Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: m1oHxoW5KHXryooCX4TuET1q7cYj1YiBLoa/YtvXHBo=
Subject key identifier: CC:51:57:5A:C0:F1:66:88:45:82:E1:5D:03:B9:F3:0E:8E:25:A2:AB
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 01974D4529CDA0B2A7C7782595BF8F34A254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 12C7
Signing time: Sun 08 Jun 2025 02:01:07 +0000
Manifest this update: Sun 08 Jun 2025 02:01:07 +0000
Manifest next update: Mon 09 Jun 2025 02:01:07 +0000
Files and hashes: 1: TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa (hash: Nd8DGSNjI4U6VllZfkdb3mT7nzYndNyfiOfx/EMJxwE=)
2: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: 9aiO+xjNWra5iwiBCI+AyWTE+59DYjJsqsZSBpgqCTQ=)
4: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:29:cd:a0:b2:a7:c7:78:25:95:bf:8f:34:a2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jun 8 02:01:07 2025 GMT
Not After : Jun 9 02:01:07 2025 GMT
Subject: CN=cc51575ac0f166884582e15d03b9f30e8e25a2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:ac:54:91:b2:6e:6e:1d:3f:51:3b:e5:61:
7c:df:1f:90:40:34:e5:89:4b:a7:92:bf:9d:65:32:
82:22:0f:da:1a:aa:6e:cf:1e:c7:ff:05:79:54:4f:
9c:1c:ce:af:aa:d2:a6:37:67:29:33:a1:3f:df:d3:
ad:06:59:ef:18:0b:61:58:db:09:6e:89:f9:71:3b:
c9:b4:eb:f1:39:40:2a:cc:40:24:09:ae:c3:52:24:
da:22:83:c1:de:2c:40:2c:a3:8d:0a:0f:45:e8:51:
6f:f3:b3:b3:cf:71:50:bb:1a:d3:2e:9c:91:da:8c:
3b:8e:67:82:12:fa:cf:d2:3e:44:e4:06:d3:0b:7d:
50:91:aa:e7:58:7c:b8:3d:09:9e:98:c0:e2:3a:19:
e8:64:10:f4:4c:da:f7:15:aa:15:e1:e5:83:04:b1:
10:90:e1:38:e0:ae:f4:18:d5:53:db:46:cb:52:86:
e3:be:f6:29:58:d0:ad:29:73:39:ca:15:77:99:b2:
8c:2b:48:ef:ed:f2:15:e7:8a:d6:28:8d:cb:98:f4:
34:51:1b:c5:a5:eb:50:a7:db:ca:31:ed:50:69:a5:
48:ca:98:5b:13:9f:c3:85:ef:09:30:c9:38:af:93:
02:48:46:55:df:99:ac:a4:e4:65:24:2c:3e:ea:3b:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:51:57:5A:C0:F1:66:88:45:82:E1:5D:03:B9:F3:0E:8E:25:A2:AB
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4e:d3:aa:c0:fd:a7:08:25:64:72:1b:f1:80:6b:95:ff:f8:
e7:c0:47:ba:a1:b1:af:91:61:d4:8c:60:27:42:31:58:ef:51:
7f:70:91:10:12:87:5a:48:9d:16:e3:5d:6b:e7:59:c2:98:e7:
98:b1:75:17:de:1a:76:5a:72:75:ae:42:aa:7b:9a:b7:f1:62:
6a:0e:c8:65:70:4b:a7:fc:ae:65:2e:58:9a:0c:ce:f7:94:be:
c7:26:a9:61:c2:51:2e:39:00:eb:7c:f6:e9:4c:db:14:d8:30:
fd:a4:25:b1:ae:e4:8a:57:f2:ab:ec:d4:20:9c:2d:1d:8b:40:
1b:7e:05:0b:24:91:83:7b:b5:b1:d3:dd:e5:09:b6:43:9c:5d:
87:2f:6f:32:72:fa:96:f8:40:40:12:bc:e9:9a:10:b0:10:c2:
9a:63:3e:05:85:3f:b1:f2:87:b3:62:fd:73:df:23:56:88:dd:
1d:3e:bc:f8:f9:29:42:fc:24:eb:ce:a2:c5:03:c8:d9:59:ab:
7d:f7:77:44:e5:80:34:1f:a9:31:90:eb:6c:93:c1:55:8e:d9:
b9:14:3c:e9:1b:9b:7a:dd:be:99:c1:fa:60:63:8e:58:2d:53:
62:8e:72:cc:f7:eb:d7:fd:1f:60:72:37:c6:ec:d5:4e:59:c3:
d8:8f:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:48:15 2025 by rpki-client