Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: KcedZD34tif07dlI/9Dxf60ODiN2kcaBRUbMU77B0Os=
Subject key identifier: 99:23:34:0F:E7:13:F4:FD:50:51:BA:9C:F7:1C:AC:83:DF:AD:31:E6
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 019649D81604B0938BD97C0748BE00F95701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0B8F
Signing time: Fri 18 Apr 2025 17:00:20 +0000
Manifest this update: Fri 18 Apr 2025 17:00:20 +0000
Manifest next update: Sat 19 Apr 2025 17:00:20 +0000
Files and hashes: 1: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: cQjwOXddQS2gItiCPA/uAHd31QSzuQ5cxJiNQsUChzM=)
2: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (hash: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:16:04:b0:93:8b:d9:7c:07:48:be:00:f9:57:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Apr 18 17:00:20 2025 GMT
Not After : Apr 19 17:00:20 2025 GMT
Subject: CN=9923340fe713f4fd5051ba9cf71cac83dfad31e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:6f:f5:3d:6e:43:e8:06:21:74:e3:a0:34:
84:ae:13:e9:cb:6e:38:2e:cd:ca:4a:2b:ed:e1:d3:
ee:d6:0d:af:b1:73:3e:ab:64:2c:da:73:3a:12:84:
77:1b:f1:e7:45:1d:33:a0:45:77:fe:89:f1:d5:03:
e7:05:69:cf:ea:00:2c:d8:c8:24:44:e9:31:70:09:
1b:7e:40:15:cb:13:c9:3e:aa:8b:e8:cc:d2:4f:47:
7a:fe:c0:f8:04:04:74:0e:88:7f:44:6b:52:5f:a7:
07:0d:f9:76:72:9c:c6:98:d7:6e:8e:52:21:d8:86:
7a:b7:c2:4c:76:72:aa:b3:72:65:7b:12:f5:02:1c:
cc:01:1a:7a:03:29:82:ef:db:b6:42:ec:9a:01:c2:
a2:f7:32:18:5b:73:4a:91:26:11:e5:78:90:54:91:
fd:3e:12:cc:92:da:ce:f1:b2:cf:80:d0:18:e2:63:
46:7f:06:fa:b1:9a:39:55:d6:0a:5c:5d:a6:97:65:
71:72:3b:44:e2:03:26:2a:f1:d2:58:de:94:19:52:
39:7d:7f:3c:32:cc:f0:e7:57:95:de:39:0b:7f:81:
27:ae:12:06:72:50:92:4b:c1:58:03:bb:33:87:aa:
37:f2:ec:9d:53:f4:64:76:99:c7:de:03:55:87:23:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:23:34:0F:E7:13:F4:FD:50:51:BA:9C:F7:1C:AC:83:DF:AD:31:E6
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:59:2d:95:e7:a7:ff:bd:d8:76:40:80:e5:d0:7d:fd:08:d7:
bf:c4:32:ec:db:27:1a:fe:66:05:27:a7:6b:0b:bf:6b:b9:79:
08:23:b8:57:81:2b:6c:00:70:b1:87:f6:29:4a:4c:e9:31:6c:
57:6b:dd:44:bf:90:50:d5:9f:4e:11:b6:5b:57:e9:f7:3a:6f:
88:0e:59:e2:f1:03:3d:93:01:22:c7:55:85:24:56:e7:3e:97:
36:35:5a:b1:60:45:10:f0:4a:a8:3e:fc:46:41:e4:fc:2f:87:
1a:3b:00:b8:1d:a7:a2:20:5f:bb:03:34:37:08:ff:37:57:1f:
6a:bb:9c:f2:ab:90:c5:7d:35:4a:fc:ef:ff:47:e7:a7:d6:68:
15:bd:b9:0d:82:fc:5f:77:e7:64:8f:05:82:ee:64:57:51:0a:
8b:ab:60:34:05:0a:3f:07:2b:72:33:48:d0:ea:f1:f9:57:c1:
6c:e5:24:94:8f:92:42:a2:04:a3:93:7e:e1:d4:15:63:0f:79:
2e:c8:41:50:62:81:4a:3f:12:19:22:e7:cd:44:e7:b0:34:ee:
bc:9c:63:e4:c9:ec:2f:a6:98:8f:b0:80:58:22:3f:b7:27:ae:
c4:95:fd:ab:23:f7:a3:08:ba:8b:ee:82:46:69:b6:a2:94:ef:
35:a4:03:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJ2BYEsJOL2XwHSL4A+VcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2NkYjBkYjdjZjQ2NjRlY2M3ZGJkZDE4MDFjODdjZTBk
ODQ3Y2YwHhcNMjUwNDE4MTcwMDIwWhcNMjUwNDE5MTcwMDIwWjAzMTEwLwYDVQQD
Eyg5OTIzMzQwZmU3MTNmNGZkNTA1MWJhOWNmNzFjYWM4M2RmYWQzMWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+lv9T1uQ+gGIXTjoDSErhPpy244
Ls3KSivt4dPu1g2vsXM+q2Qs2nM6EoR3G/HnRR0zoEV3/onx1QPnBWnP6gAs2Mgk
ROkxcAkbfkAVyxPJPqqL6MzST0d6/sD4BAR0Doh/RGtSX6cHDfl2cpzGmNdujlIh
2IZ6t8JMdnKqs3JlexL1AhzMARp6AymC79u2QuyaAcKi9zIYW3NKkSYR5XiQVJH9
PhLMktrO8bLPgNAY4mNGfwb6sZo5VdYKXF2ml2VxcjtE4gMmKvHSWN6UGVI5fX88
Mszw51eV3jkLf4EnrhIGclCSS8FYA7szh6o38uydU/RkdpnH3gNVhyOBHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkjNA/nE/T9UFG6nPccrIPfrTHmMB8GA1UdIwQY
MBaAFDvM2w23z0Zk7Mfb3RgByHzg2EfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQt
YzRkOWJlMTM3ZWVhLzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQtYzRkOWJlMTM3ZWVh
LzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFktleen
/73YdkCA5dB9/QjXv8Qy7NsnGv5mBSenawu/a7l5CCO4V4ErbABwsYf2KUpM6TFs
V2vdRL+QUNWfThG2W1fp9zpviA5Z4vEDPZMBIsdVhSRW5z6XNjVasWBFEPBKqD78
RkHk/C+HGjsAuB2noiBfuwM0Nwj/N1cfaruc8quQxX01Svzv/0fnp9ZoFb25DYL8
X3fnZI8Fgu5kV1EKi6tgNAUKPwcrcjNI0Orx+VfBbOUklI+SQqIEo5N+4dQVYw95
LshBUGKBSj8SGSLnzUTnsDTuvJxj5MnsL6aYj7CAWCI/tyeuxJX9qyP3owi6i+6C
Rmm2opTvNaQDww==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:38:57 2025 by rpki-client