Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: 1BSXblyJCWkvqcW7Jjusjj0ua9t5XnojyFj942Lv2yo=
Subject key identifier: B3:3E:30:06:82:F1:87:B1:88:43:C6:B7:0B:2C:F8:18:15:65:83:E4
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 0197BA7EA82FB3E1797C22BEA331E770986F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0B01
Signing time: Sun 29 Jun 2025 07:02:32 +0000
Manifest this update: Sun 29 Jun 2025 07:02:32 +0000
Manifest next update: Mon 30 Jun 2025 07:02:32 +0000
Files and hashes: 1: aaz13NJRzQSWik1cFJTAx8gsPnU.roa (hash: CsCDTEtayCoWB3zZSGEuzJzCmVEA7r5a08XAY8x/Hbg=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: Rq/v2zYr5RkvWIn/IXTwBwtbKW6bZ2vP5Bcj/ptmBVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:a8:2f:b3:e1:79:7c:22:be:a3:31:e7:70:98:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Jun 29 07:02:32 2025 GMT
Not After : Jun 30 07:02:32 2025 GMT
Subject: CN=b33e300682f187b18843c6b70b2cf818156583e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8c:da:6e:a9:2c:8c:35:0f:37:8d:6c:06:ef:
88:23:1b:e8:ac:ec:d9:81:03:2c:76:bd:8a:04:e6:
c8:68:e2:d0:d2:b0:c5:cf:95:31:36:37:9f:1a:1b:
fd:9b:c4:4e:4d:de:98:00:f7:60:3f:93:22:ab:fd:
97:66:8f:ed:a4:b9:25:f0:ce:f3:a8:9b:80:35:f3:
44:29:ae:11:dd:96:d5:1a:37:88:ee:da:80:a8:48:
04:67:9d:37:41:0a:2f:c1:fd:8a:2e:45:5d:d7:96:
48:30:12:1e:37:67:88:bf:3e:e7:54:58:70:f6:26:
96:59:5b:6a:32:5c:a6:b3:1e:54:24:e5:5c:c0:70:
d1:f4:81:98:12:cb:d3:97:6f:e2:87:85:0f:55:60:
a4:0b:45:d1:de:d9:f6:05:14:f1:d8:29:01:69:78:
73:40:c8:72:90:f7:e5:e9:e1:94:47:d2:f0:3e:dc:
4a:ba:d1:a7:ff:87:c0:19:b4:d3:95:fd:c9:92:56:
4e:80:a6:26:a5:32:72:01:0b:1c:21:07:2d:d2:0f:
1d:06:34:30:f3:96:13:a5:70:66:db:bc:ad:db:0c:
24:58:ca:66:cd:b2:ba:a7:ca:2f:69:4e:c4:1c:2f:
a9:3c:68:c7:43:b0:12:d4:aa:fd:35:35:ec:75:10:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3E:30:06:82:F1:87:B1:88:43:C6:B7:0B:2C:F8:18:15:65:83:E4
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7c:f4:5a:ba:1e:1e:02:43:bb:36:68:a2:df:21:b8:f5:7e:
8a:4c:8e:5a:2b:63:d5:cf:c5:ae:f1:0b:61:07:0e:0e:be:42:
bf:4b:4c:65:fb:eb:5e:a7:f0:b4:3e:b3:fd:52:d4:bb:e3:79:
6a:97:1a:a2:63:32:3c:e0:1b:12:84:a9:f7:34:08:26:e2:2d:
05:94:57:46:22:2f:80:a7:c1:42:1b:48:95:18:f1:da:72:16:
52:46:f6:cc:ee:e4:52:23:5d:c1:d6:a1:15:06:76:ea:54:6b:
05:b1:c7:12:51:b6:62:ea:48:3b:68:ff:00:74:10:cc:86:0f:
46:1d:23:27:77:58:b0:b3:66:70:bd:b2:ed:59:4f:7d:26:9f:
32:f2:90:c8:03:97:46:fc:b4:ff:dc:10:11:48:b5:e9:f0:86:
49:a6:1f:b7:53:dd:fb:a1:fa:bb:69:71:04:d6:5c:b6:32:db:
d1:50:d2:27:86:e1:b6:4c:f3:64:03:68:9a:85:99:74:2a:e5:
fa:64:24:15:bc:50:3c:02:33:26:e9:d7:0b:54:69:70:96:dc:
a4:21:40:79:eb:2b:12:61:dc:6a:dd:de:0d:42:83:a8:8e:e6:
1d:eb:be:a1:4c:c0:45:ed:b3:c6:7a:0e:d9:a9:1b:bd:e9:65:
41:ab:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:55:55 2025 by rpki-client