Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: VQqHC6/W7VmLGJLsP2uA6DeINYvmEe+ZLuQ8wZ/Bueg=
Subject key identifier: 31:B6:E4:81:46:BB:03:24:75:76:5D:3D:3C:A0:E4:DC:18:61:28:7D
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 01987D8B968A40A6900EA705E6196DD193F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 139F
Signing time: Wed 06 Aug 2025 04:02:36 +0000
Manifest this update: Wed 06 Aug 2025 04:02:36 +0000
Manifest next update: Thu 07 Aug 2025 04:02:36 +0000
Files and hashes: 1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: Ma0ADWcU5Y8uKCwg8j+NRX7Pj5RRL5L8hOrsO/gZPMs=)
2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:96:8a:40:a6:90:0e:a7:05:e6:19:6d:d1:93:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Aug 6 04:02:36 2025 GMT
Not After : Aug 7 04:02:36 2025 GMT
Subject: CN=31b6e48146bb032475765d3d3ca0e4dc1861287d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:23:9f:7c:24:d7:c9:7f:eb:00:cb:53:d4:
3e:e6:17:5c:40:19:1f:f1:88:3b:40:47:66:39:87:
a8:f3:e6:65:24:af:4d:0b:c2:69:c2:d4:4e:99:cd:
23:d0:d9:db:6e:8a:03:c3:49:61:8e:30:aa:f9:a8:
67:93:c1:08:01:9a:4f:f3:0d:34:6b:90:72:42:23:
f5:02:3c:cc:5b:4c:c3:ea:e1:16:8e:63:73:cd:42:
29:b9:40:11:59:0e:63:b0:f1:06:5c:7b:b3:74:14:
35:13:d0:94:d9:00:5a:70:3d:38:03:c5:16:f1:1a:
47:2f:03:03:a6:fb:6f:66:c8:dd:14:5f:b1:dd:04:
28:23:f5:a4:83:52:58:a0:b6:8c:af:d6:0b:c4:4b:
a6:95:ab:94:de:10:89:ac:b0:da:5b:6d:f1:ad:fc:
66:28:03:ff:6b:f8:6b:de:ab:32:4a:82:44:f7:83:
82:ca:2c:e4:eb:03:41:70:66:12:fd:86:0e:9e:cb:
bd:12:fd:27:ad:78:f9:c3:c1:c1:2a:ef:a1:b2:70:
64:0f:fe:04:af:42:f0:d8:88:22:06:19:20:da:05:
0f:bb:f8:0f:4e:51:20:4c:6c:aa:75:59:1c:ac:93:
28:2e:1e:99:cb:26:d4:25:16:8f:26:97:8e:cf:c5:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B6:E4:81:46:BB:03:24:75:76:5D:3D:3C:A0:E4:DC:18:61:28:7D
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:59:58:5d:cd:b9:63:af:fb:33:68:84:a1:27:06:b3:5e:56:
39:ae:27:55:4b:8e:3c:2c:d6:92:d6:f3:7b:98:de:b8:05:1f:
3f:0b:62:f0:62:f7:4e:1f:38:f6:d3:31:c3:6d:86:cc:80:9b:
4f:73:14:96:20:51:8b:4d:26:26:a9:1a:93:e7:60:67:bc:8f:
92:e2:46:8c:20:35:e5:73:fa:04:fe:fb:5a:7d:c4:45:6a:01:
67:0f:a2:8c:26:10:05:de:42:ff:19:96:4d:95:ef:44:ac:d1:
08:c3:26:57:ca:d5:b7:ca:40:a3:26:c2:0f:65:23:04:04:c3:
d2:e8:b7:27:27:0e:6d:08:f1:54:c2:5c:3b:6b:d8:d9:0f:4e:
64:5c:36:10:5b:79:c1:08:70:1e:ac:ab:19:cf:01:d8:69:ac:
70:03:9e:a8:ff:9e:29:18:da:5e:a6:b5:ae:92:c4:14:a0:0f:
97:52:2f:cb:03:1d:27:6d:4f:08:94:0e:b7:5f:7e:2f:58:2c:
60:9f:00:dd:02:38:50:65:f5:0b:ec:7e:ef:62:ce:9a:94:00:
43:2c:66:95:6f:38:e1:9f:42:b6:6d:6a:1c:c4:d9:9d:b0:4f:
24:3e:2d:69:d2:68:7a:8d:d0:96:24:ab:9d:1b:87:55:ce:b9:
16:54:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:22 2025 by rpki-client