Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: xFfNxXosgYeBEERzC08EBd5JGDQ8ewYCLPQtimUEBuc=
Subject key identifier: D0:4E:B0:35:0A:66:C4:2A:BD:C0:21:37:6F:33:09:5E:3F:55:98:E5
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 0197B6A0DFE8715B1E4EF0F12C7D59AE5A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0B41
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: BPtayPkUheNkPb92byc2F2dZkm9F6yFnrfCXU9ZKbf0=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:df:e8:71:5b:1e:4e:f0:f1:2c:7d:59:ae:5a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=d04eb0350a66c42abdc021376f33095e3f5598e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:e9:85:8a:e2:de:bc:62:08:1d:c2:b7:a1:
13:b4:35:3b:fb:5a:11:c9:4b:7c:76:5f:0f:a2:22:
fd:5f:2c:4a:b3:fa:05:85:72:8d:bb:ef:8a:ce:ff:
30:cd:97:26:d9:6c:d5:0b:d7:3c:92:f9:af:b2:ee:
0f:e2:d4:74:69:f9:f6:79:29:82:58:e5:cf:84:7f:
98:be:da:7e:e9:3e:70:87:c6:45:07:46:cf:87:6b:
59:d4:92:d2:7b:0c:72:c3:39:0c:3a:fd:91:91:80:
98:73:64:1f:3b:39:fa:0b:b8:b3:19:3b:e0:1f:49:
ce:2c:98:e0:ee:52:f6:9d:0d:e9:33:fd:7d:27:cc:
65:a4:f2:74:cb:b3:f3:41:0a:45:94:db:c2:65:e2:
eb:6f:a6:a9:59:31:9e:fe:05:99:27:f5:24:45:da:
0b:9c:4d:d0:cc:7c:c8:3b:ae:e5:8c:30:f5:ec:86:
4d:35:92:06:57:89:71:a1:46:c3:cb:74:64:31:98:
58:ff:8c:15:cb:0a:e8:c1:85:45:4d:0e:50:e8:a6:
a9:c2:72:d0:6e:9c:04:1d:22:d5:18:1d:b0:0e:c1:
36:7d:f0:7b:b2:78:e5:7c:36:fb:ae:5d:9c:48:a4:
a0:e0:31:59:77:f1:64:eb:41:48:ed:05:97:58:58:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4E:B0:35:0A:66:C4:2A:BD:C0:21:37:6F:33:09:5E:3F:55:98:E5
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d3:4a:9f:8a:b4:bc:02:66:a1:d0:a2:d9:02:81:ec:00:73:
c8:19:c5:f7:2d:63:50:b9:23:aa:6f:44:39:b9:ae:b0:9a:5e:
55:09:fe:cd:9e:a7:2a:a8:3a:f2:13:9b:5a:1c:5e:31:45:cf:
80:b9:c1:98:a6:a3:af:69:87:75:57:f2:7d:c1:f0:92:91:2b:
99:b8:8c:27:87:62:bb:72:3b:30:64:69:6d:7c:57:62:0f:7a:
42:4b:ab:04:f9:ae:70:85:4a:42:6e:60:a1:8e:a8:3f:29:bf:
cc:3d:10:48:82:97:08:b6:d7:a2:7c:55:ac:58:8d:84:8d:57:
f3:f5:2c:f3:3c:c7:02:85:d2:e5:d3:8c:ff:72:d9:6b:8d:47:
48:88:ff:f2:07:d3:be:2d:9e:a2:19:8f:fd:44:6f:09:18:db:
15:3c:42:8c:c7:39:35:45:65:e1:15:a5:ff:76:d6:03:d8:be:
10:61:88:2c:df:c0:a7:93:55:7d:92:8b:1c:34:b5:b7:6c:a9:
33:8a:52:bd:02:c8:b1:20:a9:06:5b:a2:d0:51:3a:e0:dd:66:
d9:a1:fe:70:da:42:ea:58:01:36:f9:e3:8d:e2:a7:44:b3:f1:
bd:ed:0e:8b:6b:1f:f4:fe:db:32:d3:3b:b8:f8:a2:41:4e:ed:
e9:63:81:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:26 2025 by rpki-client