Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: EiJz8rgZR3E4V9c4LhdIiB0gZodtfAiInPGoMq9iBME=
Subject key identifier: AA:95:45:E1:D3:61:DD:79:B5:32:B0:28:20:E4:73:1D:86:A4:06:45
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 01976E50352DC00E83D2C808F4C11D185F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 12:00:39 +0000
Manifest this update: Sat 14 Jun 2025 12:00:39 +0000
Manifest next update: Sun 15 Jun 2025 12:00:39 +0000
Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: IqcxHtk5T56L+S7W9KAjjb1niEXs/kcS+QtBsA36yYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:35:2d:c0:0e:83:d2:c8:08:f4:c1:1d:18:5f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Jun 14 12:00:39 2025 GMT
Not After : Jun 15 12:00:39 2025 GMT
Subject: CN=aa9545e1d361dd79b532b02820e4731d86a40645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:42:a5:f9:46:ba:88:cc:b1:55:e3:5a:68:
88:c7:4c:56:5d:79:f3:cb:17:1f:da:6d:89:f2:0c:
64:95:25:3a:ce:19:39:7e:60:47:2c:5c:58:2d:ba:
7a:5f:a2:9a:1a:0a:09:00:82:af:73:1a:06:5f:a7:
00:3b:a6:56:0e:e6:84:da:32:fc:f8:ea:62:a9:62:
ac:6a:74:2a:59:91:75:e0:be:ca:a9:48:af:c2:26:
ea:6c:03:46:14:74:09:c3:ab:dd:64:f3:f7:b8:11:
fe:0d:4e:1c:b0:5c:bd:2e:ca:ce:46:2b:89:52:74:
b3:b1:79:aa:98:68:12:31:cf:e5:1d:51:f8:5d:9a:
ce:18:b8:29:fb:a8:e7:d0:4a:b8:2c:9c:4f:93:b2:
33:77:86:c5:03:5f:be:73:af:a0:df:45:f8:17:ff:
37:8e:6f:8e:d1:72:bf:cc:b1:a2:ca:a8:e2:7a:23:
a2:98:0b:8c:6b:40:d9:d5:60:b9:f2:a8:ba:40:7f:
78:e3:4f:dd:6a:bb:fb:d6:9d:cf:2e:53:ea:bd:8e:
e0:77:b5:ce:6e:1c:0d:1e:c8:d7:b7:07:86:d6:40:
c7:80:6a:57:12:e4:95:dc:7e:b9:8f:20:7c:41:0f:
ee:cc:cb:53:70:46:44:2d:0a:3d:4e:b6:69:10:0f:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:45:E1:D3:61:DD:79:B5:32:B0:28:20:E4:73:1D:86:A4:06:45
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a1:06:09:87:2e:83:10:1d:f8:f9:e2:63:35:2c:cc:ca:7b:
42:09:bd:23:6f:78:e7:24:a8:b9:73:c5:fd:c0:d7:0f:a1:1e:
ac:a5:00:33:28:af:46:e5:ca:79:47:e2:80:ba:6e:f2:28:ba:
f1:31:f0:5f:e2:97:f1:f6:f0:e3:52:d7:f2:01:f9:86:26:38:
51:4c:91:c3:a0:b8:a8:56:e5:20:2d:59:15:09:d0:cd:30:d6:
40:d5:7c:6c:b9:04:e0:65:a6:7f:75:52:bb:85:b3:01:61:74:
43:6c:3f:4a:82:2d:67:58:03:7c:65:18:91:59:bc:60:85:98:
ee:34:4d:6c:35:dc:42:24:2c:c8:97:52:d5:09:8d:a2:21:2b:
d7:6e:a1:99:7c:92:de:7c:14:56:14:9e:9b:a2:f2:97:ea:46:
ab:77:1a:5d:04:76:06:d4:3a:6f:f8:8e:0c:45:20:e9:dd:1b:
e5:3d:92:d7:10:18:de:a6:a1:ee:d7:77:16:a3:74:82:2f:ad:
5c:62:4a:b1:42:35:45:4f:30:f7:54:f3:90:de:d6:bf:49:f3:
a5:c2:fa:7e:ba:66:be:6e:f2:d7:7e:0c:90:f6:ae:4b:0e:81:
0a:54:b4:6b:d1:a7:48:06:dd:64:c4:b3:d5:25:29:7f:61:fa:
4f:a8:86:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:48:30 2025 by rpki-client