Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: Ij2OQkgcXtL6Am726yGEaYi/pVhoNhurOg3K1F6yntY=
Subject key identifier: 83:D0:58:02:0A:67:39:6F:98:77:1B:B4:FF:A4:09:73:F2:21:ED:E8
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019773E4EB97F35B02E3403CE8C8A3F5FC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 04F5
Signing time: Sun 15 Jun 2025 14:01:11 +0000
Manifest this update: Sun 15 Jun 2025 14:01:11 +0000
Manifest next update: Mon 16 Jun 2025 14:01:11 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: tkSxvBU0Zah0i2307PKneKs0Pj+zCuBEQXP0d3fA6ik=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:eb:97:f3:5b:02:e3:40:3c:e8:c8:a3:f5:fc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Jun 15 14:01:11 2025 GMT
Not After : Jun 16 14:01:11 2025 GMT
Subject: CN=83d058020a67396f98771bb4ffa40973f221ede8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:cf:86:a2:c7:96:6f:e2:21:10:d0:ee:ed:
bf:70:62:7a:31:03:14:8e:9f:81:25:2f:4b:44:3c:
cd:35:8d:ae:a3:2f:c0:0a:0f:d3:b7:af:0a:24:9f:
0b:da:87:1a:68:9e:33:18:13:6d:0e:92:c4:fa:57:
2d:68:93:a3:cb:2b:53:25:75:11:d6:7c:3e:dd:c7:
11:2a:d3:57:bb:8e:e8:8a:70:ae:0a:dd:50:df:a0:
bf:d7:22:78:19:16:96:0a:70:c5:cb:ff:09:b3:05:
0c:4b:d4:54:17:45:b2:e5:e1:33:01:80:cc:c8:15:
f3:af:c2:41:77:a7:e6:b0:af:94:30:8b:e3:00:09:
19:27:6b:0d:de:97:14:28:0b:d8:21:b1:89:6d:07:
e8:98:3c:8d:f6:5f:d3:c8:5e:84:00:57:69:f2:24:
87:65:7a:22:76:1a:2e:fe:f2:e7:12:ed:5a:5a:4d:
61:16:d9:a2:f9:fb:67:bc:17:5c:e2:a4:41:90:3d:
6a:6b:bc:47:75:34:0e:06:fa:9b:6f:69:3e:ae:a6:
b9:ee:29:71:ea:f7:b6:a5:85:6b:8d:88:35:0e:97:
0a:be:a3:dc:4d:7e:83:fc:09:bf:70:08:47:22:60:
7a:72:0b:13:01:00:ff:9d:2e:1c:e7:49:fb:70:4b:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D0:58:02:0A:67:39:6F:98:77:1B:B4:FF:A4:09:73:F2:21:ED:E8
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ae:6a:57:51:27:50:b4:59:d1:1a:ee:44:5d:55:ce:81:e7:
ac:b8:67:2f:fa:60:e6:2e:8d:8e:68:1a:07:7d:64:6f:81:0d:
f8:b9:04:d8:1e:c9:96:9e:34:80:90:ad:8c:02:16:cc:a4:0a:
83:9f:17:c8:d2:9b:bd:46:41:e4:1f:af:83:39:04:f5:71:94:
7e:01:da:9c:71:b1:58:02:a4:ae:d6:33:e2:82:70:63:55:97:
d3:b3:d9:3e:ef:8e:2a:d7:18:6a:a3:d7:7b:a1:ac:5b:20:7c:
bd:36:7a:4c:4b:1b:f1:c9:e4:a4:30:fa:a0:74:8b:92:ac:45:
42:cd:db:9f:b2:da:44:ad:38:24:b0:83:07:67:a6:cb:bf:2b:
d7:1e:b9:af:4a:0b:33:4a:c6:e8:15:34:04:94:bc:c2:c0:78:
c9:fa:27:48:b3:3e:ec:d4:5d:f2:eb:4c:65:ce:86:9a:1e:da:
4c:26:fe:cd:26:9c:4d:2a:eb:45:22:26:b2:10:f5:77:1c:dd:
ec:51:57:f9:ea:40:72:43:48:5c:00:90:4a:03:c8:d1:35:dd:
b9:f2:52:95:e8:cb:25:9f:70:86:74:82:f5:04:32:19:84:81:
f6:59:6c:53:b4:e7:4b:c0:5d:17:45:1f:69:ff:4f:dd:71:80:
43:b5:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:41:03 2025 by rpki-client