Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: sbLBIHeK6+feD8uOO6JTdS+xJDvwsD0smeYaeh70ZNs=
Subject key identifier: 2E:1F:0D:CA:C7:0D:1B:78:F4:7E:51:10:0E:3D:19:32:09:21:83:89
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 0197C12447B6C3513339996B81F104DDAFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 051D
Signing time: Mon 30 Jun 2025 14:01:09 +0000
Manifest this update: Mon 30 Jun 2025 14:01:09 +0000
Manifest next update: Tue 01 Jul 2025 14:01:09 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: Im1qYKuk0xGa4zM4FL2p9tHv+X7nE5qsbS9/Dk9l6I4=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:47:b6:c3:51:33:39:99:6b:81:f1:04:dd:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Jun 30 14:01:09 2025 GMT
Not After : Jul 1 14:01:09 2025 GMT
Subject: CN=2e1f0dcac70d1b78f47e51100e3d193209218389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:01:ea:12:9d:9b:1c:aa:46:a2:da:4f:cf:
f0:00:f3:1d:78:57:2d:fa:dd:04:d8:11:48:f6:a0:
85:89:45:02:6c:39:f0:d9:02:29:7c:af:e6:37:5f:
5a:0c:ad:95:5d:c1:15:0d:35:d2:a6:b2:f9:3e:cf:
17:d8:c2:f0:f9:12:c7:4f:2c:70:8e:32:c5:9f:0e:
58:37:2b:24:18:48:4c:6a:22:d2:2b:14:43:d8:2e:
18:a7:d0:c6:80:23:b8:83:61:f3:0a:b7:a6:ae:57:
7b:61:01:f1:1d:0b:f0:46:da:6a:a4:f4:ab:f5:43:
81:af:72:40:52:d4:7d:72:bd:f2:33:9d:88:70:b3:
16:22:86:85:d0:da:b4:6c:31:78:b2:f2:ee:70:81:
b0:00:df:82:f4:7c:80:25:8b:a8:84:40:17:3c:a8:
28:be:4d:f2:35:c5:4e:b6:ad:da:3e:b5:03:02:a3:
50:d4:b0:bc:4e:7b:07:ed:5e:73:11:d2:71:85:bf:
8b:2f:29:14:4b:c7:47:ea:74:3c:65:3d:0b:10:70:
6f:b7:69:50:58:73:56:4e:e5:02:6c:14:04:97:e1:
81:f8:c1:0c:c8:04:f5:f1:a5:ce:68:b0:35:2f:c2:
23:49:1f:c7:31:0b:35:9c:73:d5:ef:0c:1b:65:a3:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1F:0D:CA:C7:0D:1B:78:F4:7E:51:10:0E:3D:19:32:09:21:83:89
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f1:9b:56:b6:13:28:5e:1f:86:98:bf:53:ba:20:ec:e7:81:
f3:10:81:61:b1:11:1b:b4:37:22:96:e4:4e:95:f2:3c:61:c2:
eb:6b:8c:0b:75:d9:2c:f9:47:6f:be:b1:7b:c0:bb:e0:88:66:
fe:ae:1f:0c:fc:b7:1c:bd:96:52:cb:25:e6:91:c3:74:9a:69:
83:17:6e:19:77:99:19:ce:6c:99:c9:88:3b:31:c5:d9:67:57:
d5:54:76:48:b4:85:cf:e4:3b:2b:ff:1a:d5:60:8b:91:da:b2:
cc:7e:10:06:9b:d0:c0:2a:a6:1e:34:f8:78:68:09:5f:e0:e0:
89:72:e6:ed:9a:11:a8:0e:45:e7:f4:ef:88:d6:40:6e:62:d5:
7d:7c:84:bd:64:fa:9f:de:56:29:2a:29:d8:7d:96:4b:29:9a:
ba:89:eb:27:11:58:34:c7:c3:70:b8:64:a2:ec:6e:ce:0d:7b:
5f:fa:65:cf:7c:dc:99:eb:93:71:b6:20:fe:fa:e3:29:f5:ac:
b0:58:86:ca:c1:05:6c:06:e1:12:bc:2e:90:95:7e:a5:2e:26:
44:0c:45:aa:89:44:85:5b:bb:01:f3:31:b0:7a:02:95:72:c4:
ad:eb:ca:1d:c1:c7:29:01:77:83:9f:80:55:8d:21:17:db:31:
d4:df:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:37:05 2025 by rpki-client