Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: QBHvzBStYFXdZvLwtvEXM9DhqP+bT6Vb7242f5xdDNs=
Subject key identifier: A3:64:FF:C4:17:94:D1:88:76:26:18:2E:97:CA:6A:84:25:77:42:94
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 01977150EAC5081D594FA47CFD3A67E18FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 10F6
Signing time: Sun 15 Jun 2025 02:00:17 +0000
Manifest this update: Sun 15 Jun 2025 02:00:17 +0000
Manifest next update: Mon 16 Jun 2025 02:00:17 +0000
Files and hashes: 1: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (hash: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: Nix9GfcfeasOLsKP1TPVti3l6lSYBoNOGsWcgx9D6no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:50:ea:c5:08:1d:59:4f:a4:7c:fd:3a:67:e1:8f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Jun 15 02:00:17 2025 GMT
Not After : Jun 16 02:00:17 2025 GMT
Subject: CN=a364ffc41794d1887626182e97ca6a8425774294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:9d:3c:6c:65:ae:cc:7e:2e:69:ff:4e:48:
c9:7b:56:18:0a:db:63:38:56:94:e1:cf:ee:89:de:
1c:1d:6e:40:f9:3a:88:3e:a5:8a:62:84:45:98:a2:
91:d3:9c:cd:18:df:55:68:d4:1f:f4:2f:04:92:96:
d2:c2:03:f0:12:bd:d9:2f:dc:59:e0:08:af:13:1d:
cb:ac:7d:d9:52:37:26:6a:53:ba:e8:84:8e:21:1d:
a3:9a:4e:34:97:d7:0d:fe:f4:dc:81:2e:db:bf:d2:
3a:03:5f:16:6e:8e:15:f3:49:c0:6b:e4:c6:e6:35:
58:ee:01:2f:1a:48:2e:89:e6:99:74:a1:e1:90:13:
14:f0:f2:23:4d:77:bb:89:bb:fb:1b:89:11:99:0f:
6e:99:93:15:df:b9:9a:bc:e7:31:35:fe:75:6a:02:
72:47:11:4c:8c:10:16:f0:89:54:ad:de:ad:df:3b:
1d:7b:76:a2:9a:31:e6:e8:3f:eb:79:19:22:38:e5:
8a:19:4e:a2:88:33:64:fb:12:e3:f1:c8:b3:49:60:
e9:81:03:d5:34:36:e6:e0:13:2a:1d:50:5b:c7:1f:
02:e3:21:ba:6b:89:e5:b2:26:60:34:dc:58:df:6e:
45:df:a2:99:0f:7e:15:e7:06:56:1b:31:f5:dc:98:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:FF:C4:17:94:D1:88:76:26:18:2E:97:CA:6A:84:25:77:42:94
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fb:1c:c9:b2:4c:fc:04:96:06:f3:44:36:2b:22:62:a9:e9:
31:9d:cc:e2:c7:b6:b3:18:e2:7d:e4:d2:31:18:20:a3:69:3a:
8c:39:a0:3f:1d:b0:8b:8a:62:11:db:a7:73:a8:11:ff:e1:2a:
0f:1c:bd:0b:5f:ed:f3:a0:c2:68:3d:d7:43:37:a2:ff:11:ba:
70:af:bc:92:d4:80:1a:d2:e9:5a:7b:22:eb:45:a2:c1:e9:58:
d2:c7:99:8b:c3:4b:8d:cb:20:ae:70:e5:63:0b:18:4a:f0:70:
38:f4:cc:5f:48:f2:a8:16:dd:78:86:0c:f3:43:c7:79:57:35:
4b:fc:6d:4c:ff:7f:ee:10:b3:51:63:35:27:88:c1:9d:13:df:
04:65:0c:20:df:49:09:dc:59:b2:f5:ee:4c:75:db:f2:fb:d5:
b8:f9:4d:c9:62:4a:26:07:dc:e3:fc:87:39:12:a8:6c:29:39:
98:ba:c2:22:e3:5d:79:8d:96:4c:64:49:a1:43:7f:14:df:5c:
87:4d:0d:4a:03:42:05:07:79:ec:83:1f:f3:7b:a4:d4:5c:db:
70:18:c8:f6:c8:5a:2b:f5:9f:5c:36:0e:12:2d:2b:09:84:91:
f0:53:03:66:7f:f7:95:52:3d:d1:7b:ef:17:ed:7c:9d:2f:90:
61:7b:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:20:04 2025 by rpki-client