Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: zVJq79T4raAVkMCJqcYpVGI1nBTeS0VzzMk1Kg1Nu+g=
Subject key identifier: F6:63:E1:E4:94:03:9B:64:F1:B0:66:1D:AB:62:53:76:29:77:2F:89
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 01976094F6E8394BFD322B6EDE17F1726D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 158D
Signing time: Wed 11 Jun 2025 20:01:04 +0000
Manifest this update: Wed 11 Jun 2025 20:01:04 +0000
Manifest next update: Thu 12 Jun 2025 20:01:04 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: LxD42T2VLeSDOkFej/Ej4OpFX2kiuPZhwsBzV4L2j0w=)
2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:f6:e8:39:4b:fd:32:2b:6e:de:17:f1:72:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Jun 11 20:01:04 2025 GMT
Not After : Jun 12 20:01:04 2025 GMT
Subject: CN=f663e1e494039b64f1b0661dab62537629772f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:bd:65:38:f1:89:e2:82:9c:aa:5c:ed:f2:
2a:2d:11:89:9a:e5:02:48:c5:e6:7b:76:c1:29:bf:
ef:97:01:92:83:0f:d5:9a:b8:fa:a1:9d:51:42:4e:
9c:e4:1f:19:8f:2f:2d:84:3f:46:18:70:45:fe:6f:
fd:57:46:a1:53:61:5d:59:2e:eb:61:b7:84:7d:90:
96:85:d3:80:fa:ff:29:2a:31:7c:81:2e:1d:34:4c:
25:ec:35:b8:06:55:37:7d:77:b9:b9:58:9e:b3:48:
e9:8f:4f:4a:ff:8e:39:bd:d0:11:34:46:83:bb:3a:
ce:40:46:70:b3:ef:2e:69:ee:05:b8:e7:d5:6b:8d:
a2:64:d3:e0:c1:0a:da:1b:38:ed:c9:f1:92:36:10:
28:c3:aa:32:36:0f:db:1b:ad:2b:c1:bd:30:02:95:
f3:fa:32:d7:21:67:be:b2:46:90:5e:89:14:00:6f:
35:18:3b:e7:aa:5d:29:b9:4b:9c:26:7a:27:f7:61:
df:64:d9:e1:e7:b2:0d:cd:35:80:7f:91:b2:da:d8:
4f:06:7f:e6:f3:91:14:d4:c3:ce:2c:98:cf:72:13:
a1:22:a2:94:14:73:1d:10:f8:0c:48:50:73:81:a1:
da:3d:f4:96:61:7b:f2:30:a2:7b:73:78:0b:2f:21:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:63:E1:E4:94:03:9B:64:F1:B0:66:1D:AB:62:53:76:29:77:2F:89
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f4:b6:71:10:cf:dc:9e:76:8a:80:84:5c:94:56:d3:6f:ce:
db:67:64:fe:5e:f4:6c:2c:4c:e5:24:4e:96:c1:68:c7:fa:64:
37:cc:b1:b3:ce:c0:05:97:dc:01:21:9d:42:7e:e6:6d:7b:9a:
77:0d:9d:d4:56:cd:df:50:d9:20:4d:d8:99:b6:c4:bb:ea:2e:
d2:57:ed:2c:79:3d:09:ad:03:c2:13:8e:ab:62:69:fc:f3:f8:
41:ef:98:b9:de:60:cf:a6:5f:ee:e4:1c:c2:0e:d3:4e:47:ca:
56:69:34:f0:c3:bf:93:12:37:b3:66:22:f8:7c:12:9b:be:56:
9a:0f:52:ac:a5:e5:64:64:91:21:57:71:6d:42:fd:29:9b:bc:
da:e4:5f:77:f1:26:3c:98:a6:ad:bc:bc:b3:b2:b4:05:7c:5a:
35:6b:d3:91:f2:63:fe:e6:28:92:50:52:f0:33:0a:2a:a0:2c:
6d:61:2f:7f:05:b1:46:dc:45:a8:24:fb:c3:51:44:7d:bc:59:
93:b2:31:03:86:76:6f:00:1d:8a:5d:8f:93:42:84:7b:c8:67:
3f:e4:87:01:e5:65:47:02:99:6a:4d:ea:db:d1:c5:ee:d2:aa:
92:9c:7a:b3:5b:1a:73:b3:3f:cf:0f:89:78:ae:e2:0c:c9:ad:
b9:92:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:44:30 2025 by rpki-client