Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: s031BuUgi6wmym0O4hm8bCZQJPwedQgYWtS0Mhwgs/8=
Subject key identifier: ED:04:2C:4B:B8:CE:0E:67:42:C4:DF:EF:C6:CA:86:2A:91:52:85:44
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 019768F2B6CE2F513AADBE623EC173F37C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 015D
Signing time: Fri 13 Jun 2025 11:00:26 +0000
Manifest this update: Fri 13 Jun 2025 11:00:26 +0000
Manifest next update: Sat 14 Jun 2025 11:00:26 +0000
Files and hashes: 1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: 9dp2N8Es79I/Dtpmn3/2ne7jMP1/VlHny8hFYLfTBKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:b6:ce:2f:51:3a:ad:be:62:3e:c1:73:f3:7c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Jun 13 11:00:26 2025 GMT
Not After : Jun 14 11:00:26 2025 GMT
Subject: CN=ed042c4bb8ce0e6742c4dfefc6ca862a91528544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:13:d3:a3:e1:de:0b:f2:e4:8b:ac:df:61:
94:1d:ac:7a:b4:e9:41:98:d6:a5:4d:8e:7e:46:95:
47:3c:01:d9:9c:b5:53:44:74:a1:e6:6e:e6:f0:7b:
5b:39:15:5a:8a:08:79:15:6e:cd:df:2b:13:7c:b5:
af:3a:0b:dd:7c:14:76:8e:b3:ad:1b:40:6d:21:bb:
35:dd:c2:a0:25:37:43:07:28:c7:18:19:58:2b:61:
e8:ff:6f:5d:bf:16:e5:c2:60:38:ae:ed:f5:a4:d7:
d4:c8:bd:c0:f5:ea:b5:4b:21:0a:27:96:1e:d0:85:
1e:e6:3f:32:4f:ab:52:7a:b9:d4:81:af:60:ef:30:
e1:54:f3:1e:b9:18:41:5f:76:97:6d:24:6b:76:e8:
5e:2f:21:3d:14:08:7e:d7:d4:ef:6a:20:36:86:3e:
d5:23:5e:24:5e:c4:52:7a:a5:7b:7f:11:46:bf:fe:
75:17:d8:4a:b9:b7:d7:f0:e8:76:cd:0b:f9:94:08:
d6:ab:c5:57:f7:d6:ce:fb:e0:8b:d9:43:60:b2:7a:
b2:4d:c6:b9:a9:62:0a:84:7a:7c:14:c1:b1:1a:29:
30:64:65:1c:6e:04:b9:5c:9f:bf:c2:6a:9f:95:1d:
ad:81:8a:81:af:cd:fb:dc:81:e9:3c:89:a1:d8:0b:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:04:2C:4B:B8:CE:0E:67:42:C4:DF:EF:C6:CA:86:2A:91:52:85:44
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:48:ba:ab:21:3b:7b:06:00:79:2c:df:11:69:d9:96:13:8f:
a1:f9:51:7e:09:9e:8d:04:56:aa:24:91:33:46:ba:f8:c8:2b:
22:9a:7d:9c:bb:ff:1e:1c:b1:c6:75:61:97:15:4b:55:d4:9e:
94:b9:f9:cd:e3:7d:12:55:9d:50:95:23:25:5c:f3:e2:89:54:
39:a8:e9:0e:80:56:22:3d:43:78:83:75:d8:df:75:0e:4f:26:
cb:57:d6:38:e1:3c:a4:c0:3b:bb:80:c8:8a:94:e2:78:ff:74:
7d:6a:34:1c:66:b1:4e:17:b1:df:10:dc:c4:5b:17:f7:52:7e:
23:75:65:10:33:31:0c:54:b0:3e:a8:d9:9a:ae:f3:d1:f5:56:
08:1c:4b:8d:1f:0f:64:c5:68:b1:01:d1:01:2d:46:30:ed:0f:
69:16:c0:6e:f4:1b:db:54:ff:f4:b4:4d:21:41:d0:95:f6:a7:
01:2e:b5:1f:fc:a8:38:07:c1:d4:15:a3:20:92:a4:7a:c3:05:
2c:4d:4a:32:45:3b:46:b9:15:dd:8a:73:73:7b:0b:55:eb:e6:
03:3e:f1:ff:7d:7a:84:f1:77:63:cc:e6:89:e4:28:e1:66:62:
22:38:8f:39:4c:3d:31:67:94:f0:1d:67:8a:c4:1c:35:35:b9:
13:d1:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:24 2025 by rpki-client