Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: XardfkuKkqYM47TNsZldRZqaTUCp1cfPnxvSj+RAqK0=
Subject key identifier: 7A:1F:E4:32:21:72:9C:86:61:9A:02:0C:63:A8:AC:BC:73:A0:66:C5
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 019786C6A7685A94A4A7A7A8F4266070FBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 15A4
Signing time: Thu 19 Jun 2025 06:00:55 +0000
Manifest this update: Thu 19 Jun 2025 06:00:55 +0000
Manifest next update: Fri 20 Jun 2025 06:00:55 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: CWjkbHwVScyb0tlVVpmW/xqYS0yHfYPp4CtjLqheeoM=)
2: ZlDfI1uu-dfJ7bkWIwNbrouZ8LU.roa (hash: RwbfiOlsTOjHsdHQ269mkGq2Xn2wHvdgM/XYUPYNH8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:a7:68:5a:94:a4:a7:a7:a8:f4:26:60:70:fb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Jun 19 06:00:55 2025 GMT
Not After : Jun 20 06:00:55 2025 GMT
Subject: CN=7a1fe43221729c86619a020c63a8acbc73a066c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:24:aa:ec:dd:83:36:1a:b0:ff:b0:df:77:
85:7a:b9:57:8f:8d:65:6a:00:03:4c:7a:55:60:5b:
e2:60:c7:05:21:5d:f4:dd:1d:d3:ef:09:16:ee:e3:
dd:1a:9a:f0:5c:c3:86:8a:d9:31:6b:2a:28:00:5f:
35:8c:57:20:09:0d:a6:63:13:24:59:c0:a3:69:df:
b0:3b:ad:67:92:1b:8b:1d:02:e6:ba:0b:37:41:29:
51:cc:fd:e2:d3:37:03:fd:e3:f5:ff:23:84:cd:b7:
b1:c3:24:a9:fb:76:05:f5:b6:f9:35:e8:40:3b:8a:
5d:14:25:d4:50:0d:0c:e3:d5:2d:73:04:b5:70:30:
d8:55:50:ea:82:4c:e9:40:1e:b7:f6:9c:94:a5:ae:
71:3f:bc:13:33:2e:a9:fd:9f:30:af:89:d7:ff:79:
de:6a:d8:94:a1:ce:26:33:ee:0b:55:c2:9f:b4:7e:
6c:f1:24:a2:5f:7c:fc:de:3e:5f:bf:2a:db:31:74:
7a:23:e6:8c:d6:66:46:65:77:5f:e4:c0:f0:f0:05:
c5:0a:a9:87:b5:53:6c:f3:bf:4e:f2:a7:71:71:a3:
7c:71:4c:67:31:23:e7:c6:a3:1a:7b:ef:f7:1d:e5:
51:be:f3:ef:24:35:ae:2b:bc:11:9a:64:c2:15:5d:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:E4:32:21:72:9C:86:61:9A:02:0C:63:A8:AC:BC:73:A0:66:C5
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:31:fd:63:2b:10:ec:d1:ce:18:ad:b8:80:53:45:30:31:7d:
39:ea:fe:8e:4d:3d:9a:0c:5d:2c:56:0b:c8:79:e5:71:b8:0a:
fc:9c:34:50:1c:06:1c:cd:e7:c7:da:b3:4a:d5:c6:b1:83:02:
7b:27:8b:fc:ab:b7:03:6e:ca:ae:b8:f3:5d:e0:c3:8e:44:ba:
06:73:0e:91:96:80:a9:ed:aa:66:80:5e:dc:58:04:95:fc:d4:
82:e8:d5:99:db:0e:e5:57:36:b5:9d:df:d0:a1:80:68:87:c6:
51:df:f9:fd:c9:bc:30:19:c1:27:db:7b:52:a0:5f:a3:77:e1:
1f:cb:cf:f5:0b:4e:80:54:44:30:4b:b2:c3:38:be:7a:77:7e:
aa:9a:90:75:e5:c0:98:c0:d0:8d:7d:2f:16:23:58:27:6a:7b:
b9:1b:26:ee:8d:93:00:ca:0d:1d:aa:bc:4c:c2:8f:c5:c4:e1:
10:39:75:cb:58:fd:b5:ff:c2:44:90:d2:6d:a8:52:eb:de:60:
49:27:aa:41:8d:5a:58:dc:db:2c:2e:17:2f:3b:b9:6b:62:53:
83:bc:28:31:9b:dc:82:97:60:bc:b8:06:d1:48:f6:6d:d5:d8:
94:a8:1d:0b:e8:7e:15:55:a3:a8:3b:10:a7:49:2b:66:21:a9:
eb:47:ae:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:52:59 2025 by rpki-client