Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: c2RKhvT4MEtZu5ql6v9u6BVTbCHXXVVEVLwD7LInYy4=
Subject key identifier: 1C:DC:B2:5B:83:DF:56:D0:E3:62:C0:C2:CB:2C:54:68:AF:3D:21:6F
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 0197CACCB70A1C608D227F94CF8FFB4D38AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 11:01:43 +0000
Manifest this update: Wed 02 Jul 2025 11:01:43 +0000
Manifest next update: Thu 03 Jul 2025 11:01:43 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: Sh7GVl3D35U7WlOUdgqACZq0yfiW1DsNKD1NDP2/Nu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:b7:0a:1c:60:8d:22:7f:94:cf:8f:fb:4d:38:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Jul 2 11:01:43 2025 GMT
Not After : Jul 3 11:01:43 2025 GMT
Subject: CN=1cdcb25b83df56d0e362c0c2cb2c5468af3d216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:5f:52:a6:d9:fe:6a:09:51:93:30:8b:ec:
51:37:d2:ce:c0:3e:2f:e8:d4:5a:d6:08:98:de:fc:
ab:ea:31:2b:7e:08:b7:51:67:bf:cd:49:a6:ed:1e:
53:e7:e3:b3:d3:ae:84:93:06:22:ee:fa:ef:14:14:
57:2d:72:d0:16:b9:0e:01:26:16:0d:b4:b9:11:a6:
c8:8a:39:eb:e4:54:19:ae:33:3b:a4:a1:40:81:4d:
f6:ce:90:ab:3e:72:4b:64:60:46:7b:09:30:e5:e8:
bf:36:f6:4d:f2:da:9e:35:27:c5:87:6f:9e:6f:05:
c2:bc:77:f4:d5:3b:a1:eb:de:fe:07:f4:43:ea:99:
c0:15:0c:89:ca:5d:93:8b:c5:5a:50:17:78:b3:09:
04:a4:1b:cd:6c:13:ad:5e:b1:ae:c6:ab:8e:8d:9a:
e6:31:f3:af:48:48:2c:c4:dd:f6:c2:36:e2:0f:71:
2b:a0:c3:40:b3:ab:df:83:00:57:43:4e:79:4d:7f:
73:f2:a0:af:d9:c7:67:cc:1f:c9:58:a4:08:1c:78:
ab:f8:4c:3e:83:51:51:d7:4b:cc:40:16:67:10:8e:
39:a3:5d:11:36:02:3b:7e:15:ed:c6:46:d9:b1:c0:
e7:5d:ae:53:21:55:94:fa:95:68:66:5b:35:3e:0d:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DC:B2:5B:83:DF:56:D0:E3:62:C0:C2:CB:2C:54:68:AF:3D:21:6F
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d6:d8:90:08:62:9d:1e:11:19:b0:0f:4e:24:a3:1a:e0:2f:
05:7f:62:fe:ad:be:f3:64:68:a7:c6:31:98:3a:4f:99:f0:28:
c6:5d:33:81:b9:93:c1:15:f5:af:e2:13:21:47:27:99:55:14:
43:36:46:43:58:12:c1:3a:21:45:a2:b1:e8:44:c8:a1:3f:c0:
20:c2:dd:47:ed:73:34:6e:08:41:22:38:16:da:08:61:62:ed:
36:ac:25:4d:fa:b0:e8:60:87:b3:1f:aa:f7:d8:d9:0d:5e:e0:
cf:32:aa:46:b6:09:b7:a5:7c:e5:65:6f:49:29:07:62:90:e6:
bf:53:36:41:9e:77:8b:00:3a:f1:81:d9:4e:c9:b1:bd:04:9a:
c7:e9:6c:58:d1:af:57:4a:80:84:e8:32:ff:15:4f:e8:8f:40:
98:fa:4a:70:62:49:03:0a:43:df:9f:49:36:3e:5c:2b:5a:f6:
12:e9:89:d0:25:ca:2f:6c:53:bf:42:9b:f5:94:4f:64:f2:1d:
52:3b:54:a3:d5:48:26:d2:6b:7f:90:00:ad:48:71:25:61:48:
a1:ea:04:33:e1:6d:08:3d:35:8a:03:47:0c:ab:53:c7:ea:6d:
0d:74:dd:fd:dd:36:4e:c5:e1:69:63:42:4e:01:17:07:9b:e6:
cf:23:77:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:05:55 2025 by rpki-client