Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: 0gYoJYIdSQoQhATntHpxlfBVk9T53UfUiFoy2iGT83A=
Subject key identifier: BD:B6:4B:7F:E4:90:43:CA:07:F4:44:1F:93:E3:C6:8E:28:56:9E:7A
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019783C5F3224E5900A988D94E1B7B3FA228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 05EB
Signing time: Wed 18 Jun 2025 16:01:17 +0000
Manifest this update: Wed 18 Jun 2025 16:01:17 +0000
Manifest next update: Thu 19 Jun 2025 16:01:17 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: GDvrgIYUgY9FaxIkUPNZJOXukm0zNQYLzEFhlVWSU7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c5:f3:22:4e:59:00:a9:88:d9:4e:1b:7b:3f:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Jun 18 16:01:17 2025 GMT
Not After : Jun 19 16:01:17 2025 GMT
Subject: CN=bdb64b7fe49043ca07f4441f93e3c68e28569e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:57:74:74:9d:dd:8e:a3:11:54:1e:96:a4:
f8:e0:a4:1b:5c:a6:b2:4a:d6:e8:f3:12:00:fe:15:
e6:6f:f5:f8:b9:ba:c1:22:28:49:d3:c4:3f:a6:18:
01:31:ab:4f:5c:d8:fd:44:bb:39:af:1c:99:f1:ad:
37:82:0f:22:8b:e0:7e:19:9c:2f:7f:5e:85:9d:82:
8b:7a:48:83:8d:f1:e2:07:63:6a:da:d8:f7:ab:d3:
57:75:b9:22:4b:6f:25:8b:84:0c:cc:dd:ee:24:02:
a0:cf:35:7c:23:1e:a6:73:15:10:c9:1b:73:e6:4e:
67:31:a1:b8:a3:6f:c2:72:68:e9:0d:42:d5:45:4f:
91:71:39:90:da:40:3e:7b:bc:9a:6a:7a:13:b5:71:
43:86:37:18:69:02:c0:88:22:77:01:2e:9f:58:91:
f8:2a:53:a5:20:4e:f8:a3:4f:da:2f:75:b9:bf:a0:
13:6a:cb:91:8d:4b:23:1b:c2:8d:81:a2:76:6a:45:
64:df:3e:a3:67:4e:35:ce:12:84:bc:b6:c0:53:3d:
e1:bb:71:2f:93:b6:3d:2a:89:43:55:98:77:d9:14:
3d:59:39:ef:99:05:4a:ee:6b:b9:53:21:3f:a0:3c:
47:a7:f0:5d:12:ff:6a:10:cf:a0:44:c3:88:6d:6c:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B6:4B:7F:E4:90:43:CA:07:F4:44:1F:93:E3:C6:8E:28:56:9E:7A
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:80:a4:ec:33:39:13:8c:cc:45:97:46:f1:75:ff:96:c9:14:
36:bd:ad:c7:cc:76:83:25:8c:20:28:3b:11:a4:19:d9:b7:05:
b0:33:19:e0:73:06:7b:4f:f8:df:27:4b:d3:e1:a4:7c:9b:59:
da:3d:73:f2:26:bf:2a:0d:8f:c2:13:39:85:7a:e7:03:98:75:
4a:dd:ac:bf:7d:c9:ec:e1:8e:d5:6f:9b:e9:a5:6c:33:17:a5:
8d:1d:94:fd:eb:97:a2:c1:2c:66:8e:76:8a:c4:d2:df:2c:8f:
9d:b7:7e:f7:bd:f1:ca:9c:34:04:c7:16:42:0c:57:a4:4f:b7:
71:5f:24:9d:eb:13:6d:82:ab:00:2d:e9:a3:38:65:0f:ec:9a:
9d:2c:e5:3e:86:a0:e7:36:fd:32:7f:e0:ce:6c:34:bb:8e:ae:
7c:f3:7d:33:a6:68:d0:8c:8e:c1:40:91:15:a4:b5:a9:74:62:
ec:13:79:7e:bf:0a:c5:b5:27:c4:3e:ba:99:b6:c1:ad:4d:01:
1e:1b:07:ad:00:3b:e5:55:69:2e:33:b5:c4:10:35:f2:aa:21:
da:00:c8:ff:46:44:de:1f:8c:f4:26:77:94:37:f0:8a:bb:1d:
2a:7c:70:0a:fe:d4:00:86:14:4f:59:78:7f:aa:1b:54:e4:0e:
45:f4:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:53:44 2025 by rpki-client