Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json)
Hash identifier: 8743tO0H2CRiNb49d/oJ0GsY0mbRghCVB2IwqK2NHaA=
Subject key identifier: 8C:0A:71:AB:08:AF:09:CD:59:A3:6D:21:69:7E:40:9F:2C:1B:8D:AC
Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Certificate serial: 019770082B313DFCAFB35F3DE6F8E6D3FDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
Manifest number: 0AE8
Signing time: Sat 14 Jun 2025 20:01:12 +0000
Manifest this update: Sat 14 Jun 2025 20:01:12 +0000
Manifest next update: Sun 15 Jun 2025 20:01:12 +0000
Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: +vvYFIXCGMGXd+lFmf+MmT5rP8HU0SVjvMFlFclsDCg=)
2: PiONgyQtYCxtAKel6AwlToYS7WY.roa (hash: GhuVBG356WKiZheC0jkKfbw1tCMHk61qHlrUSlnDnIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:2b:31:3d:fc:af:b3:5f:3d:e6:f8:e6:d3:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Validity
Not Before: Jun 14 20:01:12 2025 GMT
Not After : Jun 15 20:01:12 2025 GMT
Subject: CN=8c0a71ab08af09cd59a36d21697e409f2c1b8dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:9c:a1:bb:20:cd:9a:29:b0:82:17:b4:e4:
6f:4c:5f:7a:bf:27:7e:72:4c:51:71:a5:dd:0a:6c:
c1:de:bf:89:44:07:8b:99:35:91:52:68:28:f0:93:
44:87:b1:db:4d:f6:01:b4:f9:49:8d:08:d2:80:79:
c5:70:30:4c:9b:55:7b:3f:7b:d3:a2:ee:42:96:48:
62:dc:34:2e:fd:6f:43:76:cd:30:e9:00:87:bf:c3:
69:b4:12:d3:da:ab:87:62:45:65:aa:f8:98:58:4f:
38:1a:37:79:20:bb:41:8c:ea:4c:9e:db:d6:b5:62:
79:09:c4:44:b6:82:88:ea:19:5f:d3:cd:7e:b3:ce:
62:6a:e6:71:75:f3:23:d0:26:01:1f:df:2c:29:23:
a9:c8:80:8c:31:23:8a:cb:9f:e3:61:c2:c9:33:24:
ec:2a:0f:1b:52:c3:b9:a7:ff:4e:7a:89:3e:c3:c8:
29:1d:1c:54:ac:46:fa:37:63:9f:c2:5a:05:cd:7f:
ff:91:76:4a:f8:70:82:de:b0:74:3a:95:c8:b2:cd:
df:5e:56:44:c8:68:75:78:97:a5:63:26:81:f9:77:
08:c7:55:89:54:ba:a8:f5:ca:66:27:d0:8b:ca:66:
c3:8f:0f:f5:af:a7:ae:58:d2:77:1b:0b:a3:1e:b9:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:71:AB:08:AF:09:CD:59:A3:6D:21:69:7E:40:9F:2C:1B:8D:AC
X509v3 Authority Key Identifier:
keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1a:42:49:38:78:b6:29:98:50:39:0e:a3:cf:ff:73:96:5d:
55:c7:e4:53:90:65:30:ff:7c:c7:21:c2:6c:94:51:ab:ed:83:
34:4b:68:bb:f6:86:96:0d:6e:2f:f9:89:e6:0b:32:6b:c0:b4:
bb:38:52:65:ae:a7:83:17:7d:60:f4:ef:cf:04:3a:d0:1a:bd:
10:d1:0d:aa:47:cf:22:95:91:fc:47:0e:d0:3e:0a:db:c8:a6:
1d:50:59:84:62:87:0c:a9:6c:20:56:82:f5:ca:e3:3a:f9:b0:
b3:14:5f:6a:31:c1:ca:ce:9a:e3:17:1f:2b:03:5f:81:3a:27:
4a:92:6f:a1:f0:74:64:8c:62:21:c6:e3:59:53:19:0d:75:12:
e1:8a:4c:e2:2f:16:ab:e5:49:e4:62:2f:99:a7:8d:c0:d2:ce:
e3:c8:eb:d7:2d:5a:b3:b0:9f:b9:ef:3d:1d:03:9d:4f:09:9a:
98:6d:ed:52:80:b0:cf:11:96:19:b3:77:51:12:06:c2:8f:dd:
c7:f3:55:dd:57:88:5d:ec:ac:6d:05:97:fc:2c:fd:e7:38:fe:
34:b1:66:9b:15:75:66:40:9d:c5:af:7f:58:e7:0b:9b:c3:59:
ab:d8:55:30:8f:35:2d:ab:9f:64:34:61:05:60:d3:52:92:73:
ca:7c:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:06:27 2025 by rpki-client