Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
File: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft (raw, json)
Hash identifier: XtjQwE+ZJZrgmwBMPTdUjqrdIYkes9h+3SybgE8O6Qs=
Subject key identifier: 26:7B:FF:E3:4D:14:96:63:CB:F6:30:B7:CC:3A:77:B1:DF:E3:05:8C
Authority key identifier: 3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
Certificate issuer: /CN=3b778c7e0e59832527347c2e211fc48c547108cf
Certificate serial: 019749315763746A0F2C2A997F90EADE77C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
Manifest number: 055E
Signing time: Sat 07 Jun 2025 07:00:59 +0000
Manifest this update: Sat 07 Jun 2025 07:00:59 +0000
Manifest next update: Sun 08 Jun 2025 07:00:59 +0000
Files and hashes: 1: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl (hash: A8vWx/yEoroi2hasLYuHbxiuDsukM1YslPFblc2WRJU=)
2: o2x3XOFjpyXp0a8ZF3YUMEZhNmk.roa (hash: EInA3F+cdzhiSEh4Cbcxk6l2zqAf00tJgnQUKeSBqLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:57:63:74:6a:0f:2c:2a:99:7f:90:ea:de:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b778c7e0e59832527347c2e211fc48c547108cf
Validity
Not Before: Jun 7 07:00:59 2025 GMT
Not After : Jun 8 07:00:59 2025 GMT
Subject: CN=267bffe34d149663cbf630b7cc3a77b1dfe3058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:5b:2d:25:97:60:d7:62:5c:8c:62:c3:30:
99:12:3e:12:3d:f1:63:73:f1:e9:03:04:84:b9:fa:
35:74:e5:38:71:fd:26:03:e1:ee:de:7a:37:4f:76:
3f:d0:16:0c:f7:3c:3c:bd:05:e4:a6:80:8f:74:c7:
be:69:39:48:a2:96:66:c6:e3:28:a8:44:e3:11:13:
1b:11:ac:33:2b:53:0b:62:13:1d:90:72:02:ce:0b:
52:5b:3c:12:dd:b6:a9:b2:1f:be:da:08:84:2f:2b:
45:70:82:44:cf:58:71:a1:62:a9:65:4d:65:a4:b3:
76:54:a5:2e:09:7b:19:86:9d:5b:fe:9e:7f:6e:1c:
64:29:0f:6b:0e:aa:75:c8:03:d9:b8:6d:3e:1a:2c:
72:f2:16:4a:d7:bc:ae:27:b7:24:f9:9c:83:f4:c2:
a6:1a:20:52:38:77:8b:7c:13:42:af:e3:79:b0:d8:
13:81:16:13:b9:41:13:93:69:fb:bd:26:10:0e:ce:
59:55:fc:2e:36:fe:d1:0b:1b:fc:b7:b4:e7:11:72:
7a:be:71:e0:d7:06:92:03:fb:39:aa:b0:be:ae:8a:
49:64:7e:96:48:66:8c:4b:c0:e4:9f:17:d0:3e:87:
15:f4:2a:4c:1c:63:51:5a:bf:27:cc:80:be:84:c3:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7B:FF:E3:4D:14:96:63:CB:F6:30:B7:CC:3A:77:B1:DF:E3:05:8C
X509v3 Authority Key Identifier:
keyid:3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:69:53:19:2b:fe:2a:80:70:1e:cf:1d:6b:16:a2:b2:1e:8a:
51:65:e2:57:b0:56:7d:3a:b2:9f:61:2a:da:0c:71:17:ff:13:
78:1f:66:5b:26:4b:7f:f8:2a:95:d1:0f:4b:68:a6:43:dc:5e:
63:0d:6d:51:1e:c0:c2:64:b7:e7:ad:41:a2:71:98:c4:c6:eb:
48:dc:24:15:0e:99:c6:d0:c2:ca:15:e7:1c:74:48:1b:f7:48:
e4:18:57:7f:c8:18:1c:6b:60:aa:56:12:8b:6d:42:1b:f4:e5:
e0:f6:76:24:31:df:e1:1d:59:b4:7e:26:a3:e8:cb:d4:7b:a3:
73:64:b6:7e:f1:08:68:85:e4:2c:5e:ef:76:fb:57:f1:e1:79:
37:f9:fc:12:57:70:b0:30:5d:56:46:d9:a9:72:a6:9f:ad:25:
ad:67:6a:24:11:a2:d8:99:ea:24:b4:d6:ee:b8:bf:0f:a4:c3:
24:59:11:ef:5e:43:ef:89:76:c1:f5:df:89:d9:58:af:d0:72:
ab:a3:b3:b3:74:dc:0f:55:ab:ea:80:ac:bb:c9:5f:66:6b:ef:
be:2d:dd:e9:32:82:74:61:a5:51:58:b0:ee:fb:f6:c6:6c:d4:
45:63:ae:72:81:4d:2b:02:53:dd:3d:19:00:01:ad:d7:f2:e6:
16:2b:2d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:32 2025 by rpki-client