Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: oKV1dUQ/0KXE/IejDNqrkd2N66k/tjhY3FaHVUaAVSY=
Subject key identifier: 9F:37:51:3D:5F:B4:51:BE:47:56:66:E8:1F:8E:23:F6:D9:D9:35:58
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019771F6483B02650833B171E123767D4A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 1350
Signing time: Sun 15 Jun 2025 05:00:55 +0000
Manifest this update: Sun 15 Jun 2025 05:00:55 +0000
Manifest next update: Mon 16 Jun 2025 05:00:55 +0000
Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: yL6qi2Jtf5XvYTOCWPPkbcqgM8zCxuE/SndIhr5itdE=)
3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:48:3b:02:65:08:33:b1:71:e1:23:76:7d:4a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Jun 15 05:00:55 2025 GMT
Not After : Jun 16 05:00:55 2025 GMT
Subject: CN=9f37513d5fb451be475666e81f8e23f6d9d93558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:ec:98:4d:bc:7d:5f:e9:df:75:63:9c:fb:
f0:71:2a:3c:7b:54:63:3e:62:fe:10:a1:9a:e7:d3:
a4:52:cd:90:76:f3:5c:fc:f1:1f:cd:79:38:5a:d0:
4a:3c:79:9f:08:7c:b7:de:38:98:04:c1:70:cd:8b:
a8:fb:06:a9:88:da:a9:93:27:39:aa:16:0c:f6:b2:
e0:aa:35:75:a3:f5:17:17:96:62:28:01:ca:32:fe:
f9:82:13:9a:86:d2:7c:50:92:60:ea:57:65:88:10:
ab:7c:5c:68:ad:db:8f:38:d6:c3:e1:c2:d9:b7:b6:
b0:0c:85:05:f4:f2:71:7d:85:e4:b9:67:56:c4:e1:
40:c8:45:02:ad:03:64:58:6b:ce:6b:71:00:16:6d:
11:e4:7b:72:75:af:6c:fe:f8:97:8e:67:ae:7d:18:
58:87:68:ef:c9:98:cc:2f:41:fe:9d:74:7f:c0:c7:
a2:47:d3:76:ba:95:25:9b:f4:e0:ef:b5:48:fa:a7:
ab:3c:52:7e:47:b4:38:9b:6b:5c:37:df:7c:cf:5b:
0d:c6:ca:80:9f:87:ba:e8:bd:ae:fe:60:42:00:00:
3e:1f:20:99:2e:dd:9f:06:38:3d:8f:ce:f4:fc:74:
ce:32:c3:57:e0:25:6e:8f:d3:48:10:5d:12:5c:99:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:37:51:3D:5F:B4:51:BE:47:56:66:E8:1F:8E:23:F6:D9:D9:35:58
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:82:9a:57:34:48:e6:f3:c7:cb:46:9a:e5:bb:14:56:79:77:
cd:4a:30:95:80:a3:8d:78:8d:7c:29:de:80:70:1f:9c:4e:59:
76:3b:44:cd:d2:48:48:0f:5d:6b:be:74:89:51:4f:f8:80:84:
1a:c9:ac:04:42:3d:f2:62:fe:a9:f0:60:15:98:ed:11:4b:8e:
ae:89:77:a9:c9:da:18:91:30:4f:6a:13:0a:b4:fe:98:46:37:
34:ca:b2:cc:00:8a:86:17:66:9d:07:4e:0a:a3:35:ef:1d:90:
da:e1:a2:12:cb:f0:e5:b2:d9:f2:53:99:64:a7:32:6d:75:a0:
69:c0:8b:92:ee:b1:ba:6c:b2:eb:f2:e7:96:f2:c3:b7:14:13:
f9:65:70:de:7c:6d:d0:9f:7f:23:4a:73:24:14:26:b9:43:e2:
cd:08:d5:d7:eb:36:c0:c5:6f:4d:8a:92:4c:3d:8f:f9:fb:62:
42:1b:9a:8c:21:66:f1:59:93:e0:82:b8:31:9c:6c:6e:96:da:
99:3b:f5:fc:fb:e3:2d:ab:09:62:29:2f:c2:d9:f0:ad:55:db:
b9:a1:bf:90:f3:c2:5a:ac:8a:ab:26:60:52:3a:a2:73:14:fe:
da:7b:43:4c:de:4d:42:ff:77:b4:f4:18:3d:3c:91:63:6f:d0:
e6:33:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:00 2025 by rpki-client