Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier: j1N378664dOImw2KbWjHRLQFAZ39OgCN0oWPfUt9qvc=
Subject key identifier: D2:DE:DD:11:AA:7D:17:36:BF:4D:1F:DB:1C:02:E5:74:B0:A7:DF:B5
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0197BB90271BCB01EB30C829E01FB6AF8E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number: 15BF
Signing time: Sun 29 Jun 2025 12:01:15 +0000
Manifest this update: Sun 29 Jun 2025 12:01:15 +0000
Manifest next update: Mon 30 Jun 2025 12:01:15 +0000
Files and hashes: 1: 9BmVkWHqnPagXm5os2wnNWK9INk.roa (hash: 8RngoNykTFTJnIq5oyzFYRTf3TP7cyLKV5cry6M5mgE=)
2: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: 7sCHyur5yla6TwU6kNZsHtNIS41wFty/vbfjJcZqsC8=)
3: UceenS0AW37r9tIac-IPww_60R8.roa (hash: V8RGgQn1l8C/6JS3VLbt67ThWSSYzYF+1zDXdf2gvmc=)
4: XMfgeWsouW7zDItYh1JZ2jjj45k.roa (hash: vbzvSSJRPNTDibm8O4OpKJZcb0gn8EqIPSb4vf2O1YQ=)
5: bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa (hash: xgsMr2NauAKQSxWJwA/kjcmJfb7a4hHGqMdZNQtzfIo=)
6: ect9rt1iTOwU4l499MLwvhBDleI.roa (hash: uzI2RBjcPd1qUaeOmN2JzrZzLgn4U0x7LpGFh6u7YtQ=)
7: k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa (hash: wlxEmhfh10lsvP/Vr0aaNNA3fnG6+QPuVB7G+98rWuk=)
8: n15MEYNvv2pMvnP0JWDh9ke-rMw.roa (hash: a5c2NX6rzpDN08ss2QyMsYiZjq6GT9uV8kCAFrcH1WA=)
9: wb50_D1ewkMOUFxLDz2rdaS7yFE.roa (hash: oMtAJWBhFmyN0NJmKrxaTP7Y/Gbn/GmAXozjV5Dt6I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:27:1b:cb:01:eb:30:c8:29:e0:1f:b6:af:8e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jun 29 12:01:15 2025 GMT
Not After : Jun 30 12:01:15 2025 GMT
Subject: CN=d2dedd11aa7d1736bf4d1fdb1c02e574b0a7dfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:e2:71:a5:d6:16:4b:5c:f7:9d:99:13:93:
76:66:7d:e1:7a:39:38:b1:18:6a:4f:8e:ea:2d:a8:
a6:7d:bb:7a:0f:c0:cf:d3:52:cd:0b:03:67:b4:c6:
f5:8d:e0:2d:e6:d2:d5:f8:f7:9b:55:58:c4:52:2d:
ca:f0:9c:ca:57:a7:df:76:b2:8d:bc:bb:09:dc:60:
93:2a:a0:f2:76:64:65:96:d7:ec:22:51:19:bc:af:
d3:94:35:d0:6d:21:ca:b2:3b:e0:ae:91:05:d8:d0:
c9:10:9a:33:59:4e:95:8e:7c:86:cb:b5:a2:9a:0d:
f2:97:52:2a:7f:6f:98:08:a9:f9:91:af:34:bf:78:
d4:ac:00:a4:08:c3:52:d8:00:99:31:80:2d:aa:62:
03:21:d8:d7:e8:89:8f:29:ba:15:90:6a:14:0c:c6:
50:a9:07:b7:e0:f2:39:f7:61:d1:dc:55:4d:d4:de:
a7:84:7f:84:b2:93:5f:42:69:fd:bb:a2:71:60:61:
44:2a:e4:db:7d:92:2e:7c:1d:5b:de:77:51:ba:7d:
3b:8e:f3:0f:80:d9:82:bf:e0:48:14:76:07:aa:67:
03:9a:2a:82:c9:6d:69:b5:cf:dc:73:56:96:7f:e8:
a6:d8:28:c3:a8:97:3e:1e:8c:96:15:0d:10:02:06:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DE:DD:11:AA:7D:17:36:BF:4D:1F:DB:1C:02:E5:74:B0:A7:DF:B5
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e5:c6:c0:16:7e:bc:ea:1d:05:e4:4f:de:72:e6:b6:15:c9:
bb:c9:83:24:1f:c8:0a:3d:89:9a:e1:ff:07:51:31:cd:b5:b2:
7a:76:15:7d:6a:65:98:19:e2:ca:70:84:f3:c1:00:b5:d1:82:
d2:46:a3:a9:d8:28:c0:f5:b1:c0:50:70:48:d2:3f:46:27:7c:
79:36:ab:b4:25:42:90:5d:5d:6a:22:ed:29:2f:e2:9a:13:83:
b1:9c:be:5c:30:a5:ae:84:94:1a:4e:c4:9b:00:ae:1c:2c:12:
4a:07:6b:8f:96:0d:4c:82:be:04:29:a1:d5:59:75:c6:aa:d8:
08:ea:42:c2:c5:40:10:3e:65:a5:a7:e4:cb:4f:b8:03:50:b0:
58:80:06:8b:16:1a:9b:27:0c:32:24:f8:08:a7:68:21:03:b9:
3b:52:52:50:8d:36:25:00:4e:82:4f:1d:97:3a:7e:57:9b:da:
a1:fe:d3:9a:47:02:11:dd:96:ac:bb:e2:af:b9:49:8d:d4:86:
49:cd:0e:4f:84:c8:fb:b0:f4:e3:e4:af:27:1b:ae:a0:9f:ce:
92:5e:0e:5f:d2:4a:11:36:8e:00:47:9e:f3:5d:bb:7e:45:42:
96:f2:1d:fe:16:88:b6:f5:8e:66:00:f0:72:35:1e:6b:9a:95:
74:22:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:47:57 2025 by rpki-client