Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: mzjEy7d9vlBvLYx6rDCvY8n0+PPD3H1eD8oAio6dPUk=
Subject key identifier: 66:60:AB:63:2E:48:CE:F8:73:D4:87:6B:98:9D:27:BF:B0:12:D6:C2
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 01977075AF87A2DE1D1AC7EB90199BA19B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 22:00:50 +0000
Manifest this update: Sat 14 Jun 2025 22:00:50 +0000
Manifest next update: Sun 15 Jun 2025 22:00:50 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: iWIZYWNFGK7l9Mh+hcOgB3iCpvbOJ4CTClKp3aEOIfQ=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:af:87:a2:de:1d:1a:c7:eb:90:19:9b:a1:9b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Jun 14 22:00:50 2025 GMT
Not After : Jun 15 22:00:50 2025 GMT
Subject: CN=6660ab632e48cef873d4876b989d27bfb012d6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:fa:f1:2b:4f:48:7d:78:57:05:49:26:5e:
e6:db:5c:c7:cc:49:2e:31:b0:35:e1:ed:65:57:7d:
6c:41:d7:21:7d:1a:b1:92:ba:f6:29:04:94:e6:b4:
84:f2:08:df:3e:86:2f:27:23:25:ec:8b:c6:a5:69:
7f:38:76:27:cc:16:f8:61:24:03:47:59:93:cb:5b:
89:be:72:4c:64:4f:f2:ab:54:bf:c7:f0:b6:62:9d:
a1:a9:5b:19:17:40:f8:94:9c:02:f5:79:3a:5c:4c:
79:be:c7:14:4b:9b:4a:7c:92:93:61:20:b6:7b:ba:
72:37:b1:5a:6d:53:b4:27:e3:64:6e:36:0b:4c:65:
bd:5a:dd:54:fe:31:14:8d:ea:d6:e6:b4:64:d7:e4:
ea:29:5e:f3:fa:25:ad:5b:20:3d:a0:a8:39:1a:b0:
9c:95:25:21:1a:b5:e9:7a:cd:dc:3e:88:c8:62:97:
3a:d1:7f:7e:c3:1e:bc:61:14:90:21:bf:a9:8e:9a:
ee:53:27:4c:94:f2:fb:28:e7:04:70:fd:da:e4:19:
75:db:ce:6d:3e:df:2a:f8:75:ce:e5:77:f7:83:e1:
48:f7:db:b4:9b:83:34:a0:9f:c5:57:6e:09:1d:56:
a9:12:2c:bf:10:75:17:7d:fa:5c:0c:08:29:0f:ce:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:AB:63:2E:48:CE:F8:73:D4:87:6B:98:9D:27:BF:B0:12:D6:C2
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f4:b9:0d:0d:6e:47:6d:73:ba:8b:44:d1:d2:c9:94:2d:51:
8e:8d:98:c7:e0:bb:d6:07:24:94:ec:4b:22:4e:a8:55:96:ef:
5f:61:da:ad:8e:15:7f:78:1e:3f:fb:43:c0:0d:4e:8c:49:14:
44:4d:49:c1:1e:22:8d:0e:c7:de:e6:eb:c3:34:c0:e9:7c:62:
dd:60:23:4c:a4:67:34:aa:35:92:c8:d4:3f:c0:c9:21:90:1b:
d8:5a:3d:89:85:df:e0:cb:fb:f5:b5:32:13:0f:9b:25:d4:17:
d3:59:7b:03:62:bf:6b:4f:c2:a4:ff:b8:7c:02:7d:30:f3:16:
29:f8:47:2f:31:8f:85:11:c4:0a:ef:b4:36:42:e0:ca:17:5a:
12:44:50:72:09:6c:17:df:fa:6f:7a:d5:17:8f:ab:85:1b:d2:
10:95:53:36:49:f7:26:28:a6:38:f6:35:a7:e4:9e:c1:6f:38:
25:2a:fb:61:a0:92:23:e0:76:a9:38:bb:2d:2c:da:5d:c8:3d:
39:86:b9:47:6c:a7:fe:a5:a0:06:43:fb:83:4d:d5:39:88:92:
27:cc:25:d1:48:3c:f9:e6:62:f1:b1:b8:ee:36:fd:f3:28:7b:
5f:3f:0b:e8:cc:90:e1:ae:9e:e1:e6:cf:99:b6:a6:f5:a2:56:
b1:0a:45:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:14:15 2025 by rpki-client