Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: D4c9VKDgX5ztvFLR1LKtN+HDBJGLPOhLWsOPk0hfR8M=
Subject key identifier: 16:6F:FC:A0:AF:46:CE:F0:C5:61:B5:EA:70:52:49:5D:91:E6:04:D3
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 01977DF9ED2634EACF3BFAD9BF57303DB228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: 88
Signing time: Tue 17 Jun 2025 13:00:20 +0000
Manifest this update: Tue 17 Jun 2025 13:00:20 +0000
Manifest next update: Wed 18 Jun 2025 13:00:20 +0000
Files and hashes: 1: 9kI0xW5MbOx76ceEc1r6lL1zLqw.roa (hash: EBfX8OboRteLfAyp7yvYOpYG1nnQo1fO08vfwQ0PAY0=)
2: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: PmTnuOTSv8QCa5n4LhvCmJmLs0A1jhyMh6L8XUlpxM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:f9:ed:26:34:ea:cf:3b:fa:d9:bf:57:30:3d:b2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: Jun 17 13:00:20 2025 GMT
Not After : Jun 18 13:00:20 2025 GMT
Subject: CN=166ffca0af46cef0c561b5ea7052495d91e604d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:29:40:07:b3:b7:66:6f:f3:91:83:46:de:
b9:cd:6d:a6:63:6f:0f:ed:10:55:9a:c2:b1:82:7a:
a3:1f:d4:8f:ed:5c:8d:7b:56:bc:0a:44:68:27:e9:
92:58:69:37:7d:32:9b:70:11:56:41:a9:97:81:70:
91:ed:6c:f6:a1:be:f9:b0:08:90:3f:f6:22:ce:ea:
5f:00:32:41:5c:83:fa:6e:4d:62:34:5f:ed:6e:3d:
49:b3:31:94:2e:58:b4:7f:3b:29:81:a4:ca:05:05:
a3:19:40:c3:4a:a7:f3:e9:b5:ec:03:8c:92:9a:ba:
15:c2:17:20:59:0a:55:62:46:3e:10:2a:e6:f1:ee:
63:ca:3c:2c:46:ae:5d:5c:b1:e9:38:5d:b9:c1:b3:
59:bf:78:74:44:04:cd:4c:d6:73:50:e4:00:32:dc:
33:d0:21:40:c7:af:40:e9:c2:b9:6e:8d:e5:01:12:
95:34:a7:40:41:9a:3f:51:69:48:f6:56:47:40:ec:
cd:45:5f:70:9f:84:1d:fe:e4:3f:01:38:e2:64:27:
13:86:01:05:72:97:50:1e:5a:70:fb:b2:b2:7e:7d:
82:86:5e:4d:dd:19:da:ab:21:1a:42:45:9b:f9:b3:
05:69:00:4f:78:7f:23:f9:9c:a1:84:4e:08:20:a4:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6F:FC:A0:AF:46:CE:F0:C5:61:B5:EA:70:52:49:5D:91:E6:04:D3
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:cc:87:2e:e0:92:c2:95:69:78:b0:ed:a3:98:07:cc:30:
9e:0f:85:f3:e1:30:8b:91:db:cd:84:bb:cd:0e:79:1c:18:99:
85:9f:b2:c8:cf:bb:04:fe:74:7a:85:c9:29:b0:4b:b7:bd:ce:
e2:bf:2a:85:f0:2b:36:29:4f:7b:06:94:36:1e:74:ea:11:d4:
d5:5f:3a:d8:39:24:4c:38:bb:2a:df:f3:2f:af:b4:cd:ba:61:
84:dc:58:18:56:9c:ba:10:7f:38:d9:6e:65:de:a7:bf:77:96:
c1:3b:24:45:ae:5d:81:7c:48:93:58:fb:cc:2a:b1:8c:15:12:
4d:05:ac:bb:ec:01:55:a0:63:88:a4:60:d7:e6:e0:67:fd:32:
3c:15:d3:ef:ba:34:e0:51:ed:4c:74:82:09:dd:30:5d:69:8a:
9c:a3:dd:8b:57:fc:eb:11:5a:33:cd:1b:96:1c:51:ac:7b:8a:
8c:3d:c7:98:9f:ce:c2:cf:12:7b:1c:19:47:1b:48:29:3e:59:
8c:1e:3d:c5:9f:c8:7a:68:11:47:68:c8:02:e4:10:aa:76:a0:
88:ab:ac:37:3e:8b:f4:be:b9:b7:0a:90:63:51:57:aa:17:82:
0f:3d:1c:3d:58:fc:a1:1b:e7:35:00:f0:fb:7c:1a:fd:0d:3d:
ec:90:78:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:14:49 2025 by rpki-client