Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier: kXg+uD7j1HbbRaUdIOEYucDX18guwN3l4cA2bquU+iE=
Subject key identifier: 3A:11:61:ED:10:E2:A8:FF:0E:02:3E:A6:23:12:D9:1C:39:13:2F:0D
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 01974EFBF4E8B4F260FA4C14331992430185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number: 095B
Signing time: Sun 08 Jun 2025 10:00:24 +0000
Manifest this update: Sun 08 Jun 2025 10:00:24 +0000
Manifest next update: Mon 09 Jun 2025 10:00:24 +0000
Files and hashes: 1: PjUaY1pzv5i9v0-_ltmeXMvn_E8.roa (hash: 5l/O42PBuCxXNh+SRi17b1mrEEDB7Yq2rN5qBu2/Ncg=)
2: PttuSfjxa79MH7rLTOnjgReDQvw.roa (hash: AT0RYNQBGnwCZ5SCURqKkKKbeaLJOuOT7slKjRXHVFY=)
3: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=)
4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: 2/gm+bx0mNZT7rH2u8vkGbQpWpORpsqcR20Z7oL9Bec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fb:f4:e8:b4:f2:60:fa:4c:14:33:19:92:43:01:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Jun 8 10:00:24 2025 GMT
Not After : Jun 9 10:00:24 2025 GMT
Subject: CN=3a1161ed10e2a8ff0e023ea62312d91c39132f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:e3:14:94:af:5d:22:55:b4:eb:32:2b:74:
a0:26:33:88:44:fc:2c:70:ff:e8:50:69:8d:f0:c2:
60:7e:b5:38:8c:68:d6:71:40:8b:b5:ce:b2:8b:ae:
f6:56:6e:15:76:eb:b2:26:c3:25:df:d2:ec:6c:50:
5f:c0:b4:43:40:8c:37:08:ac:ca:aa:62:a8:4b:cf:
7d:58:7d:6b:b9:9a:07:2c:35:e4:e2:67:06:16:df:
7e:7f:e0:8c:6a:72:6d:7f:e4:6f:05:d6:90:00:f8:
e6:04:a1:ff:13:13:ac:49:13:32:8b:25:8d:2e:f8:
38:7f:52:95:b3:58:54:98:e8:c4:77:a6:e4:86:24:
49:f0:be:f8:07:59:ff:2e:94:0a:55:46:0b:63:f5:
75:00:82:53:fa:40:94:0e:af:da:97:fa:cc:63:c1:
0d:ec:2c:a3:c2:e3:bc:2f:b6:5f:b0:83:0f:41:a7:
b3:fa:f0:5e:34:42:49:d9:8b:25:2d:6d:10:93:2e:
b3:0a:84:e6:83:ec:c9:4d:46:d3:93:c5:af:e5:2b:
04:bc:6e:32:1c:f5:3d:0a:89:b4:5e:64:c4:15:2d:
aa:c8:63:24:73:18:86:8b:ac:d3:81:9a:eb:f5:bf:
4b:49:68:4a:60:48:a0:69:bc:47:d5:b9:bb:cc:71:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:11:61:ED:10:E2:A8:FF:0E:02:3E:A6:23:12:D9:1C:39:13:2F:0D
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2f:f8:7e:2d:9d:bd:86:ae:a2:ce:01:50:c3:bf:e8:4c:fd:
e0:73:b8:98:4f:18:87:32:87:09:32:8d:1e:12:89:66:7c:43:
f6:fe:50:38:ff:ed:0e:b6:35:00:42:32:02:9c:59:41:8e:d9:
5d:af:1b:5d:c3:3d:81:d3:04:e7:f0:74:02:a6:b0:d8:29:4d:
30:14:ca:cf:56:29:d5:2b:d0:d9:8f:f7:d0:45:d1:c4:15:b3:
7f:1a:00:ac:8c:48:b2:4b:a0:38:66:f1:98:2f:dc:7d:83:2b:
40:01:02:ee:47:c7:c8:75:a1:9d:8c:60:88:18:88:4f:d8:a0:
69:99:b4:50:10:f4:83:00:12:dd:f2:a8:71:99:d1:d4:c0:78:
ff:5d:05:e8:58:b4:d9:1f:44:c7:de:db:f1:41:a4:78:ea:ce:
9a:e1:64:8b:28:97:10:a4:49:7f:2b:73:6a:69:45:1e:70:83:
3e:40:77:f0:65:6a:90:d3:6f:b7:d9:1b:b4:24:46:5b:e8:b8:
47:87:4f:ce:98:41:86:4c:93:ae:03:24:48:d6:bf:8c:15:81:
e5:77:ef:26:f8:12:ec:44:97:ed:ff:75:a7:e4:8e:ca:3d:74:
46:6c:22:36:9e:8a:86:24:1c:bb:57:33:bd:ec:63:72:eb:98:
d9:a6:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:56:56 2025 by rpki-client