Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: I7Gs6p+yM/GqhwsUkgHEfwX4xxJxfqiwwZ73Yzd7FXk=
Subject key identifier: 69:AC:C2:FC:13:95:95:DE:74:A7:F9:86:2B:9E:D1:96:EC:1D:BD:D0
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 019773E4EC2A8A0BB390EA2272A00C82E084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 037F
Signing time: Sun 15 Jun 2025 14:01:11 +0000
Manifest this update: Sun 15 Jun 2025 14:01:11 +0000
Manifest next update: Mon 16 Jun 2025 14:01:11 +0000
Files and hashes: 1: X0-Djm0vHdUiJwsWds74O566gnw.roa (hash: wptFaY0ZwFbGnw/VuRN3robTidxbKoo/tyvxKrOBB/E=)
2: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: vqFrpQQGn5B47zsmoJdkT/mCr+1uNGyKQvGPebbpGhA=)
3: wfeH5shQb9p8-APifaQwZCuXjuw.roa (hash: i3m8mYv5PGE+aCaz85jAgzkj3ipmT/iJy2vmh07ZehU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:ec:2a:8a:0b:b3:90:ea:22:72:a0:0c:82:e0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Jun 15 14:01:11 2025 GMT
Not After : Jun 16 14:01:11 2025 GMT
Subject: CN=69acc2fc139595de74a7f9862b9ed196ec1dbdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:41:67:c0:be:3a:9a:6f:81:a0:e3:63:05:
a2:ea:fa:1a:d7:d8:cc:f5:63:18:ad:6e:a8:93:c3:
cf:d0:ae:1c:0c:eb:36:fe:66:bb:51:04:6b:07:36:
45:c5:8e:49:9b:64:b8:a7:3f:48:1d:d6:b1:40:78:
86:77:b9:72:0f:fa:42:9a:4f:ae:59:77:ea:af:17:
60:c4:18:89:f0:44:a3:75:81:8a:63:e3:5b:7d:fa:
15:50:89:2e:7a:e3:76:17:d5:e8:95:ab:58:63:ce:
cc:1f:03:28:67:44:cd:92:26:fe:c1:23:c2:4e:0e:
5b:fc:24:b6:05:28:e9:6c:dd:0c:e8:6f:c3:2d:3b:
7d:d7:e8:b3:91:2c:00:3b:7d:28:6e:93:88:9c:7f:
e6:86:00:bf:70:38:e9:8e:44:37:87:5c:71:fb:e1:
d5:98:56:f1:de:4d:e8:86:1f:2f:4b:91:af:d4:98:
a4:49:2a:98:80:7a:0e:22:7e:5a:23:4e:19:9d:aa:
52:ec:d7:24:22:da:62:64:a8:a8:f3:77:0d:3b:6e:
1d:27:ab:42:9e:cc:38:a1:42:c8:84:67:af:cb:02:
9c:9f:74:1c:93:8c:e3:82:9b:33:70:66:19:2a:67:
c0:46:f0:58:9e:2b:c6:d2:cb:20:b9:37:1a:75:20:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AC:C2:FC:13:95:95:DE:74:A7:F9:86:2B:9E:D1:96:EC:1D:BD:D0
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bf:8c:36:96:b6:59:b8:75:7a:59:fc:5b:8a:66:ea:de:cd:
47:49:cb:9e:85:15:86:fc:4b:18:51:ee:35:b3:03:c1:48:9c:
e3:b2:64:f7:a8:c8:60:86:6f:65:dd:d1:1b:56:23:9a:b2:f8:
81:57:5d:41:fe:76:1b:66:8b:bb:bd:91:86:a7:d9:d7:96:75:
11:2c:de:bd:9e:f2:76:1e:9b:c0:37:7b:92:eb:fd:53:02:24:
6b:9e:63:ee:ec:be:3d:25:44:1a:34:c4:96:9b:43:4a:6e:74:
ab:f1:e7:0f:ca:64:7f:69:05:3a:7c:b7:cf:a7:dc:fb:18:8c:
12:db:74:70:c2:27:ef:b8:92:7f:f3:b0:c6:34:63:31:ee:31:
91:c5:4d:07:9c:b7:db:24:67:64:17:04:49:d2:c3:20:17:45:
b6:56:63:a5:23:88:dc:6f:07:46:95:10:d8:c1:53:47:74:44:
9a:e0:31:68:b6:b7:7d:65:f2:72:87:24:ef:8f:af:92:f7:44:
92:b3:3a:c9:16:ac:8b:8e:87:50:1b:f9:5c:89:f5:e7:3f:53:
f4:36:fc:ef:b8:99:f0:35:98:e9:30:eb:8d:2e:89:3c:5f:66:
5b:86:10:b9:a6:54:cb:1c:bc:29:c7:5c:d5:ee:18:4b:cb:8b:
a3:c6:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:05:35 2025 by rpki-client