Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: sQRnCw16IyBnylRisAxOP2lL1JI+2Za2b4SjlmT+NWs=
Subject key identifier: 48:04:A6:C9:A7:8D:B2:82:BB:9E:DA:82:B6:BA:44:0F:97:69:D1:3B
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 01977AF9682774C163D9E2062232B38A93CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 12D0
Signing time: Mon 16 Jun 2025 23:00:54 +0000
Manifest this update: Mon 16 Jun 2025 23:00:54 +0000
Manifest next update: Tue 17 Jun 2025 23:00:54 +0000
Files and hashes: 1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: hIgzk5y7CttRoRkzbFfSlEubFWrA05cIhg+RN+ka1Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:68:27:74:c1:63:d9:e2:06:22:32:b3:8a:93:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Jun 16 23:00:54 2025 GMT
Not After : Jun 17 23:00:54 2025 GMT
Subject: CN=4804a6c9a78db282bb9eda82b6ba440f9769d13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:80:09:90:68:94:6b:bd:47:9b:22:87:40:
77:bc:d7:06:08:c9:4f:13:14:4a:3b:fb:ea:c3:cf:
83:58:57:b3:5a:ae:6d:12:06:eb:0b:36:97:86:a5:
fb:b1:ec:78:48:b0:e8:de:a3:18:68:9f:9f:fd:00:
7a:7d:e8:8c:d5:42:fe:08:b8:f0:b6:80:67:3c:7a:
ff:38:bc:db:77:00:c9:52:54:4e:09:e2:d8:da:6f:
92:11:75:7f:30:16:92:92:ee:48:c0:20:cd:6a:78:
1e:28:32:e2:38:56:ee:09:4a:10:62:e1:c8:27:a8:
ef:aa:b3:70:06:d5:59:9e:6f:36:5f:ad:3f:c6:bd:
89:de:f9:c9:6e:77:28:b3:2b:07:64:a1:84:c1:e2:
9b:34:d8:33:6c:c3:3d:6e:eb:3c:41:0d:bb:9d:c7:
0c:ed:d1:03:77:46:24:e4:a1:ee:51:73:d2:89:95:
41:03:b9:4c:e4:94:b8:1d:49:95:0e:d6:e4:69:80:
3f:df:0d:93:e7:40:b2:29:49:75:ab:ac:84:bc:4b:
11:fc:24:49:2b:ed:13:6d:7b:5d:3c:4e:a6:6a:14:
b6:f1:5a:bc:5f:ec:64:20:fd:8a:b2:0c:79:7e:76:
4a:72:7b:6b:50:88:20:59:70:9f:5b:fd:85:1a:30:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:A6:C9:A7:8D:B2:82:BB:9E:DA:82:B6:BA:44:0F:97:69:D1:3B
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cf:30:88:76:c8:2f:4e:1a:26:df:53:76:e5:44:11:58:1c:
de:b9:23:fd:40:be:62:b6:8d:c1:75:0c:f1:bf:5b:fb:0d:eb:
32:f5:4a:90:8b:4e:6b:7c:fb:9e:9c:23:10:e7:36:32:9d:ff:
6c:6d:61:52:c8:9f:19:26:43:cc:a9:6d:eb:12:76:70:fd:2d:
f5:95:81:80:62:ec:d6:3f:82:f8:d8:08:66:0e:54:c0:0a:7e:
b2:80:34:2a:55:9e:e8:56:aa:bc:02:aa:a7:08:de:be:9e:13:
0c:49:5b:33:63:77:55:d8:6f:24:e2:e2:94:d7:22:80:61:d6:
17:7a:7d:56:6d:47:3c:5a:45:e2:37:35:de:9a:4a:be:02:67:
28:32:dd:c5:ca:03:91:64:51:8f:7b:c7:e8:46:86:7e:a7:14:
0a:d0:17:3f:7f:d7:9c:ea:4f:63:6d:d5:8c:cb:b5:ec:c6:4c:
10:e2:35:38:4d:dd:d7:8c:3a:6f:f4:74:a1:1c:a1:e2:6d:7f:
82:49:c3:0d:75:07:64:62:c9:a7:04:4f:e2:5f:b7:0d:51:e1:
25:fd:13:d9:cc:01:60:19:b3:e4:a9:68:3f:d5:da:c9:9e:a5:
4e:40:a3:0f:e1:30:8f:98:a0:59:76:78:f3:b7:ea:c8:de:24:
af:de:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:31:24 2025 by rpki-client