Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: 4RhzVI5HhIM3SwGgckuysYZlJKC2vA9QQBk/MufXEyA=
Subject key identifier: 38:62:76:D2:C8:9B:A1:8A:31:19:47:EC:F1:F2:E9:40:C5:EE:92:2C
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 01976D3E72D5F60A74EB9DA69ACA74E6A7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 0E11
Signing time: Sat 14 Jun 2025 07:01:38 +0000
Manifest this update: Sat 14 Jun 2025 07:01:38 +0000
Manifest next update: Sun 15 Jun 2025 07:01:38 +0000
Files and hashes: 1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=)
2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: ytnXOrwrkVsJvZEs4qLC8w3FiOh/+UKNMcM/OwkMWak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:72:d5:f6:0a:74:eb:9d:a6:9a:ca:74:e6:a7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Jun 14 07:01:38 2025 GMT
Not After : Jun 15 07:01:38 2025 GMT
Subject: CN=386276d2c89ba18a311947ecf1f2e940c5ee922c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:e1:64:7f:42:89:ac:a9:fa:7b:27:ea:08:
7e:77:1b:e9:26:1d:10:39:1e:11:3a:da:3f:fd:30:
ba:3e:f7:f4:be:dd:a9:e5:b4:f3:b8:96:66:b0:a2:
0a:5e:8c:cc:97:cc:5f:82:3d:b2:4c:ec:85:48:a7:
8c:fa:89:7d:bd:9c:43:85:a8:b9:fa:61:75:a0:14:
14:af:91:7b:15:17:be:4e:bf:52:ed:75:ea:03:26:
cd:d2:df:51:14:20:d3:f1:93:2f:fc:fe:6e:61:b0:
11:7c:d4:db:de:32:38:54:9e:a6:ec:13:34:50:04:
52:18:d1:fe:6c:5b:2f:c1:73:de:08:d1:9a:b0:69:
ba:20:98:de:17:70:ae:f1:4e:56:a3:90:f9:0a:cd:
21:78:b5:15:a5:52:c1:33:72:0b:2f:56:ad:d4:ad:
d4:30:cd:e3:f7:30:5b:99:4c:3d:09:f8:b7:bd:a6:
a7:f3:b5:09:24:a3:88:f1:8f:5c:f0:b9:5b:84:4d:
62:02:c0:80:05:dc:0d:f0:bd:a8:39:32:5e:2d:e4:
b2:de:af:6b:b9:41:7a:33:b1:f6:c1:eb:41:0d:db:
39:6c:4f:3e:91:71:77:e7:1a:1a:b8:6d:a4:0c:8d:
b8:a9:e6:d1:07:2e:f5:50:f8:bb:a8:8e:64:97:5e:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:76:D2:C8:9B:A1:8A:31:19:47:EC:F1:F2:E9:40:C5:EE:92:2C
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8a:48:79:e2:c8:71:1f:50:c4:46:e4:cd:ba:e2:6b:c2:25:
ab:ce:09:30:14:0b:ec:47:81:e4:27:56:75:3c:dc:6f:02:0c:
7a:12:b9:f3:e4:8c:82:8f:38:3a:38:fc:a0:c7:9a:7a:ee:4a:
67:d1:c1:d5:f5:f9:da:82:00:37:8c:22:c7:54:be:11:44:80:
6f:e3:0e:d3:45:90:47:ca:d8:b5:0e:ed:3d:1c:e6:d5:48:53:
05:14:8e:ff:70:d5:92:92:ac:f7:4f:84:af:e1:ee:38:9d:0e:
5b:14:a2:59:d5:74:59:e4:56:29:43:72:2b:a1:be:02:e3:6c:
ec:c2:36:0c:36:28:6f:c5:7a:9b:7b:ae:32:e2:98:96:b8:04:
2b:a2:b2:2a:92:3c:c5:2d:70:d4:ec:09:94:43:76:20:aa:72:
09:94:31:82:e4:a3:83:3f:a8:e1:41:4e:3c:a1:be:3b:98:64:
1d:dc:2b:9b:30:ff:82:cc:ad:ea:0c:95:2f:33:e0:55:aa:c6:
0f:cd:dd:e0:56:a4:84:d9:8a:1e:7f:b8:b2:7c:d8:f0:0b:13:
c0:c3:28:30:2f:0e:5d:e6:00:b7:54:e0:94:9e:14:5c:69:47:
1b:6f:e1:f7:ad:da:89:06:8b:1b:6b:2d:10:42:12:45:82:2e:
25:66:06:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPnLV9gp0652mmsp05qejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj
Y2ZlNzUwHhcNMjUwNjE0MDcwMTM4WhcNMjUwNjE1MDcwMTM4WjAzMTEwLwYDVQQD
EygzODYyNzZkMmM4OWJhMThhMzExOTQ3ZWNmMWYyZTk0MGM1ZWU5MjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfvhZH9Ciayp+nsn6gh+dxvpJh0Q
OR4ROto//TC6Pvf0vt2p5bTzuJZmsKIKXozMl8xfgj2yTOyFSKeM+ol9vZxDhai5
+mF1oBQUr5F7FRe+Tr9S7XXqAybN0t9RFCDT8ZMv/P5uYbARfNTb3jI4VJ6m7BM0
UARSGNH+bFsvwXPeCNGasGm6IJjeF3Cu8U5Wo5D5Cs0heLUVpVLBM3ILL1at1K3U
MM3j9zBbmUw9Cfi3vaan87UJJKOI8Y9c8LlbhE1iAsCABdwN8L2oOTJeLeSy3q9r
uUF6M7H2wetBDds5bE8+kXF35xoauG2kDI24qebRBy71UPi7qI5kl170zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhidtLIm6GKMRlH7PHy6UDF7pIsMB8GA1UdIwQY
MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt
ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh
LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4pIeeLI
cR9QxEbkzbria8Ilq84JMBQL7EeB5CdWdTzcbwIMehK58+SMgo84Ojj8oMeaeu5K
Z9HB1fX52oIAN4wix1S+EUSAb+MO00WQR8rYtQ7tPRzm1UhTBRSO/3DVkpKs90+E
r+HuOJ0OWxSiWdV0WeRWKUNyK6G+AuNs7MI2DDYob8V6m3uuMuKYlrgEK6KyKpI8
xS1w1OwJlEN2IKpyCZQxguSjgz+o4UFOPKG+O5hkHdwrmzD/gsyt6gyVLzPgVarG
D83d4FakhNmKHn+4snzY8AsTwMMoMC8OXeYAt1TglJ4UXGlHG2/h963aiQaLG2st
EEISRYIuJWYGUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:33 2025 by rpki-client