Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: 5UrIE0cB4USyxHT4O3UHtukL51rlwGa07nQwhiO9sqc=
Subject key identifier: 52:0B:F6:C2:72:3F:32:33:19:16:FC:81:6E:EB:83:56:AC:85:F7:E7
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 01974C69B1F6569E1EFDEDE913F641627DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 22:01:24 +0000
Manifest this update: Sat 07 Jun 2025 22:01:24 +0000
Manifest next update: Sun 08 Jun 2025 22:01:24 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: Ww7boa8dnj8dUReJsASWHOdYiRkJJ2hFd6U9zajI/9M=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:b1:f6:56:9e:1e:fd:ed:e9:13:f6:41:62:7d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Jun 7 22:01:24 2025 GMT
Not After : Jun 8 22:01:24 2025 GMT
Subject: CN=520bf6c2723f32331916fc816eeb8356ac85f7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:07:c8:e7:14:7b:18:55:8b:9e:cc:4e:24:
40:23:4b:ee:48:c5:68:07:fb:7a:a4:4c:c2:6e:94:
39:f7:53:ac:c1:65:9c:cd:c7:b0:e2:66:c8:f4:80:
78:c8:2d:5a:79:1a:89:5d:2e:bc:8e:71:88:bc:bd:
b5:ce:a2:9b:2a:d0:52:07:c9:46:31:06:68:f1:72:
48:21:1f:1b:6a:76:72:ce:df:c3:cf:13:20:21:a0:
b9:ba:77:06:2c:d3:df:66:9a:8f:30:1f:4e:51:92:
dd:3f:c7:78:3f:d3:b7:c2:53:d6:1f:50:48:8c:61:
40:5d:1e:f8:78:eb:68:87:29:cf:a2:21:cc:86:b9:
71:24:6d:6f:3d:ac:eb:c8:18:89:0a:5d:5a:80:5b:
d5:ce:9e:02:94:56:78:e5:f2:8f:46:9c:6b:72:f1:
ef:ab:a8:a2:e8:a8:6c:13:99:94:f6:16:ba:3e:60:
92:47:0f:65:69:10:21:8e:8f:e3:5b:28:0b:2b:1f:
99:a4:20:1d:07:65:5a:e9:bb:aa:6f:5f:c0:0e:6e:
ff:4a:0d:c8:42:76:fb:ed:61:37:2b:80:e4:bd:ae:
0e:3c:81:4e:6b:fd:eb:ca:2d:61:88:07:a8:b7:50:
ff:c5:3e:2e:4b:ee:95:d9:28:9a:cc:51:a8:54:8c:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0B:F6:C2:72:3F:32:33:19:16:FC:81:6E:EB:83:56:AC:85:F7:E7
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:79:3c:8b:73:bc:26:71:cb:a5:90:b8:31:4f:b5:67:47:
50:d8:b3:f5:20:5f:85:e6:f7:8e:5f:98:58:e3:78:e3:ac:b7:
76:1d:a1:cf:1c:3e:f2:bc:ce:8b:59:b1:ad:f3:3c:fb:aa:d2:
17:b2:fa:28:67:39:50:38:35:6d:ec:93:6e:98:1c:8e:b3:e8:
7c:48:12:e6:05:07:aa:ea:5d:d2:63:74:24:2a:96:90:93:14:
cf:52:54:4b:d7:ab:c9:38:9b:41:0e:77:79:3d:c6:48:63:8d:
60:18:12:c6:32:d6:5f:78:b6:39:db:cd:ce:ff:60:e3:7f:94:
a1:62:ca:62:de:37:5b:37:57:81:36:27:5b:2b:c4:f8:c3:0e:
f5:e0:dd:5f:46:36:53:18:5c:52:08:06:ba:6e:91:75:ce:2d:
c2:2b:e0:bd:35:51:54:f0:b3:b7:4b:44:1a:a5:a4:89:c0:61:
a8:f1:89:1b:86:b3:f8:ee:5f:d6:94:8a:62:37:fb:3e:66:fa:
04:95:37:dd:57:e7:c3:e9:a3:2f:e6:f5:10:ff:ff:49:85:78:
c9:5c:05:ae:bb:3d:76:97:e2:4d:a0:1e:0f:d7:e0:92:70:49:
d9:56:37:8e:83:2a:3d:10:b1:84:09:3a:37:eb:df:12:0e:6f:
b1:a4:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:57:05 2025 by rpki-client