Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier: JoesBeNaLjwKcTxQdu1HRgJXX/TJ99CDdsl1Cu23h50=
Subject key identifier: 9C:73:4B:21:10:EC:F4:E8:F8:67:15:3A:3C:AA:B6:A2:0D:24:53:0E
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 0197741B0D33908AE8DDAF06F9370F500905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 15:00:19 +0000
Manifest this update: Sun 15 Jun 2025 15:00:19 +0000
Manifest next update: Mon 16 Jun 2025 15:00:19 +0000
Files and hashes: 1: 1-oPnzeRnS2wes3eHWFhju7Aog-g.roa (hash: 0Z/IUXs4OK8CJd/fYdgboQWjbgJJCz+sIFSEwO7NpmA=)
2: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: otk4UFx/0EmyboAkxJ+5INVm0j4D6k+ZqOTMa85g8ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:0d:33:90:8a:e8:dd:af:06:f9:37:0f:50:09:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Jun 15 15:00:19 2025 GMT
Not After : Jun 16 15:00:19 2025 GMT
Subject: CN=9c734b2110ecf4e8f867153a3caab6a20d24530e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:d8:3c:27:68:5a:91:6a:f3:96:bc:bb:e7:
a3:61:eb:46:fe:ec:85:fd:da:86:cc:2b:21:0d:4f:
07:24:5e:bf:af:74:14:a9:95:b5:da:a1:4a:39:64:
71:67:80:a8:0d:91:38:d8:d3:f9:9b:9b:35:01:8e:
fa:77:c7:f5:0b:81:77:59:4f:4e:f7:2a:b4:a0:2d:
f0:ab:a5:ba:4d:c8:d5:4b:d7:29:d0:75:a4:06:13:
e9:5a:80:c6:d1:4f:bd:1a:cd:e3:fd:0d:11:20:c4:
bf:56:bc:99:db:fd:d8:4a:73:a1:da:d5:96:a7:75:
1f:cd:83:67:1d:07:f8:b0:da:0a:c5:f2:64:50:7c:
8b:7a:24:a8:e6:e1:a4:a4:93:5d:a9:49:ab:0f:3f:
80:7f:b0:dc:5b:90:ec:6b:58:92:05:af:7c:10:0e:
6a:2a:16:ee:2d:b2:f7:51:a3:bf:cd:c2:68:94:f9:
11:9b:4b:91:3b:7f:f1:ea:dc:be:0c:1a:40:3f:9a:
86:30:4b:39:e5:00:b2:87:a5:7c:05:42:d4:a0:60:
f1:f3:97:f6:38:24:d9:57:1e:0a:62:7c:1a:a8:2c:
18:8d:8e:45:cf:cc:d4:f3:b4:10:c7:55:42:e5:8d:
f9:3d:cc:5d:1e:30:f5:8c:68:45:89:0d:2c:50:44:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:73:4B:21:10:EC:F4:E8:F8:67:15:3A:3C:AA:B6:A2:0D:24:53:0E
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9b:25:28:e1:bc:25:98:27:65:91:47:c3:0e:fc:36:29:44:
23:9c:8c:a2:de:b2:a2:55:8e:4d:d5:37:c2:04:2b:14:f2:05:
e2:3d:ec:a5:27:20:98:81:f9:11:e2:66:61:e0:93:4d:c5:d9:
b8:a1:9e:f5:d2:9a:1f:8e:88:32:f7:a1:e0:9a:76:9e:ed:97:
0a:c1:3c:8b:89:0a:87:2a:d7:9b:34:4f:de:3a:d1:03:e2:48:
3d:64:62:1e:15:85:a5:9d:5a:3d:8b:39:bc:79:46:f6:d3:31:
2d:5b:35:86:01:0c:de:89:75:ed:e9:06:09:ce:1d:9c:12:a8:
3d:5f:26:b4:39:93:67:2b:b0:00:25:9c:f7:8a:a6:ec:3d:f9:
ce:0b:3f:be:fe:4c:bb:7b:5d:a0:ed:2d:62:4f:d2:08:7a:cb:
1f:95:57:80:9d:b9:07:9e:0c:6c:8d:f4:50:2d:3b:59:3a:81:
93:f9:4e:cd:7b:ce:05:24:0e:f3:e3:f7:4c:70:9e:10:be:2e:
75:7b:34:44:8c:05:c4:8e:d1:57:fc:58:72:de:0c:4a:e8:37:
63:72:4b:98:e8:5a:dc:b8:dd:46:bb:e7:10:99:ca:7b:58:3d:
58:c0:21:3c:de:6b:25:17:c6:76:f9:ff:ce:7e:30:90:86:c1:
01:c9:63:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:10 2025 by rpki-client