Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: 6u/weoOQdNOZ4g+kt+f91a65DtEUhji377teAejhpBA=
Subject key identifier: E9:C6:1E:81:F0:C2:79:D9:04:A1:46:F2:A7:9D:FC:79:8B:93:94:93
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 0197D0980C9866FE72AF8FC331A0500DF09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 15C7
Signing time: Thu 03 Jul 2025 14:01:54 +0000
Manifest this update: Thu 03 Jul 2025 14:01:54 +0000
Manifest next update: Fri 04 Jul 2025 14:01:54 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: 7je8U1+LVXHWU3dxC3P2UCiE7hCKVl6rN6m5hFaJJuw=)
2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:98:0c:98:66:fe:72:af:8f:c3:31:a0:50:0d:f0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Jul 3 14:01:54 2025 GMT
Not After : Jul 4 14:01:54 2025 GMT
Subject: CN=e9c61e81f0c279d904a146f2a79dfc798b939493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:4c:94:67:04:e5:bc:7c:f2:e5:9d:a9:79:
24:d7:45:38:96:77:de:be:0a:6f:7c:19:66:24:91:
2c:12:83:df:d0:bb:35:8d:3c:d8:24:64:da:29:d5:
e5:15:50:71:91:1c:ff:4d:ac:b5:27:5e:c7:de:89:
67:4e:48:f8:08:7c:04:16:86:d5:47:18:a3:23:84:
c1:e2:ed:39:7a:8d:41:db:ef:c4:aa:ae:0b:fa:24:
b2:95:28:9e:dd:3a:3a:1d:dc:d9:a1:4d:d6:b6:bc:
9c:33:a3:90:84:92:6f:06:0c:d8:f4:a4:6a:1c:33:
d6:55:8f:b1:f5:74:12:6f:5f:25:bd:ca:38:37:1c:
60:0f:9b:8c:4b:62:c7:40:0e:d6:88:1c:b2:d4:58:
e5:3b:e9:9e:44:7b:73:d1:6d:fe:93:c1:8f:8f:d6:
dd:72:a5:25:51:09:33:a5:92:86:9f:ee:8a:5d:9e:
13:cd:f6:e7:8d:c5:bf:83:5f:69:ab:21:81:84:15:
19:3b:ee:7f:09:b5:5b:fc:ed:b0:4e:84:5a:c4:e3:
fb:5d:88:30:8e:cf:82:2e:aa:3e:0c:f0:be:ba:a8:
84:f7:29:5f:05:55:94:00:c4:00:a6:69:75:d5:fe:
6b:a6:c8:1d:b7:3c:50:98:9d:95:cb:a7:35:a3:ff:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C6:1E:81:F0:C2:79:D9:04:A1:46:F2:A7:9D:FC:79:8B:93:94:93
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:13:47:f4:f0:b3:64:36:5a:60:55:18:2d:ae:7b:28:4b:64:
9d:93:ea:f4:0b:34:f1:02:e4:bf:78:3f:6d:35:cd:d2:b7:98:
1b:9b:e5:8d:47:73:63:a2:3e:08:6b:99:bf:94:c9:26:93:1f:
e6:97:52:56:dc:98:7f:16:5b:05:8c:a4:e7:6b:a1:55:69:cb:
ae:f2:5f:d5:8c:17:8b:21:b2:f3:38:5a:68:0c:50:be:fd:b6:
a5:79:63:23:f2:ec:8f:80:3a:84:09:e2:87:84:31:75:1b:da:
4e:15:88:70:79:d7:d2:67:74:7f:36:e8:7e:05:33:be:44:8f:
bb:39:56:de:6a:bb:f4:14:36:82:c7:94:8c:f2:95:15:f7:f8:
ad:22:fc:fb:79:28:4a:18:41:5a:fa:40:ea:9a:4e:57:c7:fa:
2c:77:4c:46:68:cb:3e:4f:ac:ac:8b:a7:ea:fc:78:69:5b:35:
c7:d6:27:19:d3:a3:f9:63:dc:53:37:f5:1f:fa:4d:cc:71:f5:
66:72:5e:6c:8c:72:ba:23:83:cd:c1:cc:72:8e:6c:a1:40:59:
70:4a:5e:47:6e:78:95:de:11:49:46:29:bc:b2:0e:01:fa:5a:
24:e7:cc:4e:aa:2b:25:2b:15:44:ba:48:8b:ba:61:6e:08:02:
46:07:b3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:55:57 2025 by rpki-client