Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: Xl5+ya1CAE36TocSei92/0qSB9tnfur65AsqSDg6yoQ=
Subject key identifier: FF:6A:76:12:22:CB:9E:BF:C5:95:A5:EB:F5:57:1F:9B:7F:8E:25:F0
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 01977865C91FFF3D5D7627F1E54FDC43E54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 02D4
Signing time: Mon 16 Jun 2025 11:00:25 +0000
Manifest this update: Mon 16 Jun 2025 11:00:25 +0000
Manifest next update: Tue 17 Jun 2025 11:00:25 +0000
Files and hashes: 1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: dKbugS4sg7tuyscAHuFFdsICbjs7ECitEIu5dedhBvc=)
2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:c9:1f:ff:3d:5d:76:27:f1:e5:4f:dc:43:e5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Jun 16 11:00:25 2025 GMT
Not After : Jun 17 11:00:25 2025 GMT
Subject: CN=ff6a761222cb9ebfc595a5ebf5571f9b7f8e25f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dc:34:f9:aa:32:f1:2e:79:04:55:60:2b:e8:
75:10:1a:ba:b1:8b:42:8c:b4:90:e9:a0:b0:43:a3:
db:42:00:bc:93:2f:ec:92:6d:ec:cc:2d:8a:ad:2f:
17:5c:5a:a3:62:f0:bc:02:62:59:42:39:5b:92:c1:
e8:e8:77:81:a3:c8:6e:97:78:69:1d:9d:69:36:15:
9a:e1:b6:ed:a1:a0:0a:e8:13:8e:c1:76:b4:fc:a5:
69:44:da:a8:e7:20:55:30:95:88:e6:0f:e8:48:7c:
77:fb:e0:98:87:05:5b:29:2b:7f:54:24:01:87:d0:
83:33:90:e7:70:51:bf:3c:75:45:31:42:53:97:5b:
46:c9:ab:19:0d:1f:d0:e1:ac:a9:c1:1e:60:2d:b1:
44:90:58:f1:fa:3a:b9:e4:cc:4f:69:d9:dd:b2:5b:
ac:e5:c7:46:58:1f:7e:ae:8c:d4:6a:5e:f5:f2:d3:
4a:22:77:1f:40:4e:6e:10:72:9c:b9:28:42:45:eb:
f2:8d:82:b2:68:a9:e9:57:67:55:fa:94:51:b7:16:
86:e9:2a:a4:e6:a3:97:5c:89:93:28:6a:34:fd:5d:
ed:f6:64:ee:78:b1:40:3d:72:c7:b2:74:80:fa:60:
43:ae:fa:f3:10:31:af:19:e4:21:60:96:b6:4a:e4:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6A:76:12:22:CB:9E:BF:C5:95:A5:EB:F5:57:1F:9B:7F:8E:25:F0
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:74:58:66:0d:25:c9:29:89:5b:63:8b:03:e7:9b:f2:2c:fb:
3b:c0:0d:ed:37:47:ec:0a:f2:00:2c:73:1e:ba:f1:6d:ee:3b:
69:96:38:f2:c0:e9:05:74:c6:e5:df:3b:5c:e0:48:c0:b0:e4:
de:5c:65:90:6d:de:53:66:a3:2e:e4:ec:ba:87:18:be:1a:29:
21:c8:62:f3:34:b1:27:90:c1:b5:24:f8:21:66:04:b1:29:6d:
11:c9:40:67:14:32:ee:cd:1e:bf:87:10:5a:88:49:b6:7f:ef:
d2:87:8a:a9:7f:72:c6:1b:51:e3:60:d5:e1:57:01:64:27:90:
82:33:1c:bd:aa:8b:2c:52:ec:24:d0:49:bc:5a:a6:5f:c9:0d:
04:81:12:e0:02:c2:5d:6c:97:fb:ae:04:86:e7:1a:52:d6:1f:
40:47:75:46:59:87:f8:1a:8e:b3:20:11:3e:92:3c:d1:fd:16:
09:8c:88:de:cd:86:c3:be:c1:fb:34:2e:6d:76:88:8a:6d:9a:
42:d8:03:37:b6:9d:be:7d:c0:1a:b6:ec:2c:45:7e:3b:b8:77:
d4:37:6c:a1:ff:95:17:ef:6e:f8:22:97:c6:62:d2:cf:43:97:
31:82:eb:3c:d1:b6:65:d3:bb:2f:c7:93:69:9a:87:2f:69:36:
5b:06:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:21:44 2025 by rpki-client