Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: 0wLXSZ+OHfgvzC/xDNwGa7DuLZr9OLZVeACYLnJU+xE=
Subject key identifier: E1:B7:45:3A:DD:BD:CB:13:86:34:40:CE:D2:64:E4:80:E3:92:62:7F
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 01974D44735B47AC64F5D744E9E68DAA41A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1520
Signing time: Sun 08 Jun 2025 02:00:20 +0000
Manifest this update: Sun 08 Jun 2025 02:00:20 +0000
Manifest next update: Mon 09 Jun 2025 02:00:20 +0000
Files and hashes: 1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
2: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=)
3: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
4: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: KnFXz8d3mgyjsPNkrJ7u0ETsfWqfjmicHdLcRwQHikI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:73:5b:47:ac:64:f5:d7:44:e9:e6:8d:aa:41:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jun 8 02:00:20 2025 GMT
Not After : Jun 9 02:00:20 2025 GMT
Subject: CN=e1b7453addbdcb13863440ced264e480e392627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:7a:f4:49:95:ca:73:2e:0b:9a:3a:0d:8c:
14:4d:ad:7e:b3:01:c3:1b:6a:85:07:54:b9:17:b1:
bd:6c:36:40:c7:83:f1:1b:c0:a7:c2:15:76:33:b3:
7b:ed:70:76:d0:0f:ed:f9:8f:2e:16:52:e8:67:cb:
5d:67:b3:6d:f6:37:3a:e6:4e:03:e2:a9:03:4a:b8:
5b:7a:f0:49:c2:dc:59:7e:5a:cb:91:76:c5:69:65:
41:d2:89:29:f6:f4:d2:91:5e:78:c0:55:e1:2e:26:
0e:99:f4:d4:3f:0e:a7:7f:a2:af:5e:88:01:1d:c8:
90:68:c5:0e:10:98:f5:f4:0a:a2:3f:ce:89:5a:6a:
ca:91:dd:f4:f5:6c:28:6b:db:42:0c:1c:80:7a:16:
f6:a8:78:84:b2:c5:7a:ed:51:e1:d5:60:fb:65:d6:
34:8c:5b:ef:0f:f9:52:e8:17:97:2b:d5:6a:86:eb:
fb:6a:50:fb:dc:66:c4:9b:51:27:40:bd:06:b0:02:
a3:72:b9:09:e9:de:61:42:be:5b:78:77:49:9c:19:
12:19:75:46:ad:94:3a:dd:71:a7:b7:e6:dc:15:e7:
c8:cf:ff:eb:11:43:36:b5:ef:34:c3:61:2c:0f:1f:
8b:e0:3f:a5:40:85:79:33:11:5e:ad:71:e6:dc:cc:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B7:45:3A:DD:BD:CB:13:86:34:40:CE:D2:64:E4:80:E3:92:62:7F
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b2:96:f8:c4:70:69:5b:99:d7:62:6d:4c:63:60:2f:bc:d6:
d3:bd:f2:d6:58:3e:03:c0:ea:78:0c:3c:dc:c2:4a:d5:4a:79:
56:ab:b2:00:3b:17:f8:62:08:2b:d8:b8:b7:de:75:5d:b9:c8:
52:41:b8:72:bb:e8:41:79:c5:b7:be:5f:99:0a:65:4a:7c:c9:
04:d7:0e:f3:4b:93:28:a4:25:ea:58:41:cf:23:cf:7d:f5:79:
53:3e:0a:7a:ab:a3:58:10:af:1a:74:92:7c:23:5b:64:94:d2:
79:d2:91:7d:28:82:1e:4b:9d:64:11:ff:60:9f:dd:70:1c:f5:
82:9a:65:ab:ec:5c:88:0b:c2:fb:10:bb:85:52:f1:64:a2:d1:
98:77:32:36:78:c6:e7:6d:44:f2:8b:16:3c:d4:52:88:23:1b:
19:a6:b6:d0:a9:cc:d0:ca:75:96:5b:71:c2:dd:24:6f:f7:99:
1b:e2:6d:e2:33:b3:8b:e2:5a:a8:0a:bb:6c:90:2e:8d:9f:73:
fb:b3:97:fe:16:0b:42:bd:f7:ff:99:13:0b:65:e4:48:46:a7:
c4:09:cb:e7:33:17:26:4c:d4:ab:ba:16:64:03:7c:59:77:e3:
16:e2:a2:71:b9:17:8b:d9:0d:60:4f:b3:c4:e0:31:50:5a:51:
24:df:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:39:44 2025 by rpki-client