Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier: OztCC8+rF3MJZzntMyAs1Syfq6QuGENl61Opk61F5zs=
Subject key identifier: 01:CA:75:03:32:5E:8F:03:9B:22:42:E2:CF:82:5C:BC:34:CA:FC:0B
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 019768BBA7C853F0D01FBBE33AC9D6148E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number: 108E
Signing time: Fri 13 Jun 2025 10:00:18 +0000
Manifest this update: Fri 13 Jun 2025 10:00:18 +0000
Manifest next update: Sat 14 Jun 2025 10:00:18 +0000
Files and hashes: 1: dM8ue4QsbABqpycB_HrMjLWl-Ek.roa (hash: 6OKHBYa4aX8P3AT8g1+RNo8KpQbjldC66CV5IU1+Dk8=)
2: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: GDvevgNDFpbi5rZKO9vPtoIcZeQ5BSS0+45E+2zZkKs=)
3: syr1WAsKdpbK3B-2acqa83QBouY.roa (hash: 7AhmNgpdXoA3dOcpljZ7vHI4I+47jOSplCREprRNiXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:a7:c8:53:f0:d0:1f:bb:e3:3a:c9:d6:14:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Jun 13 10:00:18 2025 GMT
Not After : Jun 14 10:00:18 2025 GMT
Subject: CN=01ca7503325e8f039b2242e2cf825cbc34cafc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:5e:38:f8:10:88:b0:6d:8a:a1:87:e9:2e:
01:ff:01:fe:23:95:6f:68:85:cd:25:3d:4a:a8:ea:
c5:34:a0:fd:3d:37:68:9f:72:5d:7f:a7:cb:2d:d3:
4f:91:9f:22:03:be:92:07:94:cd:32:be:da:14:40:
3c:92:1d:41:a2:73:65:39:9b:57:57:21:e0:50:e5:
a4:0f:37:62:44:73:61:4a:3c:18:b4:7a:cd:d6:7a:
31:d4:49:31:46:5e:08:fb:09:87:18:af:23:21:b3:
a3:4d:4e:43:82:54:80:c9:9c:b5:1b:d1:57:48:01:
dc:dc:8c:61:bc:78:ee:54:1e:8d:ea:c9:f2:72:74:
ce:0e:6a:4f:c5:00:82:01:34:fa:dc:23:1f:6b:21:
4c:26:8d:d0:1a:e8:b0:a3:a2:ea:f9:67:d5:79:d1:
1a:f1:c2:14:45:7e:57:ef:a3:ba:9a:a2:59:70:e8:
f4:9f:f1:64:ff:79:80:fc:d5:fd:29:78:f1:18:68:
d8:d4:50:9c:58:4b:60:0c:12:a2:56:cd:12:ed:11:
90:99:d2:ec:a6:36:98:08:02:7b:82:80:f5:7e:91:
a9:c7:f7:e4:83:93:f4:29:20:b2:8d:b7:94:b1:e1:
2f:55:c2:de:61:99:21:ca:80:62:db:14:de:e0:46:
0a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:75:03:32:5E:8F:03:9B:22:42:E2:CF:82:5C:BC:34:CA:FC:0B
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:61:89:98:cf:a3:8c:95:ff:44:48:4f:2c:7a:9d:b9:51:96:
98:ff:33:b0:ee:79:14:a8:f6:de:1e:bc:72:b7:d4:8b:d2:b2:
0f:47:60:36:b6:0c:eb:71:60:31:38:45:c6:1e:38:c8:fe:93:
25:96:63:3e:f1:87:1f:8c:4d:ad:bf:0a:5c:e6:7c:57:27:f3:
91:cc:6e:cd:79:76:c0:68:be:47:8f:89:f0:01:9f:71:75:e6:
ac:5c:d7:00:d2:0d:19:30:db:c3:6c:a6:d3:86:a7:11:0d:ef:
3f:90:13:df:a7:89:76:13:47:bd:f5:29:ef:31:01:b3:29:7b:
9e:40:0e:99:a4:85:40:ac:a2:3f:cf:be:bb:14:41:ec:3c:57:
03:82:25:98:e8:8f:f3:62:86:4d:87:27:54:8a:8e:66:66:eb:
47:64:fc:c6:cb:31:ff:ac:c9:b4:85:f3:39:3f:c2:7e:43:c8:
76:ed:7c:43:69:bf:fa:92:c6:fd:94:9b:c4:08:af:11:e3:65:
42:5d:63:28:fb:59:fe:ac:14:3d:72:52:b8:e7:78:2e:7e:fb:
a9:56:f9:86:dc:bc:c5:93:e6:49:4a:0d:94:9a:c8:31:fa:2d:
57:b6:f4:c4:0d:4a:f6:83:65:73:83:f7:b8:05:c3:99:46:92:
fc:4d:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:38 2025 by rpki-client