Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: MWjlzi8vJu5+GjoFAhPDxQaOtaU+Imrq+haWPpxAyXA=
Subject key identifier: AA:3B:64:F1:95:BC:8D:B8:A5:18:81:FB:8A:2C:4C:F1:5F:94:3E:5B
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 0197439D866B849A123FC6485E10B17A76AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 04DC
Signing time: Fri 06 Jun 2025 05:01:26 +0000
Manifest this update: Fri 06 Jun 2025 05:01:26 +0000
Manifest next update: Sat 07 Jun 2025 05:01:26 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: WbqmhRE/+D/29vKhXEQkeJebw+hVRXVV909gXMYuXFg=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:9d:86:6b:84:9a:12:3f:c6:48:5e:10:b1:7a:76:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Jun 6 05:01:26 2025 GMT
Not After : Jun 7 05:01:26 2025 GMT
Subject: CN=aa3b64f195bc8db8a51881fb8a2c4cf15f943e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:a4:47:4f:2a:fb:09:37:6d:69:87:d4:83:
ab:13:91:f3:06:8e:e0:eb:e4:4a:db:7a:32:8e:76:
d4:12:a4:50:71:15:eb:e0:68:7e:43:e7:6f:ae:bc:
f3:53:be:ad:8f:ea:22:3c:3f:8a:83:1f:a5:f1:74:
50:c7:b5:11:06:6a:62:58:49:d1:8d:3a:0d:b8:1b:
9e:92:81:2c:35:47:61:91:ae:50:2c:d0:4f:4f:62:
94:8b:87:05:f4:9b:be:92:66:18:de:44:1a:ee:3a:
3a:f0:77:1a:35:4c:cf:3f:20:27:ca:01:41:0f:b4:
b2:d1:e1:f9:ac:1c:7f:03:e4:2f:31:f4:cd:19:0c:
d9:90:93:ae:50:bb:43:24:38:c2:c8:8c:83:69:88:
36:92:23:d8:ea:f8:8a:46:d2:e3:bc:1e:3c:9f:43:
de:34:73:80:19:41:42:e2:35:10:5a:0b:1e:9d:44:
f9:c1:18:2a:33:77:4e:1f:96:a8:8b:cd:40:32:b8:
f2:a7:ff:f5:79:85:77:62:8d:e6:ab:4d:7d:59:9a:
b6:04:d0:9f:ab:a0:9a:8e:f5:0f:7b:ed:66:95:00:
85:b7:39:c3:98:1c:75:f1:f4:a7:5d:04:e6:bf:a3:
63:56:bb:be:f4:6b:23:fa:02:14:ac:6d:60:98:23:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:64:F1:95:BC:8D:B8:A5:18:81:FB:8A:2C:4C:F1:5F:94:3E:5B
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cd:ed:d1:eb:c6:d4:05:32:5c:2a:31:72:d0:fc:16:69:7c:
f9:29:e6:40:22:9f:91:1b:3b:da:2c:2e:29:a4:e0:ea:5c:66:
38:a3:84:11:1a:a9:98:66:f3:f4:a9:04:19:70:27:ca:32:49:
6b:ac:fe:62:be:fe:24:cc:0f:12:a3:95:49:82:ea:28:0f:4d:
07:4f:36:5a:e0:c4:f5:35:8c:2b:32:48:ba:94:cd:64:87:92:
ae:a2:3d:2a:49:06:4e:28:ff:75:a6:d8:35:8d:39:46:d8:a6:
fe:75:53:e0:33:64:de:eb:bb:c0:c6:fe:57:26:dd:1a:5e:6a:
82:52:8a:82:d1:83:60:42:e5:96:26:5e:7d:1c:a4:d1:06:73:
0d:b7:51:49:67:24:0a:d7:13:08:f3:14:1c:12:4e:d3:1c:f2:
c2:06:d0:a5:ff:98:95:d7:22:90:59:0c:4d:f2:fa:78:30:ae:
51:0b:83:f0:17:09:50:b7:1b:b8:9d:16:f6:0d:0e:ea:87:e6:
4d:83:34:84:78:1b:fa:15:bd:d1:df:03:f9:65:f6:83:64:a4:
61:2d:22:72:fe:aa:c0:a5:83:73:16:0d:33:b1:b7:90:88:45:
01:5f:4a:c7:81:f5:68:32:17:37:72:fe:a1:5d:5f:74:30:39:
f5:23:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:27:10 2025 by rpki-client