Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: RMqo7x8jcAzpyQGCDpiIj6xY+4QSt1K9K2Qi7xgJZlE=
Subject key identifier: AD:C8:57:2C:99:A3:BA:98:0A:95:B0:26:1F:29:F1:E8:6F:F9:E1:47
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 01976C624B79946D01E7D7EA5681CC2D4BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 0CA1
Signing time: Sat 14 Jun 2025 03:01:10 +0000
Manifest this update: Sat 14 Jun 2025 03:01:10 +0000
Manifest next update: Sun 15 Jun 2025 03:01:10 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: ybUSz6EYKLpDrJ6Wxu4EGcsRweTGqFi8gePq5EZJWHM=)
2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:4b:79:94:6d:01:e7:d7:ea:56:81:cc:2d:4b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Jun 14 03:01:10 2025 GMT
Not After : Jun 15 03:01:10 2025 GMT
Subject: CN=adc8572c99a3ba980a95b0261f29f1e86ff9e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:de:22:9e:b1:bc:2d:e7:c1:d2:7d:16:98:
b0:77:0f:b8:34:96:ca:ce:d3:d5:39:1c:a1:ba:82:
10:87:22:cb:1e:73:08:5b:ad:5b:bb:6f:e3:94:8c:
41:b3:11:37:24:9d:de:e4:4f:b3:9f:29:31:37:6f:
2e:09:bf:43:80:62:6b:09:9b:be:07:57:c9:bd:c6:
2c:aa:03:1c:4a:7e:9e:ee:a3:04:dd:72:96:56:6a:
48:91:b9:4a:37:67:ca:f4:f8:e3:b2:a3:49:e6:af:
0a:ee:29:9e:a3:84:3a:07:1f:4e:15:f8:6e:cb:c4:
ca:be:82:d4:03:f5:c7:a8:3f:18:19:dd:ac:a2:06:
cf:1f:b5:cc:1a:5a:68:8e:7e:41:3a:de:cc:3d:c0:
b9:e2:c1:65:8b:ca:2c:e3:ca:d9:f4:c0:d8:25:3d:
8d:fe:1b:f7:8e:71:2b:12:31:d2:ca:0d:31:4d:15:
6e:92:71:2d:6e:f2:ff:34:85:e9:65:aa:6a:e7:a4:
c8:52:ee:a4:ab:93:c0:ef:8c:7c:22:1c:1f:82:99:
27:93:83:8d:73:10:5d:5a:53:5f:92:81:5c:3e:c9:
5a:e2:ed:14:3e:26:49:34:47:f6:c6:a6:fe:59:cb:
cd:34:84:ee:cd:6f:23:26:52:41:49:e8:69:4b:5f:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C8:57:2C:99:A3:BA:98:0A:95:B0:26:1F:29:F1:E8:6F:F9:E1:47
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:43:0a:ce:40:87:4c:8d:19:04:2a:a5:ea:b0:80:e9:59:fb:
92:47:82:3f:71:50:31:2e:72:56:03:eb:d5:54:70:aa:11:e2:
10:22:17:db:c0:33:38:a4:60:84:ec:68:42:1d:f8:1e:c1:ed:
33:60:28:e6:05:33:df:ca:7e:49:40:e8:20:7b:c9:c9:35:78:
27:96:31:24:46:36:66:c8:2a:87:2c:ae:a6:4b:97:7e:48:db:
c7:98:30:fe:cd:9b:6b:ee:19:d6:97:64:f2:0c:44:83:2f:c6:
84:3e:0c:df:36:d9:06:79:cf:33:dd:5b:5f:0b:01:02:3b:1c:
55:26:cd:81:45:e9:d4:53:2c:b1:e2:a9:3c:93:18:0b:09:e3:
0f:f4:d3:15:b5:b4:40:10:67:52:3b:7e:88:95:e6:4b:e4:dd:
b0:ad:8d:50:59:93:ef:f1:17:c5:7f:ec:3a:49:a3:61:88:3c:
4f:39:c9:76:4e:5e:e8:8c:60:0e:ae:56:84:bf:0a:2f:b1:89:
84:bf:b1:2f:fd:bb:bf:da:a6:a5:55:c2:12:13:ab:e9:a5:f1:
0f:b0:77:ed:70:f2:13:d2:15:21:fe:6c:90:18:48:cf:53:34:
34:74:73:73:17:ef:ab:24:40:b4:9b:54:96:02:2d:b5:c8:9d:
d4:07:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:40 2025 by rpki-client