Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier: X25El5/DdYlYOgE7WPTPCNSzf+LxpVmLvnXKLnNsRLA=
Subject key identifier: 21:55:D5:C1:1E:C4:BD:F9:7C:B6:0C:EB:71:11:CC:8F:50:36:E7:A3
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial: 01977C0BC138B0AB2ECE814A0F696E67D631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number: 129B
Signing time: Tue 17 Jun 2025 04:00:34 +0000
Manifest this update: Tue 17 Jun 2025 04:00:34 +0000
Manifest next update: Wed 18 Jun 2025 04:00:34 +0000
Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: 3olWV5ChejSBhXpXUUqEtJuaPKqG5AYblsv2+RhN+cM=)
2: hv7umvI_Ed2T9Pd9d7RaxMNZ_A4.roa (hash: JaoBtJPnKetAcsAKSYzZugD1L/s0rkCRonZhSkC43s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:0b:c1:38:b0:ab:2e:ce:81:4a:0f:69:6e:67:d6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
Validity
Not Before: Jun 17 04:00:34 2025 GMT
Not After : Jun 18 04:00:34 2025 GMT
Subject: CN=2155d5c11ec4bdf97cb60ceb7111cc8f5036e7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:6a:e4:e4:07:5e:56:0d:b7:a8:2e:a1:48:
e5:a6:1b:ab:bd:d2:b2:ef:b1:d3:d3:dc:13:ad:9b:
49:85:8a:f9:9c:2d:15:8b:4d:e2:e7:e8:e4:33:78:
80:10:52:f8:a7:68:76:be:79:1c:d4:1a:1f:e5:ad:
c0:c2:fd:c5:bc:d3:c1:41:66:66:62:08:64:f3:5a:
76:b7:e2:88:55:e0:ee:25:d9:87:10:4f:3d:d2:c4:
8c:0e:a4:91:e6:6e:41:bb:ec:58:cb:2a:61:b4:ac:
e4:35:52:3c:5b:e0:ac:43:6d:f3:e9:6b:e6:cb:9f:
53:26:b1:8c:47:bb:1f:c1:82:0f:38:30:a4:22:e1:
33:78:cd:f0:4f:d0:9f:09:51:98:9f:8b:1e:bc:08:
cf:66:a8:6d:c0:df:76:0e:97:38:ba:cb:76:8e:8b:
c6:49:98:ea:fe:6b:7f:bf:f2:c7:e0:d4:77:2b:80:
73:cd:f8:82:ff:c3:85:be:98:29:e7:d7:70:fc:69:
97:e1:ca:9b:9c:44:a0:8f:14:6b:62:b2:e9:7c:a8:
df:61:43:f9:ba:0c:4a:04:cb:50:8d:2c:69:2e:41:
0a:3a:74:9d:cf:d2:ad:8c:13:a6:55:88:25:5f:17:
86:a4:8e:3c:6f:a6:00:4a:79:05:20:30:e5:89:46:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:D5:C1:1E:C4:BD:F9:7C:B6:0C:EB:71:11:CC:8F:50:36:E7:A3
X509v3 Authority Key Identifier:
keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cb:e0:e9:31:bc:6a:95:be:62:16:0b:64:9b:6d:fe:ac:a8:
7d:bc:f7:08:fb:a6:55:80:bc:5c:2e:66:60:51:7c:9e:3f:76:
90:27:ea:37:1e:be:17:22:34:fc:ea:eb:8a:80:24:b1:8d:2d:
e4:f9:9a:fd:9a:1e:ae:e4:40:6c:0b:bc:04:64:0e:22:52:76:
b8:bd:46:35:d9:01:d2:24:b3:16:4c:e9:f4:53:fa:44:0a:2a:
9c:c3:5a:39:18:de:fc:ba:f6:99:92:a3:c0:ce:78:6a:4b:c6:
de:f4:34:cf:06:43:d1:ac:8d:bd:2f:40:69:ee:67:04:fa:3a:
5c:ed:94:80:9b:41:01:65:3e:3f:74:5f:69:d4:7c:98:72:fd:
33:c4:ea:4d:59:1e:91:49:d1:87:3e:dd:00:4d:5c:46:46:da:
3c:99:96:c2:ff:62:3a:a9:35:bc:d8:83:66:f2:c7:12:c9:6c:
5c:6a:e6:4d:14:68:85:13:c0:34:3b:f3:f2:5a:a6:26:53:38:
2c:6d:a3:cb:c0:01:24:b9:76:50:fb:dc:52:9c:4c:93:26:dd:
63:22:e7:6d:92:0b:43:dc:57:c0:f5:08:a4:56:41:b7:45:fd:
bd:80:31:31:8f:58:93:22:7f:1e:25:d0:c1:4d:4b:b2:f9:77:
1a:1d:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:27:16 2025 by rpki-client