Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: Sapba8RSmfnDmtfijcXRV3So5L9MfyDT0btLoNpcSGw=
Subject key identifier: 54:69:A3:B0:AC:7E:1A:1A:0E:EF:91:39:67:F0:DA:E8:A6:25:ED:2A
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 01976F62D92F6CCB114F911ECE7E915563F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 17:00:38 +0000
Manifest this update: Sat 14 Jun 2025 17:00:38 +0000
Manifest next update: Sun 15 Jun 2025 17:00:38 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: vyagGf3e7z32JvqSq9kkUYoxW/zWnxWOp4iEj/CXuFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:d9:2f:6c:cb:11:4f:91:1e:ce:7e:91:55:63:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Jun 14 17:00:38 2025 GMT
Not After : Jun 15 17:00:38 2025 GMT
Subject: CN=5469a3b0ac7e1a1a0eef913967f0dae8a625ed2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:06:da:b6:07:a6:b8:b0:dd:38:5b:84:70:
84:df:3e:ae:65:b0:ae:71:19:8b:65:bc:fd:83:68:
17:6b:23:cd:f1:f6:23:be:6e:71:be:5a:6b:8c:63:
54:62:55:99:9b:8f:b6:b4:f0:59:4f:bd:f0:d2:88:
1e:60:8f:59:9f:31:6e:bd:43:ca:31:ba:55:5a:23:
4b:72:91:ab:3d:b4:b4:5b:be:b1:bd:e9:34:ad:6b:
85:1a:56:76:3c:4e:7a:01:66:9a:56:f2:6b:48:b7:
f0:d6:18:b5:2f:22:e8:03:13:10:f0:ce:8d:a5:72:
6e:95:de:93:82:7c:6a:11:56:fc:93:1f:14:6a:0d:
8e:4c:69:58:30:b7:39:47:dc:b6:fa:66:cf:da:be:
c9:d7:99:a3:6d:2a:8c:de:18:84:3f:5f:25:0c:10:
b2:5a:bb:2c:3e:b1:b1:36:53:c9:c4:f2:3e:1e:d2:
d1:a1:14:41:57:d5:f3:73:c6:8d:1f:8e:dd:66:e4:
b3:41:de:40:c0:83:87:bf:4c:98:3b:88:b1:30:88:
f6:a7:a8:cb:cf:59:8d:07:6e:46:7b:41:c8:b5:2e:
1b:91:0b:4a:05:8e:6b:65:62:99:62:8f:60:d8:3c:
8d:ac:fb:4c:96:20:9d:fb:97:5c:29:71:95:39:6e:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:A3:B0:AC:7E:1A:1A:0E:EF:91:39:67:F0:DA:E8:A6:25:ED:2A
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:72:6b:d1:d8:51:28:19:f1:e9:d1:b7:e9:29:5f:d5:a1:12:
28:ba:d8:93:f0:32:8d:b6:75:ba:87:2e:df:32:1c:0f:e7:16:
99:63:fa:98:d3:16:b4:8c:91:76:5f:57:1f:e9:59:58:4a:70:
b7:27:6b:85:9f:64:d6:64:66:78:a4:20:ce:65:51:67:62:13:
0f:45:3f:39:13:b8:e2:e6:1f:9f:4c:10:25:42:0b:df:2d:47:
66:0e:2b:47:26:9c:bf:c9:02:29:cf:04:2b:39:a7:1d:20:71:
e2:68:db:77:91:48:c9:a2:4d:6c:da:6e:ef:cb:3d:28:fd:7d:
a5:ae:9b:45:fa:d7:3e:33:5f:c9:56:a4:b5:01:95:78:23:ef:
1d:1d:a1:11:65:dc:7e:9a:ba:93:14:91:3c:c6:bb:aa:bb:74:
66:3b:b1:f5:50:bf:94:59:69:44:eb:2c:69:7f:5a:90:24:ba:
7c:b2:cd:5a:ba:18:65:69:56:06:83:f8:11:e5:5b:09:41:05:
eb:d7:58:d2:c6:56:3c:90:40:c5:3b:c5:dc:46:dc:c6:3d:ca:
96:39:43:cb:e3:c4:26:02:dd:0d:d3:a1:e7:63:76:89:37:15:
62:ca:b2:53:ca:8e:5b:fb:97:16:cb:b2:e5:64:7d:43:ac:37:
4e:44:8e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:08:35 2025 by rpki-client