Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier: 3hYIjoIIkTkciCCzPyWGUZKuXCx0Dzk8tg7BOjNIKXo=
Subject key identifier: FA:09:83:8E:F1:82:30:2B:82:A2:13:A9:98:0D:53:05:11:15:E8:E5
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial: 019768BC4F8922B0BFF5C2BEA8D3199C26CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number: 115F
Signing time: Fri 13 Jun 2025 10:01:00 +0000
Manifest this update: Fri 13 Jun 2025 10:01:00 +0000
Manifest next update: Sat 14 Jun 2025 10:01:00 +0000
Files and hashes: 1: 1-rpUgw0W3sKSFdW3yshaE1HCCc0.roa (hash: c/Tt5N/pZWiN2mpptC/U9LHYusWW/dCE4lcNMT3U+WE=)
2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: YRBE8FCH/e234n4Uf5vkCrK3vxdpWnrW6NqKAgQ9+0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:4f:89:22:b0:bf:f5:c2:be:a8:d3:19:9c:26:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
Validity
Not Before: Jun 13 10:01:00 2025 GMT
Not After : Jun 14 10:01:00 2025 GMT
Subject: CN=fa09838ef182302b82a213a9980d53051115e8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:95:8a:ec:6f:8a:b2:9d:5d:c1:06:c5:f5:
cb:4a:b0:1c:97:8f:92:d8:36:0d:ed:7d:66:37:c2:
fd:51:91:83:3a:99:6f:8a:d1:55:5e:39:7b:93:a8:
ea:c1:9f:41:0f:19:cb:6b:63:1a:8d:a1:b9:04:c0:
7e:c3:23:46:09:12:63:37:6f:65:cd:8f:cc:87:e7:
56:5d:d7:59:ac:aa:a6:e6:36:4e:9b:10:5c:73:8b:
01:2d:88:96:80:ba:ce:df:d3:3f:39:43:b8:e1:9e:
35:a8:d3:99:54:fc:7b:42:b6:fc:55:01:c2:e1:96:
01:6e:78:a5:e3:51:3e:2e:e8:06:34:81:bf:6d:c9:
87:79:5b:4c:e7:c2:c2:7f:0d:7f:ed:30:f4:3e:f9:
cb:23:ef:79:58:0a:ce:cb:d6:cb:1c:38:79:dd:01:
79:1e:d6:bb:e1:37:17:48:7b:21:f7:f4:0c:d0:bd:
2b:76:63:fd:79:1e:1d:c7:1c:bf:51:b3:9e:94:aa:
a8:36:d0:ff:35:f5:c5:ab:a4:ce:6d:22:84:39:22:
6a:b9:cd:56:5a:14:6c:d4:99:7c:89:e7:d4:4e:6c:
63:a9:8e:90:f2:42:75:9d:90:2a:11:91:1f:47:ba:
29:c4:c4:54:24:e8:b5:49:11:36:46:de:d9:f3:5e:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:09:83:8E:F1:82:30:2B:82:A2:13:A9:98:0D:53:05:11:15:E8:E5
X509v3 Authority Key Identifier:
keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fe:2b:5b:52:75:f2:fc:ee:ef:19:e0:11:7a:ff:4e:fc:3d:
da:d5:cb:58:1e:dd:64:46:8f:29:d0:95:bb:8f:66:7f:a9:67:
38:1d:26:35:31:66:dc:bc:4f:5a:f1:38:fb:d9:1e:1f:5a:73:
9b:f5:32:3f:4c:c4:65:22:05:cb:14:86:fd:e8:02:2b:68:8f:
04:9a:0c:a1:cf:af:9e:bb:05:cc:e2:c8:53:e0:51:e5:ce:15:
78:1f:e8:85:f7:00:52:e7:36:9e:51:c9:e0:d4:17:8d:07:60:
3f:d9:1b:1a:fd:da:83:42:97:fc:15:9d:d0:dc:f2:76:bd:f4:
b9:e1:cc:63:0e:67:5d:ad:62:32:a8:95:4c:db:83:12:54:ca:
4c:42:60:c6:d8:6a:bc:76:83:6f:63:ef:ca:19:fb:31:f9:5f:
d5:62:22:4a:88:05:10:74:eb:37:a1:9e:96:4e:01:4f:f1:e1:
6a:79:8d:ae:67:30:8f:db:cc:e9:ee:af:3c:1a:43:50:6c:1c:
d9:2a:cc:94:70:0e:7b:35:17:71:42:74:f3:bf:0a:00:fa:b6:
02:51:a6:02:b3:8f:f7:e7:4b:13:3c:de:de:2a:e0:d8:56:b2:
5c:ce:42:72:d7:ce:93:8e:f8:07:21:23:1d:cc:81:e7:75:58:
27:97:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:10 2025 by rpki-client