Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: i9Rmybz/ZATcEtP1SAsm0fNCSAnwxhGaree7Nm2FE+k=
Subject key identifier: 3E:C9:0D:CA:0E:3F:9A:67:EB:08:D6:EF:1D:7E:BF:BA:85:BD:72:73
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 01978357827BF683DEE8813BB5367B2E0BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 159D
Signing time: Wed 18 Jun 2025 14:00:39 +0000
Manifest this update: Wed 18 Jun 2025 14:00:39 +0000
Manifest next update: Thu 19 Jun 2025 14:00:39 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: wMwSPv8wvNGjrYghaf/B9K5Q7/rXv+7fiX93vn/CQJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:57:82:7b:f6:83:de:e8:81:3b:b5:36:7b:2e:0b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Jun 18 14:00:39 2025 GMT
Not After : Jun 19 14:00:39 2025 GMT
Subject: CN=3ec90dca0e3f9a67eb08d6ef1d7ebfba85bd7273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:26:3f:db:cb:83:52:eb:ed:b9:4e:d4:d6:
a2:38:c4:05:ac:b9:ca:ab:b6:6c:a3:16:31:8b:81:
a9:87:f0:79:e1:9e:04:3a:7e:1a:2d:77:cc:71:46:
8d:8e:9c:f0:36:37:61:35:35:9c:27:fa:01:2f:8d:
94:eb:9a:7e:29:e4:21:9a:67:2a:29:a7:b8:04:30:
45:94:41:60:a8:cd:57:0e:d0:89:b2:68:c2:3e:8e:
c1:d0:72:a8:b1:05:06:ec:f0:36:29:d0:a5:97:6e:
b3:d9:ce:4e:57:42:6b:34:0a:3a:28:6b:ad:04:09:
e6:8b:c8:4d:a9:c7:a8:4e:80:b4:a6:39:ed:c3:a3:
9c:a0:9e:f4:67:c1:5a:ff:18:db:aa:45:de:c0:d0:
a7:8a:7b:fd:77:1f:26:a9:86:91:70:bc:24:b2:83:
bd:47:e9:80:6c:68:06:a6:90:a2:8c:8b:1c:42:07:
ee:00:cb:ff:2a:13:6d:a9:fb:da:ab:41:bc:73:17:
0f:03:6d:64:8e:dd:eb:f6:ce:ce:17:96:8a:1d:c2:
e7:fe:09:74:85:69:24:50:74:b7:8d:e4:34:42:f9:
12:9f:3f:c1:9c:89:17:1d:1e:6d:64:88:10:e0:07:
77:d7:b9:15:2e:a7:36:cf:a5:24:4a:7d:5b:1a:d2:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:0D:CA:0E:3F:9A:67:EB:08:D6:EF:1D:7E:BF:BA:85:BD:72:73
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7d:71:df:8f:ce:ea:aa:85:58:48:97:0d:38:d7:0e:9c:77:
36:35:18:ef:17:f4:e8:5d:ff:b5:97:0e:92:ef:52:50:eb:53:
5f:6f:4f:cd:2c:2c:a6:7c:eb:9f:f1:99:82:50:51:b6:b6:66:
84:d0:ef:22:60:f0:a6:90:20:7c:08:cb:9f:8d:21:75:85:59:
cf:38:ed:02:24:6e:41:a5:c4:38:d7:5b:7e:aa:3b:81:81:41:
fb:77:f8:f2:76:4d:f2:fa:c5:ea:c1:d5:b1:fc:9f:2f:1b:bd:
1b:4b:a6:d8:57:49:1e:ce:fe:00:16:28:aa:18:c1:c1:51:a7:
5d:f4:da:4a:b0:30:7c:f4:e3:d7:e8:c8:cd:0f:ce:a4:7e:cb:
0d:c8:e7:4c:89:04:4c:fa:a5:5c:b0:4f:75:a9:80:71:d3:31:
65:1f:c1:47:3c:6d:e3:af:a5:1c:ae:f4:e9:05:7e:9d:1f:95:
d1:14:2f:18:26:0d:43:da:e9:6b:88:59:e0:b6:3b:75:74:1d:
55:f3:a1:93:4e:0c:07:76:f1:fb:33:ce:e0:6e:f6:40:2b:29:
8e:1a:d3:c8:2e:38:05:2a:c4:7b:7d:ff:31:b7:3a:b6:09:bf:
68:f4:44:7e:eb:30:f7:e1:7c:75:93:34:ec:a2:17:51:cd:73:
7c:65:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:26:03 2025 by rpki-client