Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
File: OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft (raw, json)
Hash identifier: MdWSLjJN4wZLIby7EcC1QY5G+qQDY1HrVZUtxmjP1fM=
Subject key identifier: 3D:F2:8A:C8:1D:0B:3D:BE:4B:F0:7A:41:1A:2F:3F:E7:B2:53:AE:AA
Authority key identifier: 38:40:F1:4C:78:30:34:45:65:D9:92:AA:ED:4F:06:CE:5B:3A:3F:EC
Certificate issuer: /CN=3840f14c7830344565d992aaed4f06ce5b3a3fec
Certificate serial: 01976C990F61DEB8F673D02F6DB44809C65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
Manifest number: A4
Signing time: Sat 14 Jun 2025 04:00:59 +0000
Manifest this update: Sat 14 Jun 2025 04:00:59 +0000
Manifest next update: Sun 15 Jun 2025 04:00:59 +0000
Files and hashes: 1: OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl (hash: xV12hDLDQKIPlRZJ5llAMKqDrommt1G0o5goK+zettA=)
2: Sd24d28V76HUXI5tJozId-LBxGU.roa (hash: sz6vCalE+qZ8AG41dIYIziT32WF467U+LgWfS31nXaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:0f:61:de:b8:f6:73:d0:2f:6d:b4:48:09:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3840f14c7830344565d992aaed4f06ce5b3a3fec
Validity
Not Before: Jun 14 04:00:59 2025 GMT
Not After : Jun 15 04:00:59 2025 GMT
Subject: CN=3df28ac81d0b3dbe4bf07a411a2f3fe7b253aeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:4d:96:dc:97:0c:ec:a0:44:ed:d1:38:64:
21:cd:19:f8:68:d0:75:cf:14:f7:28:b4:00:bb:b6:
97:d9:3d:a0:d2:a6:a5:56:35:29:85:15:0e:e1:bf:
bf:d6:4a:42:5f:07:de:d3:59:9c:47:e2:0d:95:e2:
a7:75:0b:b5:20:56:12:50:95:85:61:01:88:eb:3c:
2e:8f:30:13:06:29:3e:17:00:66:21:df:6f:8d:ad:
0f:89:f8:46:11:50:5b:ea:9d:38:fc:8c:31:a7:0a:
96:a2:15:39:ee:15:be:f3:2d:44:35:7b:26:bb:a0:
73:e9:e1:bc:db:ca:2f:0f:2b:d4:92:d1:26:3a:92:
68:b4:13:45:95:a7:20:b2:57:67:9f:7e:2e:fc:10:
cd:01:7a:73:61:32:28:ee:5c:bc:56:1e:21:d0:d9:
32:c4:04:14:8a:45:10:dc:ee:fd:eb:88:04:a5:6c:
12:19:82:9b:cf:3b:63:82:43:cc:04:9b:c0:1c:bf:
d7:e3:05:bf:07:26:2d:3a:48:9e:8d:66:93:ad:ef:
a2:16:ca:4e:d7:ca:89:b8:05:ac:89:7d:4d:64:12:
0d:d8:66:c3:2b:48:45:28:7c:9c:91:22:0a:fb:8c:
fe:2a:5e:35:a2:2a:72:62:3c:83:b8:37:0b:92:49:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:8A:C8:1D:0B:3D:BE:4B:F0:7A:41:1A:2F:3F:E7:B2:53:AE:AA
X509v3 Authority Key Identifier:
keyid:38:40:F1:4C:78:30:34:45:65:D9:92:AA:ED:4F:06:CE:5B:3A:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ba:7a:17:78:c2:85:3c:26:5d:67:21:81:66:11:7e:e3:4e:
c8:9a:b9:c3:30:51:b3:7c:43:93:1a:bd:7f:94:8f:e0:7b:f3:
6c:e2:80:b5:fc:bb:b0:09:fb:54:d0:a6:20:e4:e0:2e:02:6f:
ae:59:7c:36:47:69:a5:28:94:b9:98:b2:f0:a0:ed:7f:cd:44:
49:0e:6d:69:75:89:46:5f:f3:60:30:ff:ce:64:da:6e:e2:3a:
50:39:3f:28:59:6e:63:b2:8e:47:40:c9:d9:d8:5b:13:ae:99:
71:16:61:80:4f:0b:2a:76:32:96:38:95:6b:3e:67:4b:dc:7d:
54:d3:30:fa:3b:b4:45:c2:32:78:81:fe:14:59:a9:97:fe:47:
69:e2:73:01:ad:59:98:6f:a7:fc:1f:7d:2b:d6:61:74:96:3e:
6b:9e:36:a9:0e:bb:ed:da:f9:8c:f8:bd:7a:16:de:5a:99:9c:
c0:ac:ef:ad:6e:be:49:70:42:62:a2:bd:91:c9:a4:24:d8:70:
55:cd:67:40:d3:8b:db:ca:32:ee:c7:9a:ff:7c:21:b0:18:25:
4f:bf:52:4c:03:89:91:6f:14:b3:51:ff:cc:26:6f:24:32:ab:
b0:f8:26:66:dd:4a:18:fc:50:f3:0f:7b:6f:ef:e1:c3:0d:f8:
89:7b:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:22:10 2025 by rpki-client