Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: HMg19U1v7C29zlJGFEWBUo3uoGPcuC4aQbmoLJHituw=
Subject key identifier: 0D:1E:B1:B1:7C:74:C9:66:74:9B:CA:AD:CC:EA:30:DF:BF:0D:29:19
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 0197BF35E99176F4FD4DE7649996D582486F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 03A6
Signing time: Mon 30 Jun 2025 05:01:10 +0000
Manifest this update: Mon 30 Jun 2025 05:01:10 +0000
Manifest next update: Tue 01 Jul 2025 05:01:10 +0000
Files and hashes: 1: X0-Djm0vHdUiJwsWds74O566gnw.roa (hash: wptFaY0ZwFbGnw/VuRN3robTidxbKoo/tyvxKrOBB/E=)
2: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: ykMrkbZJWyhy0ApbPr8Al4PvVOXR56vbDMsjpAR07Po=)
3: wfeH5shQb9p8-APifaQwZCuXjuw.roa (hash: i3m8mYv5PGE+aCaz85jAgzkj3ipmT/iJy2vmh07ZehU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:35:e9:91:76:f4:fd:4d:e7:64:99:96:d5:82:48:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Jun 30 05:01:10 2025 GMT
Not After : Jul 1 05:01:10 2025 GMT
Subject: CN=0d1eb1b17c74c966749bcaadccea30dfbf0d2919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:e4:8e:9e:62:10:67:5b:75:73:5b:cc:52:
fb:16:e1:e7:d4:a6:cd:3d:a6:26:48:19:a9:d5:7b:
71:3a:d4:d6:d0:69:12:23:a7:a1:c2:d9:e7:5c:59:
b8:c8:42:ac:ef:bf:da:8c:02:56:30:9c:e9:0b:23:
c8:ba:ea:b9:0b:41:38:9e:0c:be:b0:74:ed:0c:23:
bc:30:be:7c:75:00:85:c9:c3:3b:e8:9d:52:a1:a1:
7e:42:0b:bb:5e:d1:28:f9:1f:e3:ce:34:47:10:26:
1b:65:e6:56:e4:b4:ee:5b:a5:0a:16:73:26:79:f3:
45:3c:1d:b0:e7:9f:3b:b9:1b:45:7d:03:e3:5d:bf:
11:44:72:0d:ff:66:da:3a:a7:8f:2f:d8:b3:d6:d0:
2e:3d:68:ac:45:af:6f:ad:4b:ca:4f:97:bf:79:20:
a7:6c:07:c0:cf:c5:d6:55:1b:2d:91:87:0a:19:f3:
58:c9:9e:05:dc:8f:d6:70:c0:4b:7b:a9:f7:49:93:
a4:f0:64:aa:59:13:94:c0:42:32:f9:8e:d5:a6:39:
ea:38:51:b1:1c:98:02:35:cf:ae:3c:eb:57:cd:01:
d5:43:60:fe:86:c1:50:04:69:2f:e1:64:07:49:91:
7a:79:8e:b2:b3:75:85:54:22:93:c8:75:3a:88:ad:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1E:B1:B1:7C:74:C9:66:74:9B:CA:AD:CC:EA:30:DF:BF:0D:29:19
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:94:7f:d8:8f:54:aa:72:89:59:e1:2f:39:38:34:00:60:19:
c6:8e:63:a0:4d:83:d0:02:ec:69:63:ee:df:e3:c6:26:34:d1:
ea:2e:19:04:1f:0b:9b:23:85:b8:aa:82:83:27:95:08:3f:cd:
78:68:96:e4:a0:ed:f9:83:41:59:0a:3b:d9:24:c1:f1:37:44:
5e:c0:b9:b4:a6:88:3e:e3:32:a4:16:5c:78:c8:ee:de:60:d2:
80:9a:29:40:da:d7:4a:ba:14:70:da:33:e7:db:b8:96:cb:22:
fa:23:1a:08:6a:e6:e0:a5:ab:76:38:0f:42:ad:a9:dd:ce:51:
af:3b:c5:21:6d:53:ae:05:6b:96:4b:16:ec:62:d8:e0:6a:02:
f5:5f:2b:25:ab:c8:3e:7a:d5:13:6a:10:44:73:0e:2d:15:a5:
f8:44:4b:b1:17:3c:e0:49:8a:14:d7:ae:04:8d:6b:62:8e:94:
26:44:f6:77:45:b3:fe:bb:b8:c2:7c:e1:ca:88:1e:4f:a4:44:
06:77:3a:94:04:47:97:87:c1:fd:94:94:ad:a7:85:08:4c:bb:
09:f5:2d:43:d9:f1:47:8e:44:ef:d0:3e:ea:cc:19:17:ab:0f:
93:36:b9:fb:54:51:d9:4c:1c:03:25:06:a2:9c:70:c0:f3:d8:
67:d0:4e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:09:02 2025 by rpki-client