a4:
f8:8d:c3:12:4a:70:03:cf:11:b5:f8:66:04:92:87:
27:38:5c:7c:aa:a4:84:06:6e:58:a8:24:6e:07:24:
c3:e3:6e:af:d6:44:10:42:0f:cc:49:7c:f1:04:8b:
d4:c1:69:f4:c9:93:b3:0a:d5:e3:2b:ea:29:28:6c:
f6:d2:e1:ed:c1:ba:a2:69:26:41:0f:39:1a:cc:b2:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C6:65:A7:61:4F:6B:D5:C7:AD:26:B2:E9:B6:24:0C:FD:C8:B4:FA
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:71:61:e2:1f:9b:58:7a:a5:4d:36:ad:fd:51:fe:87:09:fc:
1b:dc:c0:6c:0d:16:2a:04:dc:2d:71:b7:2c:71:46:2d:4e:53:
f2:26:60:2f:c1:47:99:52:84:11:11:82:81:6a:c9:15:12:55:
15:00:44:f1:ff:a3:c0:88:9e:c3:a8:08:64:12:e2:9f:f4:1e:
7b:ad:25:55:8a:5f:a3:21:60:d8:96:36:4b:1f:46:49:07:97:
77:95:5d:7e:b5:96:e8:64:cc:10:6e:f9:ce:b6:4f:2c:c7:fd:
fb:c1:3c:3c:3c:4b:77:7d:e7:49:e6:f8:aa:1d:16:48:d6:d5:
aa:a9:bf:4f:ed:eb:b7:ed:5e:1c:9b:b4:e2:a9:d5:bd:9f:65:
94:6f:45:2c:3f:0a:90:48:1d:cd:08:7b:1a:57:54:56:22:61:
db:dc:75:b0:53:e2:2e:aa:8f:cc:c1:7d:fb:86:b8:59:dd:d6:
e3:fb:1c:10:0b:03:2b:60:3d:c4:8c:ea:b0:7c:b9:b5:2e:ca:
d2:67:f0:20:62:52:4c:70:25:e6:2a:77:6a:8d:26:82:0b:2e:
5b:2f:9c:2a:0a:f2:28:96:90:f4:59:5d:bc:82:9b:67:68:c5:
88:54:04:53:a4:58:41:2b:55:3a:2f:c4:d3:ba:12:ab:6c:46:
8b:b1:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:01:49 2025 by rpki-client