Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: EiknX4z5VyiuX7V2Bv5wq3Og5Nh5Q7zGAaD3/rwyZ+8=
Subject key identifier: 02:BA:E1:9C:94:8A:92:BE:FB:BF:2A:A2:A7:BE:48:FA:60:67:18:A2
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 0197BB58C9AD6D5FFEB7311379B2A1AE81E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1559
Signing time: Sun 29 Jun 2025 11:00:47 +0000
Manifest this update: Sun 29 Jun 2025 11:00:47 +0000
Manifest next update: Mon 30 Jun 2025 11:00:47 +0000
Files and hashes: 1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
2: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=)
3: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
4: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: 20SNQGXLVYotLYc+p/v/7TNz/k7/xj/PbjSbUEJYvOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:58:c9:ad:6d:5f:fe:b7:31:13:79:b2:a1:ae:81:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jun 29 11:00:47 2025 GMT
Not After : Jun 30 11:00:47 2025 GMT
Subject: CN=02bae19c948a92befbbf2aa2a7be48fa606718a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:7c:77:84:b6:22:4d:f0:80:c7:ab:61:0b:
23:c9:21:c9:89:65:0f:62:9b:4e:61:b3:35:1e:33:
ab:de:92:55:45:cb:1e:2b:3c:cf:a1:9f:75:77:37:
3a:94:c8:58:3e:5b:be:46:51:c4:ff:95:48:6e:76:
a4:84:c2:3c:8a:43:07:4e:c3:a1:64:c7:cc:0a:ea:
0a:19:ef:c4:5b:6b:f2:cc:43:8b:d2:6d:f2:2f:d4:
ba:e3:fc:c9:10:60:46:24:16:49:b8:2f:73:15:65:
89:47:82:ab:a4:35:fd:4a:ff:37:4b:70:f0:8a:76:
bb:8b:5f:07:c4:e5:6b:f5:64:07:71:9e:8b:12:cd:
37:6b:7d:d9:9e:33:7a:cf:d1:21:ee:47:cf:50:b6:
4d:20:24:92:66:70:9a:74:ac:85:4f:bb:21:65:28:
c5:18:d5:2e:9a:c1:0d:5b:d5:dd:52:ea:2c:c6:bf:
a1:47:b2:07:91:78:88:32:27:95:d8:30:a2:18:67:
35:19:e7:c4:c6:3e:8f:2a:37:e2:69:d0:67:76:50:
12:fd:3a:41:18:ea:4e:2b:3d:f2:73:8b:93:f7:94:
f0:19:26:27:4b:00:0a:aa:75:89:f8:70:f3:ff:92:
b6:01:ce:b0:38:61:47:6f:14:4a:03:5b:6d:73:e1:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BA:E1:9C:94:8A:92:BE:FB:BF:2A:A2:A7:BE:48:FA:60:67:18:A2
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4c:19:51:f5:83:cd:b1:5f:52:44:70:4f:aa:75:57:28:47:
74:e0:b2:da:1c:89:36:e2:fb:75:46:fa:07:38:e2:6e:25:f8:
d0:a2:6e:ff:10:ef:0e:67:24:bd:92:ff:a0:51:07:21:a5:d4:
ab:f9:74:41:fd:a0:38:e5:9e:72:50:cb:40:a1:63:d5:9c:9a:
26:73:a4:a8:a0:e4:bd:a6:71:99:f0:fa:74:6c:70:b1:eb:25:
1e:aa:1b:8d:df:3b:a7:3f:e0:ce:a0:b3:4c:f0:46:c9:bf:8b:
ac:31:f5:41:f0:92:e0:cc:90:9f:09:a7:3d:64:25:de:4e:a2:
94:e4:82:c5:2d:8d:b1:ab:ee:82:7b:28:64:c8:d2:c2:f6:79:
90:43:2d:d0:93:04:87:7f:02:a0:54:f3:a3:fb:75:dc:5e:6e:
25:f8:de:53:ae:ed:f3:cc:58:f8:22:06:78:3d:8e:25:b5:9b:
b8:3d:ad:ab:8f:44:f5:5e:54:92:0b:9a:56:f6:fd:a3:7f:b8:
26:3d:ec:59:52:a2:b4:bb:54:b3:1d:19:ff:e7:1b:08:b9:c4:
82:4a:65:ce:2a:69:56:be:c0:1f:cd:2b:7e:e6:76:2a:06:39:
29:f1:f8:67:35:01:bd:4a:1c:4f:6a:d5:dd:2d:be:89:50:56:
38:97:e2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:16:36 2025 by rpki-client