Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
File: oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft (raw, json)
Hash identifier: Q40XE5TrrSkF8Fp2mD7O6ize7PRL9AQ7eXi9GMlpa+U=
Subject key identifier: E2:E6:E6:C0:E1:8D:CF:1A:B5:C7:F9:84:66:6F:AD:95:29:AE:31:19
Authority key identifier: A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
Certificate issuer: /CN=a1208242656123c0c90b6168d09b2d8a67617bec
Certificate serial: 01976F2CC07F1BC5097A894E3395B7FD8EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 16:01:33 +0000
Manifest this update: Sat 14 Jun 2025 16:01:33 +0000
Manifest next update: Sun 15 Jun 2025 16:01:33 +0000
Files and hashes: 1: YAoUenHihT4DQlafryFUSek-9CM.roa (hash: U8ZmX/KGlPOXoWxEXiPpdG5cQfV6PXbF8uCn/cMmNEA=)
2: oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl (hash: erAAQoP23UKF5YcwE9Stqfc/TsUKibhQQXYKtcr3krk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:c0:7f:1b:c5:09:7a:89:4e:33:95:b7:fd:8e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1208242656123c0c90b6168d09b2d8a67617bec
Validity
Not Before: Jun 14 16:01:33 2025 GMT
Not After : Jun 15 16:01:33 2025 GMT
Subject: CN=e2e6e6c0e18dcf1ab5c7f984666fad9529ae3119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bd:b7:f8:20:4f:14:cc:37:b3:de:c1:bb:be:
68:52:60:a0:33:c7:29:25:75:34:66:4a:2e:d5:1d:
d4:2c:f8:72:98:1d:12:bd:b0:db:77:0f:1b:d1:58:
a0:a7:99:ab:1a:96:a8:3d:99:8a:9c:49:29:a7:63:
42:e6:7d:9f:56:50:fa:f7:4d:eb:53:f1:33:2e:0b:
fa:cc:11:b0:c3:09:fa:93:2d:25:ac:05:8a:67:f8:
85:47:1c:13:5f:e4:aa:96:a9:41:92:47:8b:e5:ce:
96:db:50:c2:b8:b7:47:4a:f1:ad:7e:1a:55:50:03:
60:c1:62:b8:b9:9c:9c:61:3c:66:fd:47:2c:68:b1:
7d:d6:37:76:e6:51:ad:6e:8b:9d:55:94:c5:8a:df:
9e:57:22:df:ba:e9:35:46:45:5b:cc:f3:ce:1a:be:
0c:4d:3b:c5:3b:dc:c9:4a:66:e4:bb:3b:18:c6:db:
b2:a5:65:07:5d:05:6f:f4:96:a3:13:16:d1:45:2f:
b1:38:f1:16:6e:28:75:f3:e1:f2:a2:46:13:7d:6b:
6d:b4:ad:46:98:4a:1e:39:49:8c:94:02:c7:fe:3b:
a6:e3:2d:90:56:57:64:50:63:5f:66:18:c5:f0:8f:
6a:12:5a:36:c1:d4:6a:55:02:41:11:76:62:78:84:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E6:E6:C0:E1:8D:CF:1A:B5:C7:F9:84:66:6F:AD:95:29:AE:31:19
X509v3 Authority Key Identifier:
keyid:A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f0:66:76:7c:ab:50:85:6e:7d:d6:37:95:a7:ad:82:ed:9e:
de:6c:37:a2:ba:34:9e:c8:48:be:45:30:56:ba:6e:77:b9:35:
f7:dc:a9:bc:40:ee:ca:51:ec:fb:10:57:97:07:b9:2a:2e:ef:
20:a8:17:23:d0:7a:87:49:fb:ed:35:ef:2f:8d:ba:e0:39:c5:
2b:c1:64:93:43:8e:5b:51:e0:b3:18:29:59:78:87:31:cf:0b:
e2:99:e5:52:fd:2b:73:86:3b:13:ba:a3:82:fa:cb:82:0e:2d:
f2:9f:8a:24:b5:c3:f5:2d:b0:5b:f8:10:2d:e4:f8:3d:c2:7d:
eb:48:bc:c8:69:ae:1b:df:50:16:4c:0a:f8:dd:dc:38:80:51:
e9:b9:c8:5f:68:81:57:0e:71:b6:e4:7f:f4:42:44:69:28:9f:
fa:de:6b:7f:5d:3b:28:2e:42:72:ce:f5:1f:78:be:ff:44:07:
b6:d4:a2:05:28:6a:61:58:05:63:87:23:d5:00:a4:e7:8b:ab:
79:b2:6d:8f:89:31:b0:6d:3e:33:ca:5d:f4:1a:98:e4:4f:89:
ca:07:6b:cc:a8:1c:af:e5:2b:1a:47:2f:c6:9f:21:e4:3d:d9:
7e:60:e7:a0:18:a3:fa:e1:fa:dc:b0:cd:02:d8:95:1d:5c:e3:
67:82:0e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:17 2025 by rpki-client