Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
File: o2CNaw6ApkMPtq9D-uFooOgBH-4.mft (raw, json)
Hash identifier: FkeeOqnAWVxoCEFkXqgnoJs+Gpo82Dap6zUdzNNDV+U=
Subject key identifier: 33:6D:06:8D:70:E3:F0:84:82:B7:5C:DE:66:04:5B:FB:1C:58:5F:7A
Authority key identifier: A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
Certificate issuer: /CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Certificate serial: 01976F2C38EC09F4070614079AB5DA48ED58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
Manifest number: 0B33
Signing time: Sat 14 Jun 2025 16:00:58 +0000
Manifest this update: Sat 14 Jun 2025 16:00:58 +0000
Manifest next update: Sun 15 Jun 2025 16:00:58 +0000
Files and hashes: 1: 1-zT9mAEBlOTW17BpRdhhq5CBopo.roa (hash: fOlZL/jmt7x24Mq2vq6+5+VHvePQon8h2vdvdk/CniI=)
2: 2jdvbPuVX3DvnSLzJ7PbPhY084M.roa (hash: TmyuM6Y9MB09UaiU4ubKUXZL1rxE4bCb1tGRI62YtN0=)
3: BjXm0XT4BTtEmIMPFFa63S__K7c.roa (hash: ETSjvpbNZrkoFW+0i09JYHs/YF4PfB7NXGdhRYyZxZs=)
4: Y8I7Cdrc3qJFqRL0cpCQD0-SJXM.roa (hash: kJVt9rCeoDhUmKwMAQa4mtxvjszoPS2OFInBbvhBp0I=)
5: o2CNaw6ApkMPtq9D-uFooOgBH-4.crl (hash: fJyzGmx7MMJlMJPCdCdUnr/y6uOpZgHlmzGYqplLbLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:38:ec:09:f4:07:06:14:07:9a:b5:da:48:ed:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Validity
Not Before: Jun 14 16:00:58 2025 GMT
Not After : Jun 15 16:00:58 2025 GMT
Subject: CN=336d068d70e3f08482b75cde66045bfb1c585f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:41:49:27:ba:74:9b:58:21:31:40:08:d7:
4a:5e:94:5a:ee:01:6d:d5:9b:6f:15:0a:b2:4e:b7:
e7:6c:2a:34:6a:7d:c2:4a:79:d7:80:d8:d7:4c:fc:
bd:76:0d:da:3d:0a:77:b8:2e:42:10:f4:58:97:c3:
51:bc:bd:12:c6:b0:0e:9a:97:65:6a:fe:f3:95:29:
a2:21:ee:c2:de:1c:88:82:77:3d:50:83:2c:c2:c7:
c8:b3:59:84:b5:75:dc:26:0a:4e:cc:52:b9:a8:7d:
27:63:a1:96:d4:24:cb:37:d1:ae:9d:34:e3:47:97:
a7:d9:85:a8:6e:b2:6a:38:b8:d4:17:f9:ef:12:1e:
90:db:b8:a2:e1:33:48:be:7a:59:b2:b3:5f:e7:3f:
45:78:f9:eb:12:db:ee:fe:f1:43:4e:54:31:5c:ee:
ac:10:09:83:ee:b0:17:ff:fc:f9:72:2c:51:d5:4d:
57:82:6e:9a:a3:7f:d3:ef:36:3f:33:fb:05:6e:51:
ca:16:8f:32:ba:62:83:c2:cd:75:95:e0:88:d6:be:
21:4a:e2:ac:ac:c5:39:ec:7f:ec:e4:2a:10:66:26:
4a:be:e1:11:2d:d5:33:5f:91:2e:91:db:60:ad:16:
22:1e:aa:bb:62:d6:09:a8:cd:01:f3:c0:5b:59:4c:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6D:06:8D:70:E3:F0:84:82:B7:5C:DE:66:04:5B:FB:1C:58:5F:7A
X509v3 Authority Key Identifier:
keyid:A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ca:33:92:16:21:fe:a2:80:ca:4d:14:da:5e:39:b2:f7:ab:
ea:0f:53:85:23:49:dc:8b:e0:81:fc:73:1f:0a:50:57:2b:06:
c0:d1:a6:2c:30:ff:44:b2:f5:4c:77:b1:33:ea:08:4f:b3:16:
80:82:a0:a5:c3:bf:1c:97:00:5c:1f:a3:fb:5f:d6:fe:cc:dd:
a6:c5:d9:38:79:89:37:6d:a0:c4:f9:06:92:50:ac:74:7f:36:
fa:50:25:7a:7c:a2:ed:07:84:40:7f:9c:ac:cf:18:a1:09:5d:
25:f6:59:9b:1d:f4:5d:64:84:68:fc:21:4e:c7:2a:a9:40:bd:
42:04:9b:bc:b1:94:c6:6b:f1:d3:b0:b6:0f:ef:87:e4:cd:37:
96:af:18:98:4b:dc:73:cd:ab:b1:01:35:9e:ed:57:92:e2:bb:
8b:7e:d2:dd:d8:2e:0c:b3:d0:8a:e8:bd:9c:59:05:b2:89:c3:
d3:6c:f2:21:f9:2b:41:30:45:43:32:07:83:93:c1:fc:1f:5c:
fb:0f:5e:41:e9:24:04:96:d7:35:5f:d6:4f:ab:23:57:06:ca:
de:cd:22:73:fa:a0:02:8c:b3:e3:2e:07:56:d7:32:b4:db:42:
98:9e:7f:2a:36:a5:21:e8:09:c9:39:87:b3:70:e4:9d:a0:ab:
16:ff:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:10:18 2025 by rpki-client