Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
File: o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json)
Hash identifier: 4GNq06RqdgIUgV7jGYOoVrj1nw9nwJjSK2iZ2fhRoy8=
Subject key identifier: 11:6E:EC:3B:4A:BD:EB:B2:C0:B4:15:8B:BA:41:32:A8:2B:E5:90:DF
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial: 0197B820D20ABBB93BB929B885D326CA9CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
Manifest number: 08E1
Signing time: Sat 28 Jun 2025 20:00:47 +0000
Manifest this update: Sat 28 Jun 2025 20:00:47 +0000
Manifest next update: Sun 29 Jun 2025 20:00:47 +0000
Files and hashes: 1: LRjWG2C0sY70ttFU6yLHd0oTEf4.roa (hash: gpuwglO/L9B/Dx0skWM1NYemBuVCYqyVGsOPd2w2KjA=)
2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: nAnblgNklrBsKEEwRiwJ0WcmXwex27X/9JaSAXpW/AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d2:0a:bb:b9:3b:b9:29:b8:85:d3:26:ca:9c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
Validity
Not Before: Jun 28 20:00:47 2025 GMT
Not After : Jun 29 20:00:47 2025 GMT
Subject: CN=116eec3b4abdebb2c0b4158bba4132a82be590df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:9b:96:ba:59:82:dc:92:58:c4:ca:31:4d:
07:9d:44:3e:ec:4e:52:4b:c8:4d:85:13:a4:4e:57:
71:82:ce:7b:5f:ed:a8:ba:82:5d:a0:99:1b:ca:a4:
48:66:04:e7:b6:3c:06:a7:3d:45:ed:91:81:74:8b:
b0:74:39:1f:1d:43:c3:04:50:48:f6:a7:0c:5c:30:
98:aa:df:87:1d:b3:06:6a:9e:b9:2a:ee:6b:b6:ae:
30:25:c9:b2:f3:2d:64:05:d2:39:83:4a:a7:ad:fa:
b1:7e:33:80:4f:81:a0:b7:b1:de:56:d6:65:1c:3d:
13:1b:2b:7b:00:b7:0b:4f:bb:65:76:ef:ba:1d:6c:
60:b3:3d:c6:fb:6e:a2:c5:fc:7f:59:f3:be:17:99:
4b:56:65:db:4b:17:6b:26:25:79:1a:e5:c0:1b:bc:
81:92:1e:e3:7b:76:b2:41:e7:75:95:82:0a:37:8d:
66:5d:c3:08:5f:70:f3:ad:4d:e5:38:74:2a:35:36:
ee:ab:e7:c5:f0:3f:14:00:81:7a:bf:59:46:81:5e:
5c:ba:6a:e2:ea:53:42:1c:b3:a3:33:87:5f:0f:6a:
32:1b:55:03:c8:db:66:10:08:f2:86:8c:f2:14:95:
4a:d4:d0:40:a7:21:bc:1f:71:58:8f:fb:e5:9c:4c:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6E:EC:3B:4A:BD:EB:B2:C0:B4:15:8B:BA:41:32:A8:2B:E5:90:DF
X509v3 Authority Key Identifier:
keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ee:fb:2d:9e:55:6b:e4:a5:82:36:b9:89:b0:e1:d1:77:59:
7f:89:6f:db:bc:0f:a3:21:d7:92:a7:51:0b:cb:8a:1f:5a:5a:
06:4e:b7:f9:c2:52:09:84:0f:71:12:3d:9a:c2:21:d9:8e:de:
d6:ed:4c:af:18:41:c7:02:e7:0b:1c:56:dc:c2:40:49:c7:e4:
c0:7c:41:29:27:f5:68:01:f2:43:50:65:68:81:05:44:84:d2:
3b:eb:55:c8:fd:90:aa:ac:4c:d0:cf:47:f6:e6:e1:7c:fc:4c:
e2:b1:7f:ef:4c:82:91:b0:b6:68:3f:9d:e7:e9:1e:bb:08:b3:
0c:9a:1c:80:3b:94:4f:95:54:53:94:66:64:f2:97:5d:ae:ae:
37:63:d9:22:47:11:2d:3c:3e:bd:da:f3:d9:ca:7e:09:91:a7:
a1:ab:cb:b4:59:13:d7:7d:a0:76:e1:bd:7d:4b:90:1d:b8:07:
57:5e:03:74:7e:91:84:ec:b1:15:d2:32:20:28:74:4f:75:6c:
70:c3:f5:17:3c:9b:d4:bb:2c:9b:b3:0d:cc:2b:37:69:ac:9f:
84:c4:1b:5a:7f:61:6e:d4:60:c8:1b:82:79:d2:10:8c:66:2e:
0e:8d:4f:50:1c:bb:1b:55:fa:2f:43:4e:d0:1a:81:d0:86:b8:
1a:57:f6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:24 2025 by rpki-client