Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: CzJCkkp7euU/bxbG95h6v7DNqQ3+af4jPl6tlrT3ess=
Subject key identifier: B0:59:9D:C6:6C:4A:1B:B3:3A:0C:A0:B7:AE:F4:4F:A5:38:DA:8D:7F
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 01976DAB48FCD7DCEC861CF9E987F55E7DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: FF
Signing time: Sat 14 Jun 2025 09:00:31 +0000
Manifest this update: Sat 14 Jun 2025 09:00:31 +0000
Manifest next update: Sun 15 Jun 2025 09:00:31 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: I+m5lPQf8VrWqlNL3Dwwt5kY2WuGZhGFl5085ZGv7kk=)
2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:48:fc:d7:dc:ec:86:1c:f9:e9:87:f5:5e:7d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Jun 14 09:00:31 2025 GMT
Not After : Jun 15 09:00:31 2025 GMT
Subject: CN=b0599dc66c4a1bb33a0ca0b7aef44fa538da8d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:1a:db:b9:c2:1a:31:4e:d3:55:32:c8:c9:
56:b3:7e:80:f5:4c:cc:3a:09:16:1e:e6:7a:70:e2:
43:a7:59:11:d5:03:b5:01:fe:54:e6:b8:63:a7:cb:
b1:56:4a:f4:47:bf:e6:8b:41:e9:37:f7:f9:05:ad:
0b:60:76:e3:b3:5b:d2:cb:34:ee:ca:c9:a4:8b:8d:
bc:b8:3c:25:6b:6d:9d:3e:a6:68:14:ce:cf:d4:fe:
2b:bc:75:b9:3c:8e:a7:b9:e0:45:64:e4:e4:3e:73:
5a:73:14:20:1c:30:cf:40:90:04:18:a7:12:67:15:
e2:c5:d2:03:68:92:e3:45:82:79:83:2b:6f:3d:e6:
a3:09:8e:3c:d9:dd:44:7f:81:8a:d7:80:17:45:70:
fa:8a:0e:04:d8:62:17:83:13:6a:11:6e:34:d0:a0:
23:cb:a0:49:8e:0f:f1:24:4a:6a:64:8c:4e:81:ab:
9c:46:04:41:4c:ff:0a:5e:9e:80:f0:6a:10:ec:b8:
4c:a0:08:68:c6:70:49:85:d3:25:69:c4:08:7f:27:
80:75:c3:47:43:17:ba:39:77:f9:ba:48:9f:3c:72:
1a:1f:75:21:bb:39:2b:1a:16:c0:66:52:cd:b1:42:
82:06:39:08:2d:85:fe:ff:73:aa:01:cf:8e:53:a2:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:59:9D:C6:6C:4A:1B:B3:3A:0C:A0:B7:AE:F4:4F:A5:38:DA:8D:7F
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9a:44:c2:55:54:57:95:d2:2e:12:f8:d5:c3:2b:3d:87:f1:
e8:8b:c5:68:bc:f2:e3:76:12:80:6e:0c:03:47:38:70:01:b2:
4b:3e:fa:0f:fa:44:ab:c0:3a:27:81:08:e9:36:b8:b9:19:93:
28:e7:e7:29:3b:48:31:ab:d9:85:bd:da:18:0b:d7:e3:f7:06:
ee:d7:12:c6:c8:16:5c:73:2f:36:48:bb:22:3a:b5:9c:11:80:
7e:02:c7:f6:cf:51:b4:d4:cc:f5:b5:31:0f:7d:3f:1e:17:7a:
d3:42:4b:4a:8c:af:b3:af:e8:4e:e8:c5:59:af:18:6f:9e:0e:
80:3b:5a:18:93:6c:5a:e5:fc:bc:55:d1:b6:fb:05:6f:32:f0:
2c:bf:bd:70:f6:77:44:07:05:c7:0d:ba:da:2c:97:68:be:17:
7a:d6:2b:91:3a:a5:6a:fe:67:e0:0f:3f:e5:36:21:28:8b:bd:
7b:7a:db:6b:dd:6b:26:06:a6:2d:90:5c:d3:30:e8:ef:09:36:
02:95:3f:1c:ad:26:4b:13:f1:68:96:b3:90:5c:5b:23:17:57:
40:64:6c:9b:e1:11:28:9b:f2:49:ab:94:1f:40:71:bc:97:51:
1d:60:f0:d1:cd:fa:c1:32:10:af:e8:19:1e:cd:61:4c:60:f8:
6e:4f:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:27 2025 by rpki-client