Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: E1wLrbZc1l7TtVpcxhVne2lsMsP5A2mlgazQT0wUhwg=
Subject key identifier: D5:57:66:5B:D6:91:2D:2C:2C:E3:D9:D8:13:E7:23:BC:4B:C3:9D:9F
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 01976BBCF9B09873574F9A27772E543DA443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 1035
Signing time: Sat 14 Jun 2025 00:00:36 +0000
Manifest this update: Sat 14 Jun 2025 00:00:36 +0000
Manifest next update: Sun 15 Jun 2025 00:00:36 +0000
Files and hashes: 1: AItoBBXTr3JSVEunHoKYVScHBBA.roa (hash: bQ8pPRnSjhK+OHhk4/Jjzl0/46sUTmdeipylWtU4pOg=)
2: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: tuAzgsqb3bPcA3f2h8GU8IolR/4fUp6EPzJvwbAJnp0=)
3: ublcR1AG8bTtIDegIl4XF5yKZ2U.roa (hash: EReps1m4UdW66UXSYxPeRRxVic46xc68n57xt40fmWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:f9:b0:98:73:57:4f:9a:27:77:2e:54:3d:a4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Jun 14 00:00:36 2025 GMT
Not After : Jun 15 00:00:36 2025 GMT
Subject: CN=d557665bd6912d2c2ce3d9d813e723bc4bc39d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:00:75:a1:32:1a:5e:eb:77:31:19:63:c2:
db:59:f5:24:b6:b6:e1:4d:3f:47:bd:86:f0:4b:c1:
13:0b:fd:2a:6e:25:9d:91:51:9b:ab:38:4c:37:9a:
96:33:44:5c:f2:96:95:b9:3e:69:73:55:e1:f3:82:
58:3d:cd:76:ed:55:2e:90:98:a0:10:84:f3:0e:90:
6d:e9:f8:e8:cc:c1:13:d5:4d:48:a5:2d:26:e0:95:
05:bd:f6:95:26:8e:49:58:f9:c7:1a:94:be:08:64:
f2:a3:7c:85:93:59:21:5e:22:15:ca:22:9b:fe:26:
e8:17:68:88:06:26:85:1e:fc:a3:cb:d8:12:d9:74:
cf:b9:33:42:34:03:b2:3f:d8:71:e7:d3:63:16:e8:
c0:a7:4a:0f:ec:c2:30:b5:a0:4f:e1:57:5a:55:8a:
71:8b:d0:10:01:08:99:00:d2:a4:c2:98:4a:d0:27:
88:48:d6:60:1d:9e:7a:7f:10:89:3b:46:3b:f4:9d:
66:5b:81:74:87:7e:a3:ec:44:3e:89:27:42:4b:94:
76:3d:22:ff:5b:f8:e5:69:ff:44:b5:1b:7e:6e:37:
90:79:1c:e1:97:d0:5e:22:9c:54:ed:b5:d3:ef:8f:
49:05:ba:96:2b:2b:21:9e:0d:c3:5b:19:db:ce:f9:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:57:66:5B:D6:91:2D:2C:2C:E3:D9:D8:13:E7:23:BC:4B:C3:9D:9F
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:1d:51:4e:e5:b1:ea:a9:82:43:3b:98:a0:78:80:4c:cd:
8a:85:70:cf:6b:24:d7:ae:e5:05:7b:6b:7c:f9:c5:11:02:d7:
48:d9:2a:f4:13:17:e9:ad:60:10:d0:4f:51:a1:74:72:a1:54:
56:e9:b9:0a:33:ad:62:5e:3e:f8:f9:7a:57:da:f3:19:e0:a4:
50:a6:cc:8e:1f:48:88:ec:d0:71:00:ce:9f:8a:1d:d8:1f:68:
b4:f9:0d:a2:91:14:3d:51:16:0f:46:5e:e1:69:36:6a:27:06:
33:76:87:ef:c4:25:21:63:da:31:1d:9e:57:18:3b:b4:d3:c8:
91:3d:34:8a:fd:39:5d:32:f6:81:0f:e1:9c:47:d1:8c:35:94:
d0:96:5e:19:a6:ec:d7:de:91:7b:b7:5c:ba:92:0d:d3:f1:0f:
74:13:91:e9:34:57:de:fd:40:a1:cd:db:a8:17:c9:53:39:de:
db:7b:18:78:e3:91:58:48:41:7e:37:e9:08:a1:4a:53:1e:3f:
a4:12:ba:18:90:64:4a:f8:5d:6f:4c:08:34:64:8c:b2:b6:d1:
df:87:ae:f9:a0:3e:4c:35:bb:2b:2c:83:37:6b:d4:b7:08:fb:
4d:c5:a6:02:dc:93:61:56:be:a6:e0:76:dd:29:5d:0b:52:7d:
53:95:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:47 2025 by rpki-client