Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: Lp3EA3jnQkyOxMVnEJ7RoB5hgPBlS9+JjCVJ5w/rBP8=
Subject key identifier: A4:20:86:B9:77:30:AE:26:48:A7:DB:65:34:2C:FA:04:7F:BC:8D:2E
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 019770E39EF1433791391741353FFDD47001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 00:00:54 +0000
Manifest this update: Sun 15 Jun 2025 00:00:54 +0000
Manifest next update: Mon 16 Jun 2025 00:00:54 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: hbK/JyPKqBkZMfI+rpobRkKkcHajEdPPN5be16+zZqY=)
2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:9e:f1:43:37:91:39:17:41:35:3f:fd:d4:70:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Jun 15 00:00:54 2025 GMT
Not After : Jun 16 00:00:54 2025 GMT
Subject: CN=a42086b97730ae2648a7db65342cfa047fbc8d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:96:9b:f7:60:5f:ef:ae:e7:a2:c3:19:8b:
65:e3:b4:59:3d:0b:a8:3d:f2:60:f3:af:3b:d7:6a:
e5:d3:76:60:29:f3:1b:b8:ae:4e:db:8e:6a:61:52:
bf:97:d9:ef:66:17:20:4f:85:db:8d:56:85:a1:3c:
56:e9:0a:71:2b:99:99:28:54:17:f9:d6:69:be:e8:
b8:f3:b2:1b:b7:52:94:e9:1e:70:8e:41:df:e7:09:
ad:cc:e7:67:d4:16:b1:2d:c1:6e:11:82:ef:15:8b:
d8:76:8d:16:61:68:2b:3c:48:9e:2c:59:7d:23:1c:
0e:82:99:bd:8e:13:49:7b:eb:51:ea:17:d6:75:62:
fe:2f:46:58:af:10:de:06:fa:2f:8f:f1:d1:de:0c:
31:18:d5:d4:a2:9e:b2:2e:4f:97:ba:71:73:4f:3b:
62:53:1b:1c:97:4c:13:18:eb:89:ca:05:12:f1:f0:
80:a9:bf:a8:b6:99:1e:a4:54:2a:90:ee:25:4f:b0:
c2:26:d8:9f:fa:70:3e:70:93:4a:44:c2:e8:f5:3d:
a4:97:11:d1:41:6b:21:e9:4e:cd:b1:ac:8d:06:e8:
6f:6b:f9:42:b2:62:43:dc:70:26:02:cf:c5:ad:f7:
f1:8b:3c:91:91:4e:ec:b1:be:ce:90:b3:03:b7:ee:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:20:86:B9:77:30:AE:26:48:A7:DB:65:34:2C:FA:04:7F:BC:8D:2E
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a3:08:a8:da:fa:d6:05:c5:58:70:33:1b:1f:46:01:ab:1a:
9a:1a:68:0a:e2:7c:e3:7a:5b:46:52:7a:28:3c:a9:1c:cb:49:
63:43:a1:4b:95:d6:30:65:3f:96:29:c1:f9:27:00:04:e3:77:
27:de:d3:23:66:e0:2e:04:1f:e3:49:21:ea:96:3f:18:23:47:
03:34:89:6c:4c:0f:04:9c:76:1d:48:ec:7b:b6:a1:71:40:f7:
fc:84:f9:86:42:9e:6b:96:97:1d:01:08:11:4c:eb:08:7a:51:
5c:c6:aa:23:06:cc:26:f7:12:0d:80:62:3c:05:00:5b:84:7e:
87:26:24:73:fc:bd:68:b5:0d:e6:e6:e1:51:19:a9:a7:0b:a7:
2e:b4:06:ee:4c:78:0f:3e:e9:c6:d4:ce:70:31:20:77:db:a2:
79:74:59:f4:18:7a:c7:83:32:c6:5b:8d:8e:33:64:11:2b:e3:
50:e6:51:25:ba:92:75:3a:ad:fc:b6:b5:d0:a0:09:ce:58:0f:
15:68:e2:33:5c:58:74:98:cf:54:7e:c9:99:6b:34:43:ed:f1:
ea:ba:45:7c:03:15:85:7e:b6:8b:27:6c:86:31:dc:8d:b5:0f:
f5:07:21:5d:92:74:c1:c7:7a:46:bf:07:4b:02:c9:33:e5:5c:
93:8a:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:14:42 2025 by rpki-client