Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File: o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier: yZtOXRpeQfVecnAZkLkWoOYtZBaaUBJWAHppTWcKY3A=
Subject key identifier: DB:E1:EC:E3:06:BB:4E:64:14:E5:A1:B8:93:BD:CB:A3:BE:69:6F:EA
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer: /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial: 01975A249D36C898F211E9CAB61CA75A2D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number: 14C7
Signing time: Tue 10 Jun 2025 14:00:38 +0000
Manifest this update: Tue 10 Jun 2025 14:00:38 +0000
Manifest next update: Wed 11 Jun 2025 14:00:38 +0000
Files and hashes: 1: 8M6EvOOueKa7PM6SUMWysNV1P1E.roa (hash: tXy3k1V6q4E+Xjy/ypSFyuA9ZzVHmCAzqLsaHasRW9o=)
2: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: yjVbX/B7EHykOV3hhIwSDE87r2s6GAtZeokrpAnqOsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:9d:36:c8:98:f2:11:e9:ca:b6:1c:a7:5a:2d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Validity
Not Before: Jun 10 14:00:38 2025 GMT
Not After : Jun 11 14:00:38 2025 GMT
Subject: CN=dbe1ece306bb4e6414e5a1b893bdcba3be696fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:5a:d2:f6:09:4f:70:7f:5f:12:83:c1:36:
5e:fd:78:85:9b:fe:dd:ac:e8:ff:c0:3b:94:d3:10:
d2:b7:60:61:51:c8:64:3b:7d:e4:1e:55:03:ec:d4:
84:c6:b9:01:cf:37:6c:50:ef:6e:7c:97:4c:ee:03:
f1:82:27:b0:24:43:d5:2a:38:ed:63:79:e1:ef:cf:
de:b9:65:2e:d2:7f:8b:b2:95:2d:07:5e:b9:d2:5a:
73:18:fb:9f:b8:c9:e0:d5:b4:4d:c2:f1:cf:89:3e:
e2:9a:25:37:3c:33:dc:4f:11:10:91:c8:b9:b4:2e:
57:6f:29:8d:fd:75:e2:1a:a8:c2:00:2f:15:23:fb:
72:2c:0a:5c:9c:c3:fd:8d:a5:d0:58:c6:2d:22:37:
24:42:4e:78:1d:10:f5:c4:99:e7:11:89:f4:1c:eb:
c7:5b:76:2c:58:0d:c7:c9:b1:ea:33:b3:cf:ae:6e:
20:5a:df:6e:43:0b:4f:25:d5:a0:98:ee:c9:83:b0:
b6:ef:94:21:1f:b2:2a:80:fa:c0:c0:1d:79:11:97:
74:28:d4:08:48:f4:38:bc:dd:a0:eb:f8:d7:20:94:
00:8e:07:29:0a:28:51:0d:0f:d1:2d:64:a2:d4:4d:
c8:98:cb:9b:0d:bf:f8:eb:c1:b6:2f:d7:06:96:03:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:EC:E3:06:BB:4E:64:14:E5:A1:B8:93:BD:CB:A3:BE:69:6F:EA
X509v3 Authority Key Identifier:
keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9c:cb:87:3c:f8:71:d9:2a:37:50:88:18:dd:db:1b:c9:51:
78:87:00:4a:57:58:39:6c:20:15:e5:c6:5b:fd:1c:3f:83:ba:
56:07:7e:29:a6:5a:f5:fc:45:44:7f:77:1e:60:bb:25:65:79:
92:70:dd:81:aa:8f:f6:b9:60:62:06:33:89:59:90:0c:8f:72:
4d:c3:b4:b9:8e:41:59:c8:dc:e7:85:e7:db:d8:e8:50:eb:37:
e8:f4:c4:03:64:54:fc:42:00:22:75:b4:b9:cb:63:97:19:28:
52:81:15:03:cb:04:5d:41:65:2b:3d:15:0b:69:dc:1d:d8:d5:
63:6b:54:10:ad:49:22:77:33:e1:47:12:bf:84:98:ae:97:8e:
d8:83:d4:3f:7e:51:9b:38:c5:a1:83:12:9d:58:db:d5:29:70:
e1:cc:e0:3a:c9:e7:93:71:b2:3c:c5:ca:d5:3d:e6:04:ad:65:
1d:08:f6:ea:f7:20:0f:74:54:9d:12:44:56:14:a0:f9:7e:e2:
24:26:8b:e6:29:83:1b:ea:3d:47:6d:cc:67:89:72:02:57:08:
f5:f1:5e:b6:8a:e4:61:40:76:15:3e:1f:75:d6:16:ef:20:ec:
b0:80:c4:12:44:98:d6:e7:b5:a8:3a:61:3a:e1:6e:3b:45:06:
f5:e1:6a:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaJJ02yJjyEenKthynWi0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNGYzNjVlNzgwNjRiNThjNDRkNDhjZmIzOTI5MWQzZmIx
ZDllMTAwHhcNMjUwNjEwMTQwMDM4WhcNMjUwNjExMTQwMDM4WjAzMTEwLwYDVQQD
EyhkYmUxZWNlMzA2YmI0ZTY0MTRlNWExYjg5M2JkY2JhM2JlNjk2ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksha0vYJT3B/XxKDwTZe/XiFm/7d
rOj/wDuU0xDSt2BhUchkO33kHlUD7NSExrkBzzdsUO9ufJdM7gPxgiewJEPVKjjt
Y3nh78/euWUu0n+LspUtB1650lpzGPufuMng1bRNwvHPiT7imiU3PDPcTxEQkci5
tC5XbymN/XXiGqjCAC8VI/tyLApcnMP9jaXQWMYtIjckQk54HRD1xJnnEYn0HOvH
W3YsWA3HybHqM7PPrm4gWt9uQwtPJdWgmO7Jg7C275QhH7IqgPrAwB15EZd0KNQI
SPQ4vN2g6/jXIJQAjgcpCihRDQ/RLWSi1E3ImMubDb/468G2L9cGlgMGFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvh7OMGu05kFOWhuJO9y6O+aW/qMB8GA1UdIwQY
MBaAFKNPNl54BktYxE1Iz7OSkdP7HZ4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzA4MlhuZ0dTMWpFVFVqUHM1S1IwX3NkbmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZWU3YzUtMTI2NC00N2U5LThhMTIt
MDQxYjc4YWRhMjE1LzEvbzA4MlhuZ0dTMWpFVFVqUHM1S1IwX3NkbmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zZWU3YzUtMTI2NC00N2U5LThhMTItMDQxYjc4YWRhMjE1
LzEvbzA4MlhuZ0dTMWpFVFVqUHM1S1IwX3NkbmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpzLhzz4
cdkqN1CIGN3bG8lReIcASldYOWwgFeXGW/0cP4O6Vgd+KaZa9fxFRH93HmC7JWV5
knDdgaqP9rlgYgYziVmQDI9yTcO0uY5BWcjc54Xn29joUOs36PTEA2RU/EIAInW0
uctjlxkoUoEVA8sEXUFlKz0VC2ncHdjVY2tUEK1JIncz4UcSv4SYrpeO2IPUP35R
mzjFoYMSnVjb1Slw4czgOsnnk3GyPMXK1T3mBK1lHQj26vcgD3RUnRJEVhSg+X7i
JCaL5imDG+o9R23MZ4lyAlcI9fFetorkYUB2FT4fddYW7yDssIDEEkSY1ue1qDph
OuFuO0UG9eFqOg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:14:23 2025 by rpki-client