Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: V6ff8LKEBADpLcTtXHnQfPwSfiWpI8Pt5p6S06mO144=
Subject key identifier: 30:22:8D:57:09:C6:0B:80:83:FE:01:6B:87:1B:FD:B1:F2:C9:F4:5E
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019748C31ECF90B180C6FC51A1825CE3819F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 0661
Signing time: Sat 07 Jun 2025 05:00:36 +0000
Manifest this update: Sat 07 Jun 2025 05:00:36 +0000
Manifest next update: Sun 08 Jun 2025 05:00:36 +0000
Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=)
2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=)
3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: QE+fLpXUtQG0Ci0wRocL8z5mCyKNt+dO54Pgeb6iJB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:1e:cf:90:b1:80:c6:fc:51:a1:82:5c:e3:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Jun 7 05:00:36 2025 GMT
Not After : Jun 8 05:00:36 2025 GMT
Subject: CN=30228d5709c60b8083fe016b871bfdb1f2c9f45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a2:58:f6:a8:3f:ec:8f:d7:19:b2:79:7d:ab:
bb:2b:ad:8e:a2:77:5a:0b:8e:b3:5a:1d:79:46:75:
f9:37:68:4a:c7:48:08:61:44:30:99:fd:5e:84:93:
fb:9b:44:b0:a2:27:83:c5:da:15:a1:90:0e:1b:12:
12:60:d6:6c:f3:88:fa:69:14:88:6c:89:a0:c2:2a:
55:04:56:55:2b:a3:76:00:22:08:f8:c7:2a:7d:07:
dc:6a:80:6a:e5:af:cb:b7:47:87:42:42:cf:6a:a3:
72:60:76:1c:c5:17:aa:32:65:36:50:ad:8e:c7:76:
26:1e:6f:88:ff:e9:21:f4:de:9f:76:43:c0:86:c9:
6a:f7:75:ba:70:97:fd:37:ae:a9:1a:98:1a:a7:e6:
d7:8e:0c:e4:82:77:42:e9:3f:ba:65:cf:b1:58:1b:
f2:92:70:2e:21:4e:91:e9:8b:1b:45:34:07:22:60:
a3:50:3c:7a:bb:48:aa:53:03:67:e8:eb:5a:75:d7:
0f:92:ca:a2:c6:83:5d:0f:64:53:ae:05:f8:61:76:
59:9f:45:59:bf:fa:62:04:d7:7f:82:c0:63:d4:af:
30:2d:5c:88:38:41:bf:76:0d:1f:33:12:17:b7:2c:
a7:13:e9:f6:65:d0:a0:3e:73:f3:a1:0e:50:72:cd:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:22:8D:57:09:C6:0B:80:83:FE:01:6B:87:1B:FD:B1:F2:C9:F4:5E
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b3:68:0e:be:16:4f:05:4a:ea:38:f1:69:43:53:59:16:3a:
f7:e9:35:8c:a4:10:ab:5f:b6:c5:fe:72:86:ea:95:74:a1:71:
47:48:7f:65:2c:e8:a6:a3:fe:36:88:8d:a6:8a:a7:3d:51:4e:
9a:01:76:e5:f1:2f:5c:38:25:b0:6e:fc:86:09:87:39:55:98:
62:e6:e6:e6:55:99:e2:d0:fe:da:5b:c2:cf:0b:79:01:7e:39:
64:ee:41:72:8e:6d:38:3e:69:e7:39:10:04:f9:5e:32:c7:61:
28:c0:84:df:1e:43:f0:76:22:50:d1:00:da:9f:76:b3:56:83:
95:7d:2a:cd:58:8b:6c:72:c0:2d:59:d4:21:3a:04:35:d8:64:
ff:3d:2c:36:78:04:15:5d:f5:b7:b8:35:93:1f:03:cd:fd:73:
9e:3a:61:ad:43:79:78:43:83:31:ed:33:bd:49:29:38:2c:b6:
c4:49:c6:de:2a:b2:95:67:e4:61:ab:e0:dc:53:c8:0e:7d:97:
97:08:7e:ee:b4:cb:be:af:bc:a2:fd:c0:de:06:a0:51:ab:2f:
cf:27:33:4b:ac:90:da:19:3b:54:34:c1:3b:2d:17:12:6a:c3:
c1:67:f4:e0:17:13:d5:cf:ed:fb:8f:24:95:ce:99:0e:db:32:
3f:94:2a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwx7PkLGAxvxRoYJc44GfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzU2YmRlOTYzZWVmN2MyNTBiYzg0M2M2OTVjYTNmZTA3
ZmJhYzQwHhcNMjUwNjA3MDUwMDM2WhcNMjUwNjA4MDUwMDM2WjAzMTEwLwYDVQQD
EygzMDIyOGQ1NzA5YzYwYjgwODNmZTAxNmI4NzFiZmRiMWYyYzlmNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76JY9qg/7I/XGbJ5fau7K62Oonda
C46zWh15RnX5N2hKx0gIYUQwmf1ehJP7m0SwoieDxdoVoZAOGxISYNZs84j6aRSI
bImgwipVBFZVK6N2ACII+McqfQfcaoBq5a/Lt0eHQkLPaqNyYHYcxReqMmU2UK2O
x3YmHm+I/+kh9N6fdkPAhslq93W6cJf9N66pGpgap+bXjgzkgndC6T+6Zc+xWBvy
knAuIU6R6YsbRTQHImCjUDx6u0iqUwNn6OtaddcPksqixoNdD2RTrgX4YXZZn0VZ
v/piBNd/gsBj1K8wLVyIOEG/dg0fMxIXtyynE+n2ZdCgPnPzoQ5Qcs1nqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAijVcJxguAg/4Ba4cb/bHyyfReMB8GA1UdIwQY
MBaAFDrFa96WPu98JQvIQ8aVyj/gf7rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2It
Y2U5YzlmM2FhODU1LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2ItY2U5YzlmM2FhODU1
LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbNoDr4W
TwVK6jjxaUNTWRY69+k1jKQQq1+2xf5yhuqVdKFxR0h/ZSzopqP+NoiNpoqnPVFO
mgF25fEvXDglsG78hgmHOVWYYubm5lWZ4tD+2lvCzwt5AX45ZO5Bco5tOD5p5zkQ
BPleMsdhKMCE3x5D8HYiUNEA2p92s1aDlX0qzViLbHLALVnUIToENdhk/z0sNngE
FV31t7g1kx8Dzf1znjphrUN5eEODMe0zvUkpOCy2xEnG3iqylWfkYavg3FPIDn2X
lwh+7rTLvq+8ov3A3gagUasvzyczS6yQ2hk7VDTBOy0XEmrDwWf04BcT1c/t+48k
lc6ZDtsyP5QqMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:29 2025 by rpki-client