Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier: tAhI6MyRR7M0PxBYipQhEOW40ocRMS4FCD83LdBa/LE=
Subject key identifier: 7C:C3:8E:AB:C7:62:2C:C7:6F:7C:F1:FA:A9:3B:49:2B:51:BC:B6:EE
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial: 019874190C85FCFDAEE1C861748F436305C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 08:00:55 +0000
Manifest this update: Mon 04 Aug 2025 08:00:55 +0000
Manifest next update: Tue 05 Aug 2025 08:00:55 +0000
Files and hashes: 1: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: b1oB4YaF+oxBvk8bvwYzTYEe17brorWF+QAiQwFon7U=)
2: uXecHkITe3bY6-3ektwCD9ek34Q.roa (hash: 5+69NhDXNCJ8JAsANzmdkWv9h8VWfgURSoIbAe4jtSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:0c:85:fc:fd:ae:e1:c8:61:74:8f:43:63:05:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
Validity
Not Before: Aug 4 08:00:55 2025 GMT
Not After : Aug 5 08:00:55 2025 GMT
Subject: CN=7cc38eabc7622cc76f7cf1faa93b492b51bcb6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:81:cc:3c:df:a2:de:0f:b8:0b:00:f6:9a:
99:f9:17:ff:05:a5:d9:a2:d6:19:8e:11:9a:2b:e5:
3c:07:9f:de:cf:a5:e7:9e:0f:64:e8:2c:99:07:ed:
d5:df:cc:5e:0c:05:1c:08:26:cf:f5:04:f6:b8:4c:
47:f2:7f:05:ee:c2:22:22:34:59:73:b3:9c:8c:fb:
e0:60:cd:45:39:ed:65:13:b5:6e:5e:eb:ca:78:aa:
f3:e3:27:fa:39:c4:1c:e2:b2:6d:82:57:be:1a:29:
26:1a:c6:d7:d5:e5:a3:46:1d:16:51:32:0f:39:91:
1a:7b:a6:c5:68:40:cd:15:b9:d9:6d:2d:9f:5a:04:
8d:bf:fb:fb:e7:ad:ce:96:28:5d:e2:ad:fa:aa:b9:
a9:19:e0:51:d9:14:60:59:e9:f2:49:7b:28:f1:54:
b9:df:82:b9:11:82:ee:52:0a:f3:9f:44:85:5b:db:
4d:69:f5:59:ff:aa:00:e2:e1:04:06:74:e9:36:c4:
a4:67:5d:5a:7a:c7:c9:5f:d7:dc:bc:9f:c9:78:e3:
ec:b7:17:1d:57:0d:55:e3:b3:94:4c:0b:2e:1b:a8:
cd:5f:dd:75:10:c0:b4:49:22:c5:c0:7d:10:35:b4:
86:ce:e4:a2:02:17:21:9b:89:6e:37:f5:19:62:63:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:8E:AB:C7:62:2C:C7:6F:7C:F1:FA:A9:3B:49:2B:51:BC:B6:EE
X509v3 Authority Key Identifier:
keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:44:c2:c0:ab:a3:7a:c8:8c:b6:86:53:d8:57:81:47:a3:69:
7d:f9:57:49:57:0d:4f:77:29:85:8d:08:a8:cf:34:62:5d:05:
24:6f:ba:22:a6:a1:09:53:06:29:70:9a:ce:97:a8:8e:60:e4:
81:e8:47:e8:ba:a6:64:e2:f8:83:1f:3d:f8:c4:1a:90:ec:7e:
db:54:63:1f:a0:9f:d6:7b:08:76:70:1b:d1:33:7d:9e:21:f6:
58:95:a2:34:b7:2f:e4:5b:66:6f:d1:df:ef:4e:91:b5:2f:60:
6b:e4:2a:d7:93:fb:e7:d0:ba:79:88:c7:f5:54:94:28:1b:f9:
fd:8f:2c:f7:2a:df:4e:f5:bb:3e:4b:1e:54:d6:8f:c1:64:82:
cf:e7:e0:cc:ae:45:c8:fd:b5:6d:22:c5:8c:3a:c2:ff:e8:1d:
1a:00:bc:db:c8:6c:49:93:05:7f:f8:e4:13:fb:20:44:ed:ad:
d2:7a:be:b8:cb:bc:93:ff:eb:04:54:3f:cd:32:68:d1:3a:f8:
47:79:99:3f:be:54:8e:8d:b0:a1:d3:13:22:b2:74:21:04:ad:
5c:33:dd:28:d0:1e:e6:57:4d:4e:9a:82:59:eb:a6:c6:88:50:
82:bb:42:a2:93:5f:8d:08:fe:1d:a7:79:91:a5:f7:dd:e5:41:
47:eb:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:20 2025 by rpki-client