Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: ksjqU4CvnlvULXzRazZOsXCyAUmMxs+VVbbTsYbzaYE=
Subject key identifier: AB:5D:68:A9:B3:0E:2D:49:19:62:6C:0F:82:48:4F:F0:D4:57:AA:8E
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 01976403DFC46585FC26F5C6A7D7DED2B61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 12:01:04 +0000
Manifest this update: Thu 12 Jun 2025 12:01:04 +0000
Manifest next update: Fri 13 Jun 2025 12:01:04 +0000
Files and hashes: 1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: 0prxK9PKUuiUV9dzOt1o8vNf1I3/SMdWxcqJYNtF/XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:df:c4:65:85:fc:26:f5:c6:a7:d7:de:d2:b6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Jun 12 12:01:04 2025 GMT
Not After : Jun 13 12:01:04 2025 GMT
Subject: CN=ab5d68a9b30e2d4919626c0f82484ff0d457aa8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:bd:9e:75:aa:42:7e:23:f6:8d:a3:a6:73:
a0:66:bc:76:43:ae:0c:24:33:06:59:95:01:f4:27:
c6:a4:25:95:bb:d8:3c:b5:8b:1c:f2:61:37:4d:cb:
b5:56:00:6b:e9:c4:67:8f:fc:d0:be:85:85:f6:08:
2c:bf:6e:31:5a:f5:98:d2:ea:7b:3e:8d:18:0f:c4:
9f:61:35:0c:8e:b1:f9:db:8c:a7:2a:d8:1a:1a:8d:
97:62:9c:35:f1:d3:cd:b4:58:71:00:5e:df:6e:8c:
0b:15:53:ae:3c:64:c2:9f:2a:c9:8c:0b:81:9d:4e:
23:72:60:ed:a0:4f:6f:02:c5:4e:a2:2e:ef:2a:2f:
54:cc:f7:44:77:38:ea:02:1c:4c:d0:30:0c:eb:71:
5b:f5:39:52:39:c3:ef:29:65:f0:8b:c4:58:29:f3:
59:98:19:70:f7:ea:c4:ba:0f:39:ac:73:ac:d2:7f:
96:7e:e6:1e:cf:b9:4c:e0:12:36:14:fe:4c:70:93:
56:61:56:69:55:a6:8a:2f:e7:a2:f9:ae:a1:42:54:
d9:86:9e:0b:a3:c3:fd:a9:93:b0:f9:6a:c2:4c:76:
b9:a3:52:b2:bc:b9:fc:64:3c:33:a7:c9:a4:2b:6a:
cc:45:69:8c:9a:45:95:d1:bb:9e:e5:9d:37:de:a8:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:68:A9:B3:0E:2D:49:19:62:6C:0F:82:48:4F:F0:D4:57:AA:8E
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:49:75:72:38:d7:61:1c:e4:f4:39:63:17:7c:da:01:8d:54:
37:e5:7f:fb:43:65:36:1f:0c:c5:81:09:7b:6c:17:5f:36:2e:
e0:3d:18:34:c2:9f:fc:00:cc:44:b0:e6:27:da:f7:40:f8:21:
97:70:6c:06:15:85:30:10:62:b7:38:d7:f8:34:43:1d:7a:68:
32:0f:de:1f:ce:c2:84:6d:27:ec:d2:67:a4:db:d5:15:28:59:
09:fc:0c:5e:38:9b:29:80:2f:d4:ae:a4:cb:61:58:f0:0b:1e:
74:83:31:aa:16:f1:7c:e1:c8:60:05:40:33:85:1e:4b:68:0f:
58:48:91:22:51:d1:42:7b:6a:19:26:ea:fd:c0:5d:1f:55:06:
a6:05:96:f3:9b:ed:ec:a6:d3:25:5d:fc:b3:f6:ef:5f:d3:8d:
10:63:94:11:68:8c:50:dd:05:42:0e:ca:d0:3f:dc:f0:29:4c:
e3:0d:7c:29:b3:6d:df:b5:86:80:d1:73:89:01:ba:da:49:7c:
08:e3:80:9c:76:aa:35:cc:5c:81:9b:31:cc:4c:8e:2e:64:80:
d7:eb:e0:e8:47:78:60:23:cf:68:ee:92:be:ec:29:c2:c1:47:
35:e2:0c:01:03:fb:e7:38:e8:eb:e7:5f:c6:32:6f:d0:1d:3d:
14:e6:85:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:30:11 2025 by rpki-client