
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: 0OiWAUOZhniovJyGmupn7suQjMNYi6H+bdGf9dtnctM=
Subject key identifier: 6C:51:6E:B3:FD:D6:29:EA:5D:87:31:98:4F:81:AB:E7:DE:3C:AC:9A
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 01976BBCDCE4D0FACBC51CDCBA7A7FEDB69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 00:00:28 +0000
Manifest this update: Sat 14 Jun 2025 00:00:28 +0000
Manifest next update: Sun 15 Jun 2025 00:00:28 +0000
Files and hashes: 1: AXdtgA9HD_eEgv2xOauCB5PRPTI.roa (hash: eE91r99J937Hp1PJua6WE3j9iIacTvevX68FK66M1mQ=)
2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: W+Goy8H6Pbm2gh6CVbXvPE7tb1sqC4VfcP5L4QnLdDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:dc:e4:d0:fa:cb:c5:1c:dc:ba:7a:7f:ed:b6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Jun 14 00:00:28 2025 GMT
Not After : Jun 15 00:00:28 2025 GMT
Subject: CN=6c516eb3fdd629ea5d8731984f81abe7de3cac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:79:a0:27:90:19:f2:8e:2a:90:81:2c:d9:
1a:ad:ff:3d:ce:2c:ab:00:de:c5:76:27:0f:0b:50:
ff:08:33:78:b2:05:37:5c:45:b1:15:b5:d2:7f:66:
1c:62:24:2b:c1:7c:eb:50:cd:0d:d4:11:60:0c:41:
1a:9d:b5:26:ab:eb:3d:ec:29:3f:9a:ed:7f:c2:f6:
40:c0:91:64:c0:5c:50:ae:a5:89:62:03:df:9c:68:
ab:fd:a1:c7:ba:17:c5:af:44:ca:3f:eb:d9:fd:00:
c9:e3:4b:d6:37:ca:7d:78:8f:71:cf:f0:cf:f6:40:
13:99:8a:f7:90:3c:a3:d9:4f:b3:34:e8:df:ab:a7:
58:20:16:87:6d:d5:6e:37:47:51:98:41:23:60:5d:
04:67:17:a5:15:45:a5:42:79:5f:14:c6:de:25:81:
f9:19:5d:e7:f7:aa:8a:45:29:d2:78:9b:5b:78:b4:
f2:f1:6a:0d:7f:9b:3c:5c:e9:2c:e7:de:dd:e1:f3:
cb:0a:5e:c8:56:ea:d5:22:84:40:67:78:e1:86:36:
f5:82:a5:55:d4:75:2a:09:57:83:e8:ef:8d:67:91:
21:3e:20:87:ec:95:c2:36:df:ee:c2:22:ba:b4:08:
78:33:1b:b3:df:d4:25:18:9f:78:32:41:df:bc:cf:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:51:6E:B3:FD:D6:29:EA:5D:87:31:98:4F:81:AB:E7:DE:3C:AC:9A
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:f4:7c:29:85:f9:21:ba:d8:41:47:2c:6b:7f:c0:de:c2:
02:d5:7b:9e:2c:c2:96:6f:c8:ce:e3:89:60:60:d0:91:07:48:
fb:23:ff:40:15:88:30:ce:bf:bd:1e:be:a5:83:25:2b:2b:38:
60:6b:06:df:0c:65:41:ba:b8:ad:87:59:74:3f:52:df:eb:8a:
09:53:56:9c:d2:cd:d8:40:fd:f2:f1:bd:0b:ad:9b:a2:15:aa:
ac:cb:7d:fd:af:8f:fa:16:44:63:f9:a6:13:76:28:82:57:9c:
1b:e8:7a:26:44:d8:d3:ad:09:42:03:07:1b:90:5d:f4:00:9a:
9e:1c:2b:eb:b8:42:06:13:72:af:de:e1:d6:fb:2c:19:66:b4:
a1:29:40:90:a8:ad:78:c5:23:15:d2:63:e9:1e:e0:ed:7c:f1:
7f:45:6a:97:4d:ee:66:56:c0:d1:e6:fa:7d:4e:25:f4:e8:b2:
8a:5c:68:59:cd:5b:79:08:d8:60:0a:b1:70:70:1b:f5:aa:3e:
b5:a1:12:48:75:94:f1:3b:81:35:0c:0c:39:c3:40:eb:a2:b7:
58:84:1d:d5:0a:3d:f0:e0:4d:ae:77:c3:77:34:fc:c9:f7:38:
83:0d:75:98:ae:96:a9:35:29:8f:e3:53:02:00:00:15:17:67:
6a:d6:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:36:46 2025 by rpki-client