Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: 0b4BKrjnBMm/OGXuYPpjGRyiJ+NViW8nF+3+JcnaTFA=
Subject key identifier: EB:8D:BF:FE:45:B8:F6:07:4B:CE:AD:AA:74:94:2E:69:AB:71:1B:86
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 01976E19B71FE19C02C75E846E34DBCA765C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0C7C
Signing time: Sat 14 Jun 2025 11:01:08 +0000
Manifest this update: Sat 14 Jun 2025 11:01:08 +0000
Manifest next update: Sun 15 Jun 2025 11:01:08 +0000
Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: PmgdZIFJ9T2rsa9z4p03d1pSjmEMhXNmiIinrxmbZcQ=)
2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:b7:1f:e1:9c:02:c7:5e:84:6e:34:db:ca:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Jun 14 11:01:08 2025 GMT
Not After : Jun 15 11:01:08 2025 GMT
Subject: CN=eb8dbffe45b8f6074bceadaa74942e69ab711b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:c1:8e:c4:ca:38:04:b5:21:5f:17:ce:cb:
ca:3f:73:8f:26:cd:82:fa:b2:8e:b7:1e:38:39:3c:
a1:cf:66:cd:44:d8:b7:ea:cb:f2:b1:fe:7c:1b:f0:
6e:c2:72:1d:34:a7:67:d6:79:40:47:79:de:f3:74:
64:85:f0:a1:0a:2f:a4:3f:de:16:12:11:8b:0f:77:
fe:bc:0b:e6:70:08:66:ca:eb:3e:77:23:74:3e:eb:
8a:d2:8a:cb:7a:cf:9e:b2:b7:06:f9:ab:e5:ec:b3:
45:ac:09:a9:0f:b7:f0:b8:3b:6f:94:e6:e3:3b:eb:
1c:2b:bf:12:e2:45:39:35:b2:fe:ca:73:ad:ff:46:
f3:ad:5f:42:9e:8a:3c:e2:c3:ff:9a:16:1b:21:dd:
eb:b6:d0:ce:6f:f6:49:5f:d2:e6:25:7b:68:91:16:
cc:e5:74:67:ed:ea:a9:3f:8f:ea:60:9b:7d:86:24:
76:00:6d:ba:45:9f:c1:9e:3d:80:74:71:4b:7b:14:
07:3b:83:02:3a:a9:19:6c:64:62:cc:b0:fb:99:eb:
ae:cf:30:17:ee:99:d5:af:66:be:a0:4b:59:ef:3b:
f1:f5:32:0f:f1:4d:4e:6a:11:45:a2:91:28:13:e2:
1f:a5:19:44:93:7b:8f:45:8f:1c:16:51:b7:e5:87:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8D:BF:FE:45:B8:F6:07:4B:CE:AD:AA:74:94:2E:69:AB:71:1B:86
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:78:77:f5:be:7a:7d:1d:fd:af:24:d1:81:c2:85:3f:ab:d7:
8b:3e:2d:64:17:34:1e:97:0a:64:b2:b6:f0:72:04:b7:5b:b2:
96:98:56:35:21:2e:91:ce:2a:a3:90:e3:7a:c7:4b:50:46:17:
35:d3:a5:9c:7c:e2:6f:ae:28:6d:9f:b4:2c:c2:00:21:86:a9:
bc:79:e4:17:95:d2:2f:49:8b:57:59:10:d0:64:66:b4:34:28:
b7:48:9a:2b:a9:82:37:90:df:27:24:cf:c0:f1:2b:1d:9b:7a:
53:e1:d9:11:3d:52:5e:b0:83:49:39:20:54:5a:17:a5:45:80:
ea:be:a3:a3:b2:39:2c:36:8f:7f:f3:1a:19:53:e9:0e:c5:55:
c4:4a:ec:db:b5:5b:ac:f8:0e:73:05:09:0f:3b:a0:fe:96:f6:
70:d2:79:35:af:64:ec:3e:bd:c9:20:49:65:25:74:11:5f:73:
ed:17:58:37:22:26:a2:96:04:ca:28:7f:50:42:ab:57:29:9f:
3c:06:cc:2f:4d:ab:9f:af:85:fb:b2:a6:f3:45:34:5d:85:48:
c0:61:0b:85:33:fe:34:1c:1f:61:81:d7:7c:be:e7:8a:c5:9c:
1c:ea:92:d7:33:0f:b2:5c:e0:cd:30:02:f5:58:f6:7d:d8:14:
73:46:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:31 2025 by rpki-client