Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: UVQlOiAm8ztoR1bbWoKvGJm3m8J+MwJVSOxo7JURxQg=
Subject key identifier: 69:53:08:90:D6:51:7F:EA:6E:83:FA:68:76:1F:95:EA:EE:1B:E6:CC
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 0197507CFD956F6A34623956E1C1C6B3B927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0C17
Signing time: Sun 08 Jun 2025 17:00:58 +0000
Manifest this update: Sun 08 Jun 2025 17:00:58 +0000
Manifest next update: Mon 09 Jun 2025 17:00:58 +0000
Files and hashes: 1: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: +MemU7p+fmcgql4xiWcva/iC0c0+4rCbyPigFD42SPM=)
2: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (hash: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:fd:95:6f:6a:34:62:39:56:e1:c1:c6:b3:b9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Jun 8 17:00:58 2025 GMT
Not After : Jun 9 17:00:58 2025 GMT
Subject: CN=69530890d6517fea6e83fa68761f95eaee1be6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:b6:b7:fd:8e:15:1c:26:59:98:70:9f:91:
bf:b3:ef:01:50:4f:56:8e:a4:68:3f:ab:0b:cf:dc:
94:af:9b:fd:86:2d:86:0c:e6:42:14:36:54:ef:b1:
f7:6f:c4:90:b7:c7:7c:e0:39:dd:ac:a6:a2:75:b4:
01:32:17:12:08:24:49:71:da:d4:19:19:9b:1c:85:
4f:44:e0:62:55:ca:56:21:a1:9e:a7:f5:d8:e2:17:
af:b4:fb:67:cb:49:f7:ba:5e:c0:1b:80:d1:34:7b:
6d:0e:17:a0:82:e1:ed:27:2a:b5:16:38:6f:94:f4:
e4:99:8b:22:6e:7a:40:7a:37:9c:ba:93:9c:b3:1f:
81:f6:96:e5:10:cd:e4:cc:9f:e9:fb:fc:bb:65:86:
d4:c0:d8:1e:66:46:a5:f5:d6:d5:7d:24:35:a3:70:
95:bd:a9:75:c4:a9:16:23:e1:8b:ac:db:d1:51:fe:
73:8d:c3:8a:7c:30:99:c7:7f:fa:f6:9b:e5:6b:c2:
77:b6:f8:55:fd:a5:02:38:55:99:75:2d:ff:ac:40:
6b:e5:71:d5:a9:cb:cc:d7:70:57:96:30:ac:d7:0f:
30:c3:75:26:7d:7b:96:9a:b0:38:83:91:56:57:4c:
41:c7:6b:90:9c:57:bf:e6:1e:71:8c:2f:ae:3f:19:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:08:90:D6:51:7F:EA:6E:83:FA:68:76:1F:95:EA:EE:1B:E6:CC
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1e:95:f1:92:31:fd:4a:bf:cd:f7:44:19:a3:7c:08:ba:82:
51:5d:e4:c6:76:68:a1:29:ad:85:60:5e:46:2f:87:b5:81:0e:
c4:f3:4a:5f:be:9a:f5:a7:ba:a1:ce:5c:57:b0:6a:aa:12:e6:
ff:3c:f8:6c:f2:6c:45:f6:09:5d:d0:7d:70:47:33:30:f2:dd:
ad:90:b3:6b:1d:e6:bc:60:1b:bc:fc:19:93:8b:3a:ea:08:40:
9d:d8:00:9a:3a:1b:85:99:7f:b7:0e:ca:11:66:6d:ee:3a:79:
ed:8b:78:9f:f2:49:83:50:d8:af:6b:28:46:bb:82:97:a3:bf:
b0:71:52:50:f7:4e:c7:84:59:bd:0a:c7:67:6f:6a:89:04:3e:
96:50:ea:73:f1:79:2b:96:81:01:7a:e6:32:29:c2:82:f1:67:
06:c3:af:38:6e:44:a9:be:7a:37:1a:96:b0:79:a7:db:a7:bb:
09:db:ee:3d:9b:4f:fe:7f:c9:a6:a0:ef:2f:c0:27:1a:8d:98:
48:cb:cd:7e:58:77:f9:65:c7:30:f9:aa:13:43:8f:91:ab:80:
c9:4d:0f:a5:0b:42:fa:79:f5:65:c0:a9:39:6a:c2:50:51:e3:
ee:2b:39:47:1a:06:d1:e3:0a:7b:f4:91:06:e5:07:fb:96:97:
f3:2a:ea:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:35 2025 by rpki-client