Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
File: OUjkpbK65iNUmZE9y-wE38pTHpA.mft (raw, json)
Hash identifier: 7aFSvKKd1sAUrKJLUDcoAuKNJ+p5fd8uHby9rH0z6fc=
Subject key identifier: 2F:D9:8B:92:C3:26:9F:CE:D9:AD:46:B7:56:6A:17:5B:01:2A:DE:13
Authority key identifier: 39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
Certificate issuer: /CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Certificate serial: 019773ADFCAD447EE779552B815CE51803B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
Manifest number: 1464
Signing time: Sun 15 Jun 2025 13:01:11 +0000
Manifest this update: Sun 15 Jun 2025 13:01:11 +0000
Manifest next update: Mon 16 Jun 2025 13:01:11 +0000
Files and hashes: 1: OUjkpbK65iNUmZE9y-wE38pTHpA.crl (hash: X/UbxDnDfHmW0/boNh9l+exH7rlBM8DoKVscEmsxQbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:fc:ad:44:7e:e7:79:55:2b:81:5c:e5:18:03:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Validity
Not Before: Jun 15 13:01:11 2025 GMT
Not After : Jun 16 13:01:11 2025 GMT
Subject: CN=2fd98b92c3269fced9ad46b7566a175b012ade13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:7d:30:f7:3d:55:a3:2b:77:33:2f:cc:53:
00:df:de:08:da:a2:f0:0c:65:62:1d:a6:f3:01:7e:
ca:3b:93:ae:61:c0:63:c6:ad:31:f6:2a:d7:89:bf:
e3:5e:5c:b5:5c:13:7d:10:80:3a:94:4a:6d:c1:d8:
1f:48:a2:5e:ae:bb:d9:54:70:ed:7e:85:0c:0c:00:
60:0f:6d:5e:2f:cb:f7:42:f9:6e:d9:ef:fe:63:60:
78:a0:24:11:5d:fd:87:37:d8:e1:26:5d:0a:2a:25:
8b:39:9f:a8:3f:be:bf:d4:8f:f6:e1:e8:ac:76:2b:
a6:b4:56:31:fa:f2:8a:7c:0c:2b:fc:79:d5:1a:68:
63:ad:c9:a6:b6:c5:cc:7b:1b:b3:00:f9:43:95:af:
12:04:64:14:e7:d9:84:37:4f:16:5e:84:8e:6a:f7:
49:5b:57:af:c1:82:ac:dd:70:56:59:aa:bc:2d:37:
79:71:a8:68:65:56:5d:a7:13:d1:ac:44:89:d0:66:
9a:1b:5e:cc:a7:2f:53:a3:2c:37:04:8e:b6:1d:65:
32:b8:0a:c6:e4:86:36:96:e6:fe:ca:63:c7:bb:c1:
ca:62:78:0f:86:1f:d1:4a:ad:14:55:e9:23:ea:44:
44:f8:7d:32:a8:27:a3:fb:ef:1d:db:11:b6:75:a2:
e4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:8B:92:C3:26:9F:CE:D9:AD:46:B7:56:6A:17:5B:01:2A:DE:13
X509v3 Authority Key Identifier:
keyid:39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:33:94:8c:60:3a:17:4f:4b:29:ec:4c:dc:fb:97:93:53:40:
7e:ea:13:fa:97:24:4d:96:ac:47:db:a9:ac:f2:98:d9:c5:06:
cb:d3:c5:bc:82:db:27:e3:ac:6c:48:1e:85:fc:ef:90:60:b8:
8f:e2:d9:c8:e3:f0:56:7e:21:ee:f1:5a:78:96:cf:77:81:06:
e1:40:7f:87:c0:cf:eb:28:a9:9c:e2:a8:4c:6a:13:6a:31:c9:
52:bb:a1:47:58:64:21:e0:45:a1:a5:bf:46:04:72:0e:31:f5:
26:72:00:43:67:91:95:38:c4:0d:ec:76:61:3a:cc:dd:05:62:
e3:bb:74:78:48:a0:cf:42:66:ca:d7:ad:d9:cc:b6:ea:8e:6c:
b2:30:ce:f4:5b:18:89:43:03:35:09:03:7d:e5:86:99:27:19:
48:c0:a7:27:bf:64:6c:d5:5d:43:9c:6d:66:d4:4c:02:b8:38:
66:70:51:74:c8:56:96:f1:99:4e:cb:1c:5b:c9:96:4b:b0:aa:
34:09:35:74:fe:c5:76:1b:d6:55:9b:55:82:47:ae:8f:2f:27:
9b:46:79:05:31:fe:dc:76:b6:f4:b4:b7:4c:fb:91:1b:f6:72:
91:05:9c:af:85:db:83:bd:0b:6b:9c:8c:27:c2:ca:33:06:8f:
69:1e:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:00:05 2025 by rpki-client