Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: oqQiehVJr1jhcx7UWdl7CnMq5pnjqCn48L0VsTyFFfQ=
Subject key identifier: D6:A6:F9:7B:B1:84:18:DD:85:00:9B:D5:90:C9:BB:D9:B7:22:95:A5
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 0197B7B38215AF0521B4857A3C64D4F66DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 0F34
Signing time: Sat 28 Jun 2025 18:01:24 +0000
Manifest this update: Sat 28 Jun 2025 18:01:24 +0000
Manifest next update: Sun 29 Jun 2025 18:01:24 +0000
Files and hashes: 1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=)
2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: xrxp37AlXF23Ykj41icp1mVd/TGJ1WdX1K6rr4v8N0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:82:15:af:05:21:b4:85:7a:3c:64:d4:f6:6d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Jun 28 18:01:24 2025 GMT
Not After : Jun 29 18:01:24 2025 GMT
Subject: CN=d6a6f97bb18418dd85009bd590c9bbd9b72295a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:e2:3c:b5:9f:b7:be:b8:2c:36:31:57:c5:
1a:34:8e:4d:34:b8:46:0b:53:24:6f:64:34:d5:45:
7e:6e:d4:af:1c:e5:7c:47:1f:7e:3c:2a:bc:9a:fc:
a5:1b:b4:99:24:56:7e:61:1b:aa:0c:4c:b5:bb:18:
dc:85:f8:a4:e4:ed:f2:e9:77:01:c4:36:b2:1d:3c:
e0:8b:12:bc:ad:d5:93:a7:45:cf:d4:e5:ea:b3:f9:
ff:05:c9:6c:c1:31:b3:57:8b:86:ab:af:f9:c2:02:
58:b2:a9:8e:c2:ba:94:41:e9:e7:df:ff:7f:2d:74:
24:4a:af:59:39:15:e6:0e:f7:6e:76:6d:15:28:02:
7d:57:65:3b:b9:ac:5a:21:6f:ba:07:80:15:85:c7:
cc:c2:19:dd:cb:10:34:c4:b8:13:c7:20:4d:a2:3e:
3d:f6:0e:18:2e:97:e1:85:d8:c1:e7:f3:1b:e5:dc:
4d:51:5a:26:3b:6d:86:d1:0e:b6:04:94:6b:3a:f9:
b7:db:33:9e:fe:c0:da:fe:bb:31:67:f3:b7:15:91:
41:f9:1d:8a:64:eb:e2:41:3a:83:57:6b:0e:13:f1:
2f:be:65:41:60:5c:8e:b6:a0:a8:8e:c2:bf:d5:7b:
f9:31:8a:2c:a3:15:34:d3:2e:96:2d:95:88:ec:fd:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A6:F9:7B:B1:84:18:DD:85:00:9B:D5:90:C9:BB:D9:B7:22:95:A5
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:62:20:0f:a1:ad:38:4f:55:0f:cc:9c:76:5d:1d:d2:b3:07:
79:8b:af:dc:3d:19:fd:13:af:3b:98:27:e7:4b:76:42:ae:71:
f7:f8:3c:08:74:24:8a:05:c5:19:55:14:32:bb:96:49:69:ac:
56:81:a7:1c:f6:c9:23:08:3e:3f:8d:7e:b9:fc:cc:5f:8e:44:
47:2e:af:70:0e:e0:4f:c0:5c:43:d1:9f:da:ba:30:76:20:5c:
b9:08:5a:8f:b1:6d:21:c5:f5:50:ae:1d:a1:ae:a8:43:aa:a2:
2a:e4:4e:2f:a5:8a:28:e3:ed:38:e0:33:62:2d:cf:55:aa:55:
7b:f0:b0:4b:14:0d:7f:15:dc:18:94:c1:c2:8f:ea:9f:f2:61:
cc:ea:58:17:7b:03:10:29:25:6f:30:5c:db:9e:44:98:bc:d9:
79:69:0e:a5:d5:d6:83:b5:a8:28:9a:7b:9f:b5:b0:ad:e4:a8:
2f:40:ca:6f:1c:1b:7b:99:a7:d3:c2:8d:40:81:26:62:a6:b9:
22:13:7c:54:2b:ff:10:8a:75:6a:11:e6:20:d6:bb:c8:a0:39:
59:9c:6f:cd:62:c9:2e:3c:3e:9e:82:77:94:b4:a4:a4:40:da:
86:1b:c2:3c:20:b1:6c:93:2b:56:47:22:78:03:07:a5:7a:41:
4f:8c:b1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:23 2025 by rpki-client