Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json)
Hash identifier: 69Puv44F2L4iNm7ekS7Vx/bMsTHasVxcdVpb5TaLoF0=
Subject key identifier: AD:A4:D0:2A:81:FA:F0:11:AD:34:89:2C:71:ED:B9:6F:AA:EB:A9:B6
Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Certificate serial: 01974AE8A9ED6BA992DEF3E400CA2456B1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 15:00:51 +0000
Manifest this update: Sat 07 Jun 2025 15:00:51 +0000
Manifest next update: Sun 08 Jun 2025 15:00:51 +0000
Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: 6mxV1cOgiUdb6i4IyhTJjEKpW00Z4b5Rc8vnM68jWUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:a9:ed:6b:a9:92:de:f3:e4:00:ca:24:56:b1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Validity
Not Before: Jun 7 15:00:51 2025 GMT
Not After : Jun 8 15:00:51 2025 GMT
Subject: CN=ada4d02a81faf011ad34892c71edb96faaeba9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:20:0c:88:de:99:9b:9c:bd:71:e8:2c:51:
42:e2:6f:32:ba:1d:7a:4b:75:82:0a:0f:e8:90:11:
89:e6:40:e2:5e:90:81:0c:81:6a:31:7f:c2:15:b8:
a6:1b:31:0c:3f:87:9d:93:66:6a:c7:b6:55:ae:04:
4c:c7:95:8a:a5:dc:c3:3e:08:20:44:ed:1d:b3:ca:
77:78:3f:49:27:bd:73:1a:b2:0f:8a:a1:8f:f3:65:
26:99:35:e1:19:4c:1d:53:1f:a2:ef:e6:41:72:68:
8a:6d:2f:97:d5:bb:5c:b5:8f:79:70:f7:a2:e5:69:
fb:82:3d:2b:59:ec:e8:bf:ea:4b:6a:4f:7d:e1:60:
f2:8d:f1:63:b8:90:77:4d:69:f6:40:21:42:d4:09:
a8:f9:3e:36:5e:25:8c:06:92:d6:32:a9:58:25:48:
d0:13:c9:b5:3c:94:a6:3b:00:4e:e7:5a:2a:5c:ba:
6f:67:68:56:2a:f2:8c:ae:b7:bb:df:f3:e6:14:9d:
e2:1b:bd:34:89:18:48:af:f7:2b:c9:c7:93:59:c8:
52:36:13:d1:46:df:b0:45:a0:17:55:bc:38:88:54:
32:49:76:47:56:72:c7:d5:a6:7f:c1:71:d7:db:42:
f7:9a:8b:29:9f:f4:dc:a8:13:7a:e0:f6:20:86:89:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A4:D0:2A:81:FA:F0:11:AD:34:89:2C:71:ED:B9:6F:AA:EB:A9:B6
X509v3 Authority Key Identifier:
keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e0:ea:5b:9b:a9:ab:a8:39:27:96:f6:67:8e:c9:ef:81:b9:
f4:dd:95:51:96:89:a1:38:f9:e2:04:c2:71:41:69:03:28:57:
fa:62:3c:d8:b6:63:0a:f6:a0:28:03:9e:4e:6a:ee:7a:07:b0:
a8:c9:70:27:80:1e:80:93:fe:58:97:9d:f3:3e:c2:a1:c8:e9:
97:93:fe:03:d8:f4:26:bb:ce:3e:9d:89:22:c4:d4:e4:1c:9d:
b0:84:62:dc:d8:99:75:94:7a:a8:8a:82:f4:fa:85:6a:fa:16:
49:fd:92:16:24:60:1a:f9:06:b7:ab:f5:06:10:f0:b2:b6:8c:
4b:c6:43:00:a5:e9:5d:53:bb:e3:b0:a1:dd:e9:44:da:8c:58:
26:ce:38:18:69:69:4d:38:d7:fb:2d:ff:ba:9f:f0:c0:48:94:
96:63:a2:c8:8d:ae:8a:e7:62:0a:47:21:35:fe:42:81:f3:c4:
54:e6:ca:b6:33:4d:26:1d:f9:4e:01:41:f3:c3:1f:e0:8c:9a:
93:96:ee:e0:21:d4:07:55:43:c0:75:ba:dd:d0:48:cf:67:08:
8e:2e:9e:e2:b3:6a:9d:4e:35:8d:b2:82:ab:fe:17:f2:1b:f8:
d9:a8:3c:05:19:7d:40:a1:71:7a:e3:35:51:55:75:bd:82:7e:
e6:57:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:03:17 2025 by rpki-client