Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: r9nxvpVs4fDROz4FiDOTrerVtHwo2QjVV3+SYamjFyI=
Subject key identifier: C8:15:AC:3F:AD:02:3E:54:78:5C:40:1A:C5:5F:43:E2:16:05:DE:07
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 01976B85C526252259FD6C461FAD51AA1CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 01DE
Signing time: Fri 13 Jun 2025 23:00:18 +0000
Manifest this update: Fri 13 Jun 2025 23:00:18 +0000
Manifest next update: Sat 14 Jun 2025 23:00:18 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: SlkNKvIBTwVPO9KSxKQRhlDnpBOG6k1+XX3YTi7r6qQ=)
2: lhV68OSkur6ZsAA_2dy8-L_4IL0.roa (hash: BvvVh8/fqP1HPi1uOxwh0N4UEkoJk2nM455CRrFSNec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:c5:26:25:22:59:fd:6c:46:1f:ad:51:aa:1c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Jun 13 23:00:18 2025 GMT
Not After : Jun 14 23:00:18 2025 GMT
Subject: CN=c815ac3fad023e54785c401ac55f43e21605de07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:3b:34:bb:45:f2:f0:84:0a:80:3d:2f:a6:
de:d6:02:ef:77:ff:ba:4f:7e:bc:f8:dc:82:7b:ae:
b5:3d:d3:1b:4c:ed:8e:e0:19:fc:96:bb:ac:92:31:
56:3a:52:5c:84:9d:90:6a:68:11:ab:f5:2a:2c:5c:
0f:4f:fc:ad:a1:3a:bf:11:a2:dc:cd:49:84:32:08:
ea:10:0a:e4:41:97:8a:96:d7:29:0a:20:ed:e8:62:
b8:d5:48:4b:0a:53:87:44:d4:ec:32:8e:9e:da:34:
7e:1d:d3:0c:f2:54:e9:e1:5e:08:a4:b5:fd:d7:d7:
f3:fa:fb:c7:16:1f:dc:ee:1a:23:90:4c:87:51:bc:
4b:bd:a2:e8:d7:94:2d:66:b0:7d:9f:cd:64:8e:a1:
3f:c5:37:5f:b2:69:06:90:02:53:db:de:8d:e9:16:
7f:17:79:c5:13:51:60:c7:36:cd:69:b2:90:8b:48:
b0:61:86:e9:e4:f9:a6:7c:65:8f:24:06:57:ff:a1:
dd:76:c4:40:9f:7b:4f:af:5d:f9:d3:9d:cd:e0:38:
9a:94:93:43:8d:ee:ed:55:21:5d:84:ea:58:94:17:
17:3a:d2:c1:3c:1a:20:63:d6:8c:36:5a:55:2d:f3:
d7:26:f8:af:c2:5f:ed:ec:e9:53:9b:b9:69:7a:fc:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:15:AC:3F:AD:02:3E:54:78:5C:40:1A:C5:5F:43:E2:16:05:DE:07
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:63:e4:93:c6:67:e5:e0:99:1f:8c:b3:37:75:8d:d8:29:8b:
f3:c1:a8:af:ed:f0:34:60:8f:2b:ba:54:da:47:77:b6:68:5c:
51:b8:b8:00:e7:10:17:fc:b8:e1:cb:0f:2d:09:90:de:4a:82:
44:31:84:8d:09:62:a3:81:30:89:57:5c:60:55:3b:35:58:fb:
db:07:50:62:f4:0c:2b:c7:50:d4:fe:ec:04:f0:6a:5d:42:5c:
90:30:6c:f1:a9:a8:2f:2a:02:0e:28:f2:b6:be:3b:e2:5a:97:
42:5a:2d:7a:6b:ad:a6:f2:fd:a7:e0:a6:ca:08:10:35:93:fc:
e1:17:e4:06:b7:44:d2:bb:64:03:9c:26:8e:e6:17:18:85:53:
75:ef:39:07:25:92:9b:0b:b7:3f:03:1e:4f:3b:83:76:30:bc:
da:3b:27:f0:2c:93:18:69:f3:79:29:e9:03:86:14:fc:e8:0a:
77:3c:72:d4:32:d6:44:c9:d4:e7:73:24:64:db:2e:b0:e1:19:
65:16:2e:8a:e6:48:10:84:bd:9a:35:67:9e:43:86:52:20:37:
32:e4:2a:5b:b6:06:be:af:86:3d:29:7c:16:60:9e:b5:a1:aa:
4c:63:d9:0c:6a:c6:02:9e:60:7d:6f:64:00:ff:01:bb:3f:73:
38:6e:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:44 2025 by rpki-client