Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier: VhdUF0+loeBvFJuxrLQeaJYynKD28Azp6jHVuZak4YY=
Subject key identifier: 7F:AC:05:C1:E6:C7:F4:5E:56:56:E1:F1:6D:1E:0B:BA:0F:79:65:B3
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 01974C695D6508BCAA0374CF62DD7CAB12F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number: 12CD
Signing time: Sat 07 Jun 2025 22:01:02 +0000
Manifest this update: Sat 07 Jun 2025 22:01:02 +0000
Manifest next update: Sun 08 Jun 2025 22:01:02 +0000
Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: NJ6+x0/rqI0KqqQN/pFO1nx+1QTvoKtESEH/EnGfbM8=)
2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:5d:65:08:bc:aa:03:74:cf:62:dd:7c:ab:12:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Jun 7 22:01:02 2025 GMT
Not After : Jun 8 22:01:02 2025 GMT
Subject: CN=7fac05c1e6c7f45e5656e1f16d1e0bba0f7965b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:e2:c3:1e:d0:51:21:8d:2e:50:1c:64:b9:
9d:98:b4:fb:2e:5e:c1:9a:a6:b3:90:36:d6:aa:9c:
d0:1b:d0:c5:49:8c:7f:15:35:3f:2f:bd:bd:71:fd:
68:8a:0c:4d:1d:9d:c6:83:bd:d2:03:27:c2:c8:e7:
b3:91:52:f3:4e:ea:9c:bb:d9:1b:2f:fa:45:6b:62:
d4:62:e8:90:da:d1:cb:f1:80:95:f7:1e:83:9a:a1:
0c:d0:d5:ca:35:3a:5b:09:62:e7:0b:8b:a0:4b:d7:
5c:f1:94:54:1e:46:5c:6f:ad:34:f4:f5:92:08:77:
5d:6d:d5:05:b0:e1:b1:e4:63:01:fb:d0:5c:50:09:
1a:a6:8d:d7:c2:a8:e5:e2:e7:0e:6c:69:92:77:1c:
fd:b2:ec:81:11:0a:29:4d:98:ad:4c:5e:14:db:02:
6c:99:7b:2a:91:8b:fb:a6:b6:e0:24:09:77:05:2b:
be:92:44:e0:23:41:9f:7d:4c:22:36:69:0b:d7:95:
d6:45:22:ef:d7:b5:56:ca:9b:f4:cd:a4:18:c9:2c:
cd:ab:56:c1:cc:c1:e6:38:d1:ed:23:4c:59:62:31:
a3:32:78:e9:38:f9:79:0f:1d:3a:c5:dc:3a:f1:84:
75:85:f6:38:19:fe:d6:11:83:24:cb:c2:35:89:53:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AC:05:C1:E6:C7:F4:5E:56:56:E1:F1:6D:1E:0B:BA:0F:79:65:B3
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d4:e1:e2:b2:f2:16:60:f3:0d:67:8d:2f:db:45:00:c5:53:
66:f2:1f:6d:5c:b7:ac:4f:ad:77:43:25:1e:58:58:77:66:71:
82:2e:12:8f:5e:bd:86:65:a5:e8:fa:97:d6:36:96:1e:52:86:
5e:8e:2c:14:51:eb:a6:a7:aa:b1:7a:c5:b0:97:a6:c9:da:e2:
11:b3:9f:9e:2f:15:40:be:52:b7:0d:df:7a:44:27:1a:c0:0d:
b5:86:0e:61:69:00:4d:68:7c:ab:e9:88:1e:75:c7:f8:57:8f:
12:2c:4d:12:ae:1d:30:a2:bd:bb:f2:52:ca:86:3e:98:c2:82:
76:e0:04:38:0e:56:b5:f6:d9:59:ab:0d:8c:98:1b:fe:aa:a6:
75:dd:0f:1d:fd:34:d1:71:04:32:68:b1:52:bd:1f:88:7b:02:
73:03:d5:d9:35:e9:ae:18:44:59:21:12:80:48:b2:dc:18:be:
35:9b:0e:1d:0d:10:9a:7c:43:ca:7d:15:a6:36:6e:65:9a:94:
9b:0e:1b:77:d8:32:6d:a4:a4:61:75:6c:ec:77:13:02:75:1f:
04:bb:46:f8:ea:44:2d:65:1c:5d:3f:fb:a4:f0:ce:29:f8:86:
0d:ed:25:e8:5d:7c:b3:9d:54:19:27:6e:ea:96:6a:0a:76:dd:
f9:3a:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:45 2025 by rpki-client