
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: eV4sxqjOo+YMTOgyqMuocSwndfeh1fo7/BWh1B0parw=
Subject key identifier: 82:FE:2E:F9:65:D1:31:F5:4E:CF:D7:81:63:49:C2:08:41:B1:AD:E3
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 0197684E2A059AE3A1009C8DAF2020E92600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 08:00:42 +0000
Manifest this update: Fri 13 Jun 2025 08:00:42 +0000
Manifest next update: Sat 14 Jun 2025 08:00:42 +0000
Files and hashes: 1: 26TbrymsKsZjBkQHIbbRRWaFR8Y.roa (hash: SWIdCtaxTysSBJj/hZn1IHZ7qzsZ9zOqjJPPtoUQNGw=)
2: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: i4fbQNm+fuLsemqKa1/UCWqqpO08MsYrDauXT4pBn1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:2a:05:9a:e3:a1:00:9c:8d:af:20:20:e9:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Jun 13 08:00:42 2025 GMT
Not After : Jun 14 08:00:42 2025 GMT
Subject: CN=82fe2ef965d131f54ecfd7816349c20841b1ade3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:f7:98:9a:37:30:ea:74:a2:0c:86:88:ef:
fe:81:c0:eb:30:78:54:53:cf:7d:10:f4:6f:3a:6d:
cd:29:57:26:d3:c2:0b:93:d6:4c:a5:33:bc:bb:a4:
ae:da:1f:3c:a6:f7:e9:e3:4b:a7:ce:0f:57:12:25:
56:f9:9a:39:df:f4:ca:9b:c9:29:c4:d7:a4:93:a6:
52:c5:a9:3e:e5:7c:44:21:20:d7:4d:8c:0c:ed:a5:
6a:9d:93:da:a6:53:3b:42:81:f7:9d:fc:8b:9e:bf:
f5:7c:98:5c:3b:ba:cf:a9:94:7c:f3:d9:b5:3c:ee:
93:14:ff:89:b2:1a:57:a6:56:d2:33:52:2a:51:11:
bf:e3:00:1c:12:ad:55:70:e5:ed:e9:2a:d7:68:9e:
51:3e:26:c4:c7:33:bd:f7:41:bb:e5:39:c5:a4:c6:
1f:9a:07:ff:ff:8d:82:11:e6:b3:d1:9d:45:bf:85:
65:b8:70:54:3f:67:1e:e6:af:56:a0:05:53:28:bd:
07:23:c7:2b:fb:54:72:ce:ad:03:67:84:f6:d1:98:
d5:5c:e7:4d:aa:ec:6e:59:33:ed:53:cd:58:91:d1:
d8:b0:16:a1:ff:02:40:b4:ee:34:57:0e:b1:9c:f0:
71:2d:8e:7e:61:ee:f9:cd:6f:24:02:0d:63:ec:cb:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FE:2E:F9:65:D1:31:F5:4E:CF:D7:81:63:49:C2:08:41:B1:AD:E3
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2a:bd:28:6c:57:26:2e:61:37:de:e5:87:cc:82:93:a6:51:
4d:39:48:47:e5:7d:33:04:d4:25:ad:8b:15:f3:0e:a3:a3:cd:
50:e8:64:02:d2:91:3a:46:c2:d7:50:79:80:74:65:70:f6:f6:
59:09:1d:71:47:41:8e:e9:23:d3:a9:37:bf:07:34:78:a6:06:
1b:b2:3e:d0:9e:e5:69:46:35:8a:da:68:3a:32:0a:51:86:12:
12:83:3c:ea:21:bd:0e:ac:82:6a:88:9e:54:13:c1:a0:62:ba:
93:10:a7:a0:96:de:12:91:dc:a5:80:bb:ee:41:2b:8e:39:a4:
78:2d:d1:10:1b:09:df:29:cf:30:5c:21:38:7a:c0:a8:28:2b:
67:12:3e:20:cf:87:c1:56:68:1a:a8:62:72:6a:3e:28:6c:e1:
7d:8a:88:65:31:9e:ca:8a:9c:8e:ee:70:af:7c:55:43:a9:dc:
60:4a:17:a5:da:81:92:57:8e:dc:d1:7a:9b:7e:1e:3f:29:80:
e7:de:a0:56:36:87:14:7c:9c:66:13:c8:7e:76:85:e3:76:54:
82:dd:bd:15:bd:53:49:17:5f:ea:66:39:ec:35:bb:d5:3b:17:
d9:2d:89:4d:d0:ef:11:96:60:90:51:7c:07:26:98:66:6a:f1:
7a:82:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:58 2025 by rpki-client