Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: LeluLwpOIERWgaZd4uMeA8wxNJVSkVSxh7VXbfgz52w=
Subject key identifier: 31:65:5C:27:A2:F1:E4:42:DE:40:BD:71:FF:60:A4:93:C9:66:F0:39
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 019783C6117600C96C7B1905BEBFEAB906DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 0F00
Signing time: Wed 18 Jun 2025 16:01:25 +0000
Manifest this update: Wed 18 Jun 2025 16:01:25 +0000
Manifest next update: Thu 19 Jun 2025 16:01:25 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: IxrM1IBLbPopzLuUxu1TBcXFNyjtQvqXIZbJtQQLkkY=)
2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c6:11:76:00:c9:6c:7b:19:05:be:bf:ea:b9:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Jun 18 16:01:25 2025 GMT
Not After : Jun 19 16:01:25 2025 GMT
Subject: CN=31655c27a2f1e442de40bd71ff60a493c966f039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:46:8a:ad:11:a8:a6:37:2b:b2:6b:eb:e6:
ae:34:48:b6:d2:3b:f9:8d:43:d7:ca:c1:0c:df:b9:
5e:b4:d2:42:fc:4c:8c:77:8e:f7:e5:d3:08:f8:ae:
00:37:1c:a0:c9:93:86:20:7a:36:56:d2:eb:22:9b:
5d:ee:72:a5:0c:b6:90:63:7d:65:c9:fd:73:ea:36:
1b:7b:24:5a:42:5e:31:5a:93:33:ef:e4:0e:88:85:
42:15:ec:3a:d0:75:5f:00:f6:a6:cd:33:77:5c:81:
d0:01:51:6d:2e:f5:25:ba:7b:ec:2f:d2:a9:15:76:
e4:bd:4b:ab:10:36:ca:0c:d6:8e:b4:73:fb:e9:08:
0e:d6:29:02:be:e2:52:b0:21:9a:e0:8e:47:4b:8d:
33:e9:ba:0c:57:5f:e0:1d:06:ba:5a:bf:40:9b:04:
fd:b8:3a:0c:27:0f:fb:e5:1b:fa:61:6a:ff:a7:bc:
44:7d:3e:1d:62:7e:c0:44:04:d4:cb:24:fd:ad:ff:
78:40:41:31:f2:96:8c:b3:4b:78:48:ba:32:fb:09:
31:0e:e5:f3:4a:4f:22:ce:07:e0:c6:6f:50:ee:6f:
b9:2b:1b:3e:47:1a:cf:51:ae:39:e2:60:aa:b1:2f:
c9:f5:38:3d:e5:b4:6a:66:93:91:1f:37:86:47:5f:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:5C:27:A2:F1:E4:42:DE:40:BD:71:FF:60:A4:93:C9:66:F0:39
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:11:73:e5:9f:53:3b:31:d5:ee:b3:39:63:92:42:c0:9b:d6:
93:01:df:2d:60:30:d3:00:99:bd:8e:4a:33:1f:51:d2:db:cd:
ad:38:0f:3e:71:22:23:ca:07:78:6b:18:1c:0d:19:17:06:a8:
9e:54:10:23:9a:44:62:65:50:68:b0:3d:6d:d6:d6:93:23:fd:
ca:45:b9:20:cb:98:2c:b7:b2:4a:ed:1a:da:55:3a:7f:a7:be:
b1:c9:a2:e4:51:c0:62:52:6a:be:6d:82:26:f5:16:01:e3:9d:
2d:13:c4:1a:bc:f5:1a:0b:23:a5:80:35:f2:93:b5:b7:57:aa:
ca:2a:6b:68:2f:ae:76:23:aa:5d:66:ba:e7:b1:28:e3:10:9b:
47:de:7d:c4:12:2b:e6:03:b9:23:b0:fc:72:60:a5:fe:cf:2b:
1f:57:2c:81:b2:35:cf:5c:78:f3:33:8a:01:e5:17:e1:78:40:
a4:40:4b:8c:7b:d4:f0:19:72:ab:c2:73:57:d4:66:54:0a:69:
04:dd:40:a6:43:52:c5:47:86:b7:c0:36:36:f5:aa:65:93:07:
1c:20:cd:68:2b:0a:b5:6a:e1:5d:bb:57:0b:c0:0d:46:c5:d2:
c3:06:42:4c:6e:a6:11:7c:91:21:82:1f:d5:6d:26:10:b8:d5:
b9:13:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:47:39 2025 by rpki-client