Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: NJ+6wuJwDIHsUtblFasmYGCPS7nzzYgMvJ335j//dGo=
Subject key identifier: B6:BC:39:9A:D8:4B:BB:0B:9C:F2:E4:E2:29:91:95:D3:7F:E2:60:96
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 019747E7E553F3D1A56981FA7B0449F2CA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 0D46
Signing time: Sat 07 Jun 2025 01:01:09 +0000
Manifest this update: Sat 07 Jun 2025 01:01:09 +0000
Manifest next update: Sun 08 Jun 2025 01:01:09 +0000
Files and hashes: 1: 0lerfjDbBomfVzh-fPpNdTuZC_w.roa (hash: K04vSVynMPGD818PT8TEi3joicn16R1AClxmk8kzM/M=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: 6J0wFLqwtgbLRJ195c4gMGrt8lbE1XLPoIOR2OpQgog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:e5:53:f3:d1:a5:69:81:fa:7b:04:49:f2:ca:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Jun 7 01:01:09 2025 GMT
Not After : Jun 8 01:01:09 2025 GMT
Subject: CN=b6bc399ad84bbb0b9cf2e4e2299195d37fe26096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:34:02:73:31:12:ec:0f:3e:61:dd:b1:53:
97:48:24:51:12:51:84:b6:d6:f5:dc:91:fc:70:d1:
fd:86:06:f0:ac:8d:b5:00:8f:99:3c:09:b7:05:6e:
fe:35:8a:92:1c:1d:ba:ad:98:d0:99:ff:8e:47:a9:
c5:33:73:3e:79:40:7c:3b:c5:26:25:77:91:7e:00:
59:49:ae:39:ba:22:00:10:ac:cd:24:4f:35:d4:80:
49:24:6d:83:df:56:d2:ec:6c:87:25:0a:41:0e:ee:
45:df:f8:59:17:b5:e5:1f:2e:4d:a0:d3:54:ad:62:
af:5a:4f:c6:46:2c:5e:0f:8e:1c:04:4b:ae:51:fe:
c4:c3:5b:d3:d1:33:7b:44:06:9f:cc:ea:2f:6b:e6:
c2:f0:16:8f:e7:1e:b3:10:6f:96:9c:05:ce:a3:be:
4f:42:ad:6a:5b:6a:c5:73:ad:9f:4a:c3:8c:16:4c:
eb:6e:bc:3e:7b:18:01:ef:94:ce:80:5e:ef:4f:f8:
ea:e2:41:fa:75:f4:9e:44:b6:83:76:77:dc:03:57:
b1:87:e3:32:a4:df:42:9b:2c:cc:8f:55:fc:f1:91:
9c:18:f6:b8:a3:ac:2c:49:45:f8:e9:a6:f6:d7:83:
10:dd:24:6f:f5:9d:4e:59:aa:01:bf:c5:f6:32:c5:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:39:9A:D8:4B:BB:0B:9C:F2:E4:E2:29:91:95:D3:7F:E2:60:96
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4c:d4:ad:ca:eb:56:0a:eb:58:fb:59:56:27:e6:a8:a6:85:
7f:ff:32:a9:a3:5f:c6:2b:ad:af:0e:0f:a7:2d:df:1a:e1:ec:
1b:fa:fe:32:49:f5:0c:6d:fe:0c:b4:f8:95:af:3c:0a:a7:53:
63:14:c3:e1:b8:f7:6e:73:a4:a4:38:fe:c1:1b:59:45:76:99:
33:b1:8a:41:df:ba:3c:e8:f9:77:73:e6:bd:99:d4:df:ab:e7:
68:16:1a:99:50:51:12:9e:1c:ee:57:ee:95:91:dc:fa:59:71:
33:47:04:be:62:b7:b0:94:9d:3e:1c:cf:bb:b2:2c:6a:54:a2:
db:13:45:13:08:33:ec:7b:d1:ac:13:fd:e0:b0:91:40:33:12:
84:65:fd:a8:e9:2a:37:ee:14:7b:d5:e5:5c:f5:1e:5a:9b:ba:
e8:6e:1c:88:05:0d:6a:12:d7:5e:c5:ea:6b:6d:11:e5:6e:33:
e5:1c:ce:d3:bf:95:2a:ed:21:cb:c1:2e:c4:b3:51:04:d0:f4:
d6:46:47:76:9a:b8:e7:10:22:0b:44:47:33:7d:86:2e:c0:43:
f0:58:94:33:42:92:bc:d6:35:8c:37:34:95:cd:12:45:3a:71:
a3:d1:24:b3:a4:21:b0:d4:6e:1d:5d:8d:51:05:22:a1:18:bb:
a1:83:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:35 2025 by rpki-client