Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: Y4CbJw47j3YzFG1mYxYwBATFEGtZlUf/Bo2u91j0weY=
Subject key identifier: C4:5A:C8:12:73:FD:90:B4:D2:1E:B5:A8:79:94:10:4D:44:0C:C4:A9
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 0197BA7D040E4A728D15EF2CEC5C539D22B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 07B4
Signing time: Sun 29 Jun 2025 07:00:44 +0000
Manifest this update: Sun 29 Jun 2025 07:00:44 +0000
Manifest next update: Mon 30 Jun 2025 07:00:44 +0000
Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: BHaeaObvR2OO4GSEN2wqlxMTqGRv2UZvsNgTWb+PTf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:04:0e:4a:72:8d:15:ef:2c:ec:5c:53:9d:22:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Jun 29 07:00:44 2025 GMT
Not After : Jun 30 07:00:44 2025 GMT
Subject: CN=c45ac81273fd90b4d21eb5a87994104d440cc4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:55:82:8e:23:03:ec:8e:06:44:67:21:95:
6f:06:fe:e9:3b:a4:b4:26:b3:05:94:97:a5:61:ea:
5d:66:97:67:01:0a:d0:15:bd:4e:b0:03:af:9d:da:
b1:91:c8:59:c0:a6:34:c2:55:9e:f2:bc:cb:08:1e:
3d:13:c0:5b:6a:ff:01:ff:fb:59:56:25:7d:04:64:
83:b2:77:a7:97:cb:7d:d8:c5:4c:3b:6c:4a:9b:88:
ad:a5:32:31:37:19:6e:c1:cd:01:59:37:6c:1d:50:
71:9f:3c:0b:ba:b4:7e:55:03:43:ab:08:f9:22:92:
ae:d3:14:2d:d4:91:47:09:9c:eb:05:2c:cf:31:69:
b8:02:a4:43:3c:d2:11:c4:d1:fb:6f:49:0e:3e:7c:
ea:9f:0d:cf:ac:e3:a3:85:d8:55:b7:6b:d2:ed:6e:
b3:7c:6b:0a:43:60:d6:c8:93:19:0b:c7:99:57:fe:
ef:e3:08:8b:c3:47:e0:b1:3b:72:cc:b1:23:e3:4a:
23:5c:84:84:7a:2d:f9:be:f1:9e:f8:6e:02:e1:c0:
73:76:e4:e5:ec:f7:a3:81:32:1e:f2:98:38:30:e3:
13:e4:e4:1a:a8:fd:97:b5:da:03:27:2b:8e:52:de:
21:f0:a2:34:8a:e8:4c:15:19:e9:a5:a5:cc:b2:12:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:C8:12:73:FD:90:B4:D2:1E:B5:A8:79:94:10:4D:44:0C:C4:A9
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:71:46:1e:ce:6d:06:22:2e:eb:31:11:5c:5a:9b:20:e3:3c:
c7:34:19:77:39:ec:4b:ca:ba:b3:6a:f5:9e:13:19:dc:d5:00:
29:81:cd:e7:11:ed:87:80:b7:5f:2e:4b:2c:8c:4e:c0:86:1f:
c5:13:70:a4:cd:44:6f:4e:cc:73:3c:9c:90:4c:e9:01:bc:8b:
53:98:f8:17:18:6c:8b:fc:5f:6f:c7:51:44:21:1f:2a:b1:29:
6d:9f:e0:9c:d7:0d:94:d2:da:43:05:2c:d4:e3:d0:d3:46:c5:
48:e8:7d:80:1f:6d:49:be:21:49:2a:b4:f4:96:43:f9:e9:6a:
1a:db:94:ff:9e:53:81:2c:78:d0:c2:3c:e8:16:dc:96:54:e0:
2b:56:b6:5c:20:c5:29:f5:cf:cc:5e:94:ac:16:e2:78:88:c6:
ad:00:e6:55:4a:78:f7:19:ad:c3:71:f1:e6:4b:28:95:cc:fe:
94:d0:a2:fe:17:f2:fc:40:05:a9:e4:75:f5:03:9b:f1:dc:1e:
11:4a:69:af:71:11:d5:eb:34:f7:79:a9:32:04:0a:3f:c8:09:
be:3c:6a:a4:48:42:ae:3d:71:86:76:42:04:90:65:43:d7:ca:
ed:a0:dc:5e:68:00:66:34:63:56:e0:f1:4e:a3:ab:7e:83:7c:
e3:78:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:28:22 2025 by rpki-client