Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: 2TCkk7bV2R5STCw/09VlEd8MuP2ksQ/D5HoBgAzWtpI=
Subject key identifier: 3B:89:CB:FA:D5:36:BB:D3:30:26:7A:78:2F:D2:FC:5B:B1:8B:FB:39
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 0197B632F6925D0650D00D1FA0407EF0367D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 15C1
Signing time: Sat 28 Jun 2025 11:01:22 +0000
Manifest this update: Sat 28 Jun 2025 11:01:22 +0000
Manifest next update: Sun 29 Jun 2025 11:01:22 +0000
Files and hashes: 1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: gxVqTL4xe1EEMvQ6aDDIheFgCuva4CHlcb/BuJSkF3k=)
3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:f6:92:5d:06:50:d0:0d:1f:a0:40:7e:f0:36:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Jun 28 11:01:22 2025 GMT
Not After : Jun 29 11:01:22 2025 GMT
Subject: CN=3b89cbfad536bbd330267a782fd2fc5bb18bfb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:08:a4:c9:f6:e1:45:7c:67:ad:d1:7a:cf:
34:93:3e:e8:41:b1:7f:15:d6:fd:6b:a3:ff:da:b0:
79:dc:01:9c:ca:8c:89:f6:6b:73:b6:18:07:38:47:
e7:a1:27:4e:70:00:88:a8:b0:c5:46:04:a6:1b:52:
20:e2:8b:1f:98:ab:f4:df:09:3a:08:f9:1c:fd:f0:
5d:05:ff:4c:ac:37:fc:91:11:c7:65:07:47:a3:6c:
4e:05:3c:ff:c5:98:7c:66:7b:f3:38:cc:74:d0:36:
a8:fd:d2:bf:14:84:ac:31:06:47:57:84:4a:03:de:
a0:f8:12:cb:8f:9c:6e:c7:70:92:3a:07:e8:30:46:
04:d5:2a:02:ec:4a:8f:77:28:18:71:77:5e:b0:f6:
30:fd:39:95:8c:e0:70:e4:bc:d3:76:7b:0b:e5:11:
35:cc:0c:0d:16:c7:c9:8e:d2:8f:38:36:a9:14:11:
0a:60:54:78:1f:c2:8e:62:81:4c:fb:ae:a9:30:7f:
91:12:ed:aa:55:39:89:41:df:40:cf:af:2f:13:91:
5f:77:5b:eb:6d:01:ce:50:b3:e4:05:09:d7:39:42:
90:44:71:9e:e7:b1:de:ec:2c:67:1c:48:bf:85:fb:
c8:2f:d5:39:78:e3:51:36:61:75:a0:b7:8f:fd:68:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:89:CB:FA:D5:36:BB:D3:30:26:7A:78:2F:D2:FC:5B:B1:8B:FB:39
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fc:20:0f:a8:c7:6b:9f:33:f1:a4:ee:01:53:95:6e:0f:73:
5b:ff:fc:1a:f8:b1:a9:b9:52:56:25:94:f1:a1:1c:1b:4d:b9:
6a:a3:a3:6d:af:c5:aa:1b:fb:16:7b:31:b7:94:a5:00:14:11:
37:43:d1:19:97:81:fe:0b:b7:2b:a4:70:48:57:65:98:a3:dd:
12:34:56:7e:49:51:23:10:38:07:47:26:71:49:68:b7:53:5a:
18:69:a7:86:04:49:75:d5:3c:a5:54:37:db:21:32:0c:5c:03:
97:9f:88:ea:bc:00:1a:5f:7e:5a:d0:07:69:82:5f:9f:6c:0d:
11:84:55:4d:f6:a9:b4:5b:f9:98:1c:2a:63:87:de:8b:b1:80:
66:0c:03:05:f5:37:fc:7f:e6:c0:0e:4c:11:81:60:30:7d:e7:
b6:6f:69:5b:a4:fa:c1:6a:be:06:5e:ec:6a:27:df:9d:c1:bd:
80:90:6b:8d:47:26:9f:9a:ee:33:ba:52:ce:2b:7f:3e:a3:2f:
3d:ff:02:13:7f:4e:37:5d:1b:be:e7:3d:3d:9f:48:ee:38:77:
17:0c:10:9d:ac:a8:a6:4c:35:49:64:f7:4f:e3:d1:fb:b4:7b:
9d:20:a8:c1:26:d2:f3:c0:0e:d4:fa:62:52:14:09:ed:b4:9f:
37:23:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:08 2025 by rpki-client