Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: za56Rk0eaMFnFIBA8KlGGg9YibcUcUYSOogXwNDPs+U=
Subject key identifier: 5D:D4:EA:6F:96:C9:62:E8:AD:ED:DC:80:70:2E:11:72:CB:41:3D:45
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 01976E502C78A849759CB6D121896B4783CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 14B4
Signing time: Sat 14 Jun 2025 12:00:37 +0000
Manifest this update: Sat 14 Jun 2025 12:00:37 +0000
Manifest next update: Sun 15 Jun 2025 12:00:37 +0000
Files and hashes: 1: 4GMh7fIw13Bz3DUcceuO2FBtK6M.roa (hash: E9IDQ7QjcqjZJIn5bDeaHNVCqS2wv2WqYXLU0FEPSXU=)
2: XJGEpCzB4loh5ef0k98ZvXtkA5A.roa (hash: ln2eCgW4Lb0/Z2WnRMYRLGIC+qtaz3YxPhhlJZ12csI=)
3: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: KcE66gAoCXeBQgzRHZoaqwhtHqAFRuHVoqPi4CGN4jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:2c:78:a8:49:75:9c:b6:d1:21:89:6b:47:83:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Jun 14 12:00:37 2025 GMT
Not After : Jun 15 12:00:37 2025 GMT
Subject: CN=5dd4ea6f96c962e8adeddc80702e1172cb413d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:eb:f4:76:4d:89:32:24:9c:79:a0:3e:f7:
89:29:19:45:cb:e6:bb:6c:2d:0f:fa:c8:ce:ac:ef:
3d:0b:d8:29:de:14:65:dc:36:81:22:98:3a:f0:64:
98:83:1d:d2:bd:a7:72:7b:6b:e2:62:6c:2c:c1:38:
ac:27:d7:7a:f4:0c:76:92:3f:33:35:a8:33:fb:ec:
e4:b1:1a:69:7d:36:71:75:66:fc:39:ac:07:6e:09:
e0:40:a0:21:e9:43:00:e6:8b:71:ef:be:ae:65:09:
5c:91:7d:23:8a:ca:8f:69:1f:fe:c6:95:60:f4:0c:
51:24:76:db:be:c9:20:07:59:58:f5:10:83:5c:84:
79:f8:ce:63:2e:b0:fe:77:1e:71:69:78:3f:b9:ef:
a0:1f:9b:0a:c1:8e:ec:21:91:18:53:b0:39:6b:74:
4f:f3:cc:d3:4b:79:44:67:1a:2a:23:cf:01:23:4f:
3e:41:b3:db:7c:d1:b7:ee:28:77:cc:b3:5f:f7:4a:
89:21:7a:25:5e:da:93:13:e2:5a:71:02:de:c7:bc:
be:a7:6d:5c:47:21:20:29:28:d3:63:3e:15:10:26:
61:4e:d9:51:4b:51:01:7d:8a:f0:72:44:fb:80:86:
2f:ad:ca:8a:d7:72:52:6b:fc:9d:3e:b9:27:63:bf:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D4:EA:6F:96:C9:62:E8:AD:ED:DC:80:70:2E:11:72:CB:41:3D:45
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b7:c1:16:57:2a:e3:67:3a:d7:5e:3c:ad:e9:71:fd:48:1e:
c9:b5:21:9e:06:42:fc:77:03:ec:13:4c:d4:82:06:92:36:f8:
48:60:c1:41:a8:a5:6d:c8:59:40:f5:cb:ac:60:b6:2b:25:2d:
be:f3:e2:5e:52:b9:6b:25:20:2a:03:4b:6f:0f:0d:6d:0a:d6:
69:f7:14:31:ba:78:d1:74:19:33:a3:15:15:68:68:10:92:56:
f6:4c:c5:1a:41:b3:18:df:ef:6f:dc:4f:e7:f5:d2:8f:f4:10:
5a:e9:4a:3b:40:0e:20:c1:2c:75:1e:d5:d0:a0:03:c2:8d:4f:
b8:8d:05:d7:80:9d:d2:8c:51:c8:de:98:9f:3d:cf:a3:d2:84:
87:63:34:49:ae:d4:03:81:fb:2c:45:20:2f:1f:f7:4f:c7:8e:
06:e4:e1:76:65:25:5a:b7:c2:ef:08:5b:7d:3b:c4:09:f0:9e:
de:08:b6:e9:72:ae:e1:f7:5c:f5:41:02:83:62:c1:98:f9:b2:
23:07:c1:43:05:f0:52:db:a8:c0:9e:fe:51:67:b1:8a:d9:c5:
52:16:f9:21:7d:c8:18:af:a7:85:cf:65:66:ef:df:d0:32:1a:
2c:c9:b8:ec:ce:ca:ea:06:92:69:26:ff:74:ae:79:df:6c:12:
3a:77:64:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:35:09 2025 by rpki-client