Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File: C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier: +q/EHG2TWcwiQYdWgEx+y1QoKFuGt6vrGpMchRCGx8s=
Subject key identifier: B2:78:BA:83:4C:D9:D9:6D:EE:DA:A5:39:90:53:7C:0A:A4:EB:90:E1
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer: /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial: 01975045D03FA7F1A9782F05FC7C75DDC049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number: 0506
Signing time: Sun 08 Jun 2025 16:00:41 +0000
Manifest this update: Sun 08 Jun 2025 16:00:41 +0000
Manifest next update: Mon 09 Jun 2025 16:00:41 +0000
Files and hashes: 1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: yr5eRIpQLrPi8aEmtiotgFVX+4Ctx6cNt2QlktCgOLY=)
2: UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa (hash: 4U1yrHFJUucJ8q4Do7bByqlbkCfcvDVqW8/VtgVvyc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:d0:3f:a7:f1:a9:78:2f:05:fc:7c:75:dd:c0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Validity
Not Before: Jun 8 16:00:41 2025 GMT
Not After : Jun 9 16:00:41 2025 GMT
Subject: CN=b278ba834cd9d96deedaa53990537c0aa4eb90e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:bb:74:2e:5a:a0:2f:d1:90:25:8d:25:6e:
55:7c:0e:52:25:1e:e9:73:3d:c3:17:aa:fa:3e:09:
9c:51:39:c9:34:25:df:8b:a3:06:fc:6b:61:53:4a:
c2:ca:3c:96:62:62:2a:e9:d4:6e:0b:1c:81:73:57:
e3:a5:0c:51:e7:2d:89:ed:34:d0:e8:d5:ee:bd:63:
e4:05:cb:f2:e1:d8:79:8c:20:6c:7f:2e:31:3c:cb:
13:3f:a1:e4:8e:bb:9d:be:8e:87:ad:d6:79:24:5f:
22:dc:a8:67:a6:9a:f8:b3:92:f4:01:51:4f:bd:1e:
e0:86:63:49:81:bd:a7:26:9a:0a:63:98:b5:fa:e9:
a3:ce:8f:d5:d0:4f:c0:35:ce:2b:98:6c:f0:f2:21:
3d:00:bb:f3:e7:23:d7:30:01:9e:6a:b3:51:b1:eb:
79:11:3d:c4:29:ed:ff:88:b2:a2:c8:ab:51:d4:98:
f9:68:11:f6:c3:bf:93:b0:8f:31:86:93:70:45:fc:
60:07:f0:92:78:29:52:f3:b2:30:7b:5f:99:22:64:
27:ee:78:f3:e8:e2:50:99:7f:f0:a8:04:4a:9a:7f:
53:4a:ea:b8:e4:9d:a0:ec:af:5f:20:4c:ca:50:31:
bb:67:ea:09:96:e0:7c:87:37:37:c2:2c:92:c1:e3:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:78:BA:83:4C:D9:D9:6D:EE:DA:A5:39:90:53:7C:0A:A4:EB:90:E1
X509v3 Authority Key Identifier:
keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ea:bd:34:16:fe:9a:fd:96:c9:bc:cb:37:bf:fa:ac:19:db:
68:63:e1:ca:4b:dd:cc:a4:b3:f6:a5:b3:72:51:51:23:bf:c9:
f4:a5:c7:b0:2a:3c:54:3e:3e:47:30:1f:cd:76:60:ca:72:d0:
32:e8:c1:18:37:fe:01:de:a4:e8:f4:92:4b:1b:ae:6a:e1:97:
2c:e9:3c:ae:7e:47:47:a4:c0:a3:70:f4:58:6b:96:21:ef:72:
6d:64:b0:98:d4:b0:ba:ae:43:c6:1c:15:9f:f0:c0:c6:8f:62:
89:fb:90:3f:a5:f7:8f:b2:d3:3e:f0:bb:ef:75:d0:6e:e0:5d:
58:3a:ec:6e:e3:0a:37:98:e5:51:84:2b:94:3c:ae:f6:2d:eb:
79:06:74:2c:02:c7:dd:40:99:bc:1f:1c:31:0f:bc:e7:e7:d7:
56:ae:80:a7:79:da:d8:30:46:bc:97:d5:09:7a:3e:e8:3f:aa:
3d:72:18:f4:eb:87:ba:d9:91:ea:96:8e:f9:91:91:69:3f:88:
08:d8:0a:dd:d0:09:fc:5b:83:63:ca:6a:3b:89:21:41:24:6b:
bc:aa:ae:27:f7:6e:ba:d5:81:36:ec:83:c7:88:bd:88:92:4e:
4a:a7:5d:45:05:d9:9e:c3:7b:77:f4:c7:e3:d9:89:18:55:46:
83:46:3b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:42:53 2025 by rpki-client