Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: krnO8dB2mCIncOWVw3n3fty8ZvYq1AOXJfY0WtznauU=
Subject key identifier: A8:47:BD:F2:91:19:A9:18:8F:FD:43:25:B6:38:9F:65:AF:8E:18:F5
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 01976CCFA1A1A59B9A3B9B908C9B7DDFBF0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 159B
Signing time: Sat 14 Jun 2025 05:00:35 +0000
Manifest this update: Sat 14 Jun 2025 05:00:35 +0000
Manifest next update: Sun 15 Jun 2025 05:00:35 +0000
Files and hashes: 1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: ULhQBkdz2OcFGgfl70UncdZYKN55QuHkVROyn1VYoik=)
3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:a1:a1:a5:9b:9a:3b:9b:90:8c:9b:7d:df:bf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Jun 14 05:00:35 2025 GMT
Not After : Jun 15 05:00:35 2025 GMT
Subject: CN=a847bdf29119a9188ffd4325b6389f65af8e18f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:6c:fa:8a:8b:a5:e7:1f:96:c0:77:1e:7d:
81:25:af:8c:c8:64:60:45:e5:92:00:24:06:33:8f:
f5:89:f0:dd:32:1a:fc:74:dc:50:0f:86:a4:fc:fe:
44:ea:76:50:13:38:03:b1:5f:79:92:d8:ec:1a:82:
2e:e2:32:88:f7:97:36:54:14:88:ba:8c:13:94:88:
0c:5f:51:ef:7e:1d:c4:e5:4f:f4:0a:df:02:1f:68:
de:7a:52:cf:0d:29:41:ae:77:92:9f:58:58:48:db:
fb:c8:19:f1:aa:5d:ad:60:a0:89:cd:28:2d:ea:3f:
24:9a:1b:44:d1:cd:2b:c1:4b:c3:9e:ac:49:d6:20:
23:42:82:24:a3:a9:ca:ba:cd:a7:86:dc:76:78:07:
e0:08:29:93:61:c2:8f:e5:e8:d4:10:02:8e:e5:da:
5a:08:1b:fd:f0:bd:53:ef:ff:1e:9f:f2:79:fd:40:
3b:45:17:27:9f:07:ad:3a:57:ff:00:f0:73:9e:ca:
7d:fc:5b:7d:d1:ca:de:e2:d3:1f:9b:17:ea:74:31:
a0:aa:25:6c:1e:55:e6:75:5d:72:42:3c:2e:b0:12:
e0:38:27:84:c3:6d:0b:79:42:97:1c:73:b2:14:8b:
8a:5e:5c:21:e5:93:42:0b:3b:26:12:6c:30:57:08:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:BD:F2:91:19:A9:18:8F:FD:43:25:B6:38:9F:65:AF:8E:18:F5
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9b:06:0f:36:22:d5:e2:68:33:9e:6c:bf:78:7b:99:8d:20:
e5:65:f3:cc:91:2e:63:87:42:04:32:81:93:cf:10:d9:3b:b1:
11:be:5c:a7:7d:16:89:9a:6a:6f:17:14:a5:52:5a:fe:97:9b:
ce:67:ab:c3:ad:5d:93:01:c0:db:5f:b1:9f:9f:20:d5:46:f3:
de:ae:6a:26:24:c0:c4:d2:f4:32:52:c5:12:e2:24:e1:60:f5:
c7:a6:06:71:99:16:aa:f6:5a:de:04:43:49:f3:6c:a2:8d:a8:
e7:bf:18:07:5b:60:98:75:12:bb:da:74:b4:eb:b1:25:8b:e3:
5f:2b:ab:bb:20:5b:98:a3:b9:cf:be:8f:2f:14:93:9b:61:c9:
00:af:1f:77:81:10:94:0f:70:f0:1d:7f:fa:45:c3:48:b5:5f:
89:8e:6e:20:7c:2f:50:05:1c:1d:fc:66:6e:0f:eb:71:e6:96:
4b:25:c5:ae:f2:c1:e9:1e:cf:4c:0a:a4:32:f8:61:93:cd:df:
ad:45:1d:c2:e0:e2:fb:c4:08:71:d2:3c:4a:80:33:a9:11:78:
30:19:58:82:61:f6:9c:8e:38:6d:19:46:a2:87:af:cf:03:0c:
40:a2:70:38:50:a4:d4:48:cb:83:38:a8:5a:e9:6e:6d:bf:01:
09:43:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:21:19 2025 by rpki-client