Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: DNnUcFJsYqwUDl/X76Qg72U3ZuRrJYdfAJHLWxczgv4=
Subject key identifier: 14:1E:AE:43:C1:6D:EA:1F:9C:17:0E:02:17:16:7F:14:8D:23:F0:C0
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 01976BBD6C0C2A893C162267177F5BBCAEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 0A0F
Signing time: Sat 14 Jun 2025 00:01:05 +0000
Manifest this update: Sat 14 Jun 2025 00:01:05 +0000
Manifest next update: Sun 15 Jun 2025 00:01:05 +0000
Files and hashes: 1: 3qIWzYrkrCPP_OpSVUhC7_G6DpI.roa (hash: yygvsOn7SmxlaOZM9baJ/n8umdT0wN2hx2GnupmdeSk=)
2: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: NaRuooTkudOhcKtXmFgx7tQPuYTAL/wTRyuswpd7eg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:6c:0c:2a:89:3c:16:22:67:17:7f:5b:bc:ae:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: Jun 14 00:01:05 2025 GMT
Not After : Jun 15 00:01:05 2025 GMT
Subject: CN=141eae43c16dea1f9c170e0217167f148d23f0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:76:c1:54:99:43:57:45:57:2a:74:da:72:
96:f5:00:3d:84:dc:08:28:d3:38:9f:bf:e4:18:41:
2c:26:b4:c4:dd:78:fd:da:fe:b1:23:95:b5:81:b7:
a0:55:f8:00:71:4b:95:1f:af:a2:92:0d:18:97:89:
10:cc:45:31:61:0f:2d:0a:ad:24:c1:07:26:5d:c6:
ec:9b:86:7c:16:1f:a0:60:d0:af:0c:0c:f0:76:a6:
64:7c:df:2c:7c:fd:56:04:82:c2:43:4d:97:6d:10:
1b:dd:cd:90:86:68:5a:15:02:5e:9b:95:e8:da:0c:
93:8a:ce:eb:70:ff:da:b9:96:1d:b2:41:3f:79:7a:
83:ac:e4:60:55:b9:9d:37:a9:1c:6d:5e:3e:e3:1f:
e7:4a:ae:8c:24:81:31:7a:a3:a8:e0:58:d8:a6:3d:
2b:fe:11:dc:42:c9:2e:85:4a:c0:4d:ee:01:d5:72:
2c:34:51:0d:7f:bc:4c:40:39:96:1d:c2:0d:ca:f7:
62:bf:a0:42:ee:ac:82:5b:d2:62:2c:39:91:e4:1b:
3e:0e:ac:96:c3:8b:d2:b6:c8:d8:1f:be:aa:91:db:
e5:f6:18:0b:2f:92:d2:a8:11:44:50:d7:25:0a:30:
e1:ce:2e:a0:9e:ba:75:6d:dd:0c:88:a1:44:e3:d1:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1E:AE:43:C1:6D:EA:1F:9C:17:0E:02:17:16:7F:14:8D:23:F0:C0
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d6:ea:e2:2a:78:27:0d:e8:6c:c6:84:1e:e5:70:d9:e1:ae:
8b:f3:46:60:14:0b:6d:29:0b:53:57:5e:86:f6:5c:71:18:23:
ec:a4:94:de:35:5b:22:76:71:9e:23:03:78:60:f7:09:09:00:
36:87:15:26:ce:50:4b:38:23:d3:9a:89:f0:38:a5:0b:1d:42:
8f:5b:c6:10:88:41:eb:4a:47:3e:48:51:4f:f4:27:c9:be:dd:
46:cc:ea:ea:25:ec:21:91:db:c2:5c:ba:61:93:e5:e3:6b:93:
5a:c2:64:e6:ae:10:e3:e9:f5:db:e4:63:b3:dd:b5:29:ea:4d:
51:7d:62:20:07:a5:44:be:c7:84:6c:eb:d0:39:7c:0b:bf:ec:
8d:58:a5:ec:2e:0c:e0:01:f9:4d:03:58:c7:47:2e:6d:38:b9:
ab:0d:46:10:bf:8e:6b:14:e9:8f:9a:39:d8:0b:e2:94:22:25:
82:17:d7:f0:81:7c:08:c6:2c:e5:c7:d0:9e:9c:97:62:0c:aa:
31:a2:bf:9a:a9:c0:89:3c:3e:27:4a:96:b3:36:5c:f6:b9:b7:
6a:8a:28:e8:02:7f:e7:97:fe:b4:d2:14:a0:0e:b3:5d:44:07:
ce:8c:f0:66:33:ff:1a:f4:b0:11:a4:0b:23:4c:32:33:bb:04:
d3:b6:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:51:00 2025 by rpki-client