Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
File: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft (raw, json)
Hash identifier: h54FwBLghQQ8lwnpSh5vhgVhJ5Ly7YGCOdQB44DoIGI=
Subject key identifier: 38:EC:6E:3E:08:6D:D5:54:35:F6:C3:78:11:34:49:42:42:51:01:A4
Authority key identifier: A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
Certificate issuer: /CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Certificate serial: 01976C988A9DB779AF71547477B6F974D471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
Manifest number: 04AE
Signing time: Sat 14 Jun 2025 04:00:25 +0000
Manifest this update: Sat 14 Jun 2025 04:00:25 +0000
Manifest next update: Sun 15 Jun 2025 04:00:25 +0000
Files and hashes: 1: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl (hash: HqepUlQocM6IHd998DqMQGcSOtwRAeGIeC5HBzED3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:8a:9d:b7:79:af:71:54:74:77:b6:f9:74:d4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Validity
Not Before: Jun 14 04:00:25 2025 GMT
Not After : Jun 15 04:00:25 2025 GMT
Subject: CN=38ec6e3e086dd55435f6c37811344942425101a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:14:f1:9e:f3:5b:94:6f:ac:eb:12:f8:75:f4:
84:7e:bc:ac:f3:bb:41:ed:51:31:9d:3d:85:96:eb:
38:0f:e7:13:24:44:fe:51:06:36:27:ce:38:20:f1:
cc:08:aa:38:b9:e9:c5:ca:8f:53:b0:2d:d5:f4:0e:
b0:65:52:84:96:39:a2:3b:1c:ad:ba:c5:94:79:77:
49:bf:5a:46:49:91:57:7b:e7:61:f1:65:ff:bf:dc:
5a:2f:67:57:6f:c2:3d:43:44:7e:fe:5d:f6:eb:98:
8b:7e:e9:69:90:f8:9a:38:37:79:a8:45:bc:c7:13:
3d:ef:21:21:62:65:09:07:51:90:61:14:83:bb:b9:
30:a2:5e:9a:2b:cc:39:8a:40:a0:cc:91:f7:5c:a3:
72:75:61:be:d7:b1:0a:b1:72:b0:8c:5f:9c:fa:b8:
4c:ed:05:f8:b8:4f:62:e3:c4:88:95:98:81:cf:70:
0c:24:9f:3f:9a:e7:b7:6a:7a:93:ba:28:41:36:81:
22:53:ca:03:a1:63:c4:4d:89:15:1b:ef:37:43:91:
c2:58:2f:41:41:82:f6:16:3a:b9:91:36:a3:f8:6d:
0a:0f:ec:af:33:cc:4a:25:78:16:87:67:46:39:14:
c5:62:35:53:ab:4a:5b:c4:62:64:54:96:3f:fc:36:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:6E:3E:08:6D:D5:54:35:F6:C3:78:11:34:49:42:42:51:01:A4
X509v3 Authority Key Identifier:
keyid:A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:95:78:d2:c2:01:06:fa:92:05:34:cf:4b:08:71:6e:c9:c2:
91:2c:2b:aa:7d:3d:66:6d:c6:38:80:c5:61:f1:f8:9f:74:40:
a6:18:c8:42:56:72:55:ff:24:f5:10:86:e7:97:eb:12:6d:fd:
9e:0d:68:12:7c:8e:30:55:38:ec:64:7f:e8:c3:99:75:3a:45:
63:49:4a:0a:ef:26:b8:8b:17:f6:3d:19:fc:9a:5f:d6:5a:78:
a2:d2:45:10:e9:5d:84:c7:69:f7:09:95:d1:a9:29:8e:92:1d:
6a:73:9d:d1:4c:f6:58:e1:65:7b:b0:2f:bb:52:ce:bf:76:aa:
e9:28:84:01:0e:d7:61:54:8b:1f:8d:9c:60:aa:2b:17:09:38:
b6:b0:76:dc:b3:0d:20:37:bf:af:7a:8e:bd:0b:21:b2:7c:4f:
ac:f4:0d:a8:77:ee:47:43:7b:cc:f7:0b:a7:23:a0:a4:4d:e2:
1b:c8:35:f6:21:ac:53:34:6d:16:a5:47:86:23:17:2b:66:9b:
16:ee:40:a9:be:10:51:d0:fe:5a:7a:a3:1c:d7:2b:dc:e2:77:
ac:a9:07:a0:6a:a8:86:39:5d:4b:a0:8f:1f:b2:a9:51:62:1b:
17:d6:4f:14:2c:7b:75:09:83:90:8d:e7:0b:a0:bc:2c:95:c5:
f4:b7:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:00:43 2025 by rpki-client