Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: 5jJ0Rl20nUZjs1FzOa/ZvjqbQS2/c/ZEUu1gtYoL4SA=
Subject key identifier: FF:0C:C7:28:12:9C:76:48:95:EF:2B:DD:AB:9A:55:61:46:92:2D:D7
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 0197B6329C5C417F37A0F73FA9F7C8F73545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 11:00:59 +0000
Manifest this update: Sat 28 Jun 2025 11:00:59 +0000
Manifest next update: Sun 29 Jun 2025 11:00:59 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: lkCC3Ss865vcK7inDSOpOki2Pb1MvPdi23z0duYmYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:9c:5c:41:7f:37:a0:f7:3f:a9:f7:c8:f7:35:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jun 28 11:00:59 2025 GMT
Not After : Jun 29 11:00:59 2025 GMT
Subject: CN=ff0cc728129c764895ef2bddab9a556146922dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:d2:c1:b3:81:af:2c:b4:f7:97:9a:be:87:
9f:2c:e2:62:3f:6c:79:e9:51:9f:71:87:13:d8:b7:
58:e9:a0:71:19:f2:da:5e:5a:64:bf:0b:43:f8:ac:
55:bd:bb:05:3e:f8:f7:69:8a:40:02:4a:48:31:32:
34:cc:f3:ee:eb:e3:99:74:c7:d4:b7:54:14:01:e4:
0e:7d:3d:04:43:d3:f9:74:81:40:00:45:03:f0:8e:
3a:db:0b:dc:cd:bd:48:cd:76:d0:e8:bf:5b:c9:76:
e7:1f:e5:c3:5e:0b:8a:36:0d:aa:d1:47:da:62:4c:
a5:9d:ae:8a:a1:d3:4d:95:58:d6:47:8d:94:ef:99:
67:64:95:30:b0:08:6c:e4:2a:cd:b0:9f:cb:fa:42:
e5:12:07:7a:d3:47:bc:d0:ca:96:2a:e6:a2:e7:e4:
29:c8:c1:aa:5f:00:83:bb:ad:47:31:70:65:49:25:
65:13:d9:03:f6:b7:02:4d:a9:eb:2f:ef:ac:d1:0e:
fd:3b:f4:2e:52:77:38:9a:d1:db:39:d2:ed:d1:03:
6a:61:0e:53:4d:5d:e6:24:d5:e9:d7:dc:89:14:c0:
de:1c:50:6f:3d:f6:3a:da:83:c8:92:0b:2f:28:59:
02:9c:fa:94:a6:23:9c:c1:30:f8:63:cc:e3:56:66:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0C:C7:28:12:9C:76:48:95:EF:2B:DD:AB:9A:55:61:46:92:2D:D7
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:cd:4d:52:54:bb:92:24:80:28:07:f3:d1:26:13:53:64:35:
6c:46:45:fe:bc:90:17:b0:76:58:f8:a1:50:64:23:7a:f5:6d:
15:50:e7:bc:29:0c:19:8a:5a:5e:a9:d4:21:36:7d:85:27:98:
a8:a8:b2:17:d0:4c:2f:3f:1e:00:04:ed:58:f5:a4:1d:71:94:
95:bd:04:08:ef:55:a7:7d:af:43:74:26:83:ae:29:09:1b:27:
b1:dc:4c:f6:94:6a:2b:68:ed:1a:ae:4f:32:d2:c3:01:f2:fa:
67:bc:12:6f:e7:92:00:f8:a8:72:b9:f5:0f:5f:ac:1e:70:97:
e7:d1:08:a8:d9:6e:85:eb:45:1a:12:83:b4:68:4e:47:9a:84:
6d:57:76:47:de:64:39:89:4a:68:01:78:85:73:80:69:54:8c:
db:65:c6:78:07:5d:10:13:d1:7d:de:f5:cb:66:3e:b1:63:0f:
70:67:01:b6:5b:e4:e7:cf:d6:bd:9a:ef:c0:76:03:a8:a3:05:
a9:72:b1:2d:7a:13:ce:95:3b:41:8c:68:19:14:4c:1f:a9:7f:
2b:a5:f5:06:3e:44:71:c9:4e:b2:3b:a0:26:ca:19:b7:aa:d5:
28:c4:0a:48:2c:b8:80:56:78:f0:fb:e9:84:3d:ac:ce:82:fb:
e8:33:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:16 2025 by rpki-client