Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
File: OIzM14vxZTPzMYVEPqgtza2SBBA.mft (raw, json)
Hash identifier: QeKuATfCWiX0fJBzJqaeAf8EccCwx8YRX2CSCEJr7U0=
Subject key identifier: 8F:73:59:1F:40:89:F0:91:D7:1E:A5:E3:F3:C9:AC:B2:0F:F2:A6:9E
Authority key identifier: 38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
Certificate issuer: /CN=388cccd78bf16533f33185443ea82dcdad920410
Certificate serial: 01984A781992C37A7763401D58CE51F76EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
Manifest number: 0C3E
Signing time: Sun 27 Jul 2025 06:00:41 +0000
Manifest this update: Sun 27 Jul 2025 06:00:41 +0000
Manifest next update: Mon 28 Jul 2025 06:00:41 +0000
Files and hashes: 1: OIzM14vxZTPzMYVEPqgtza2SBBA.crl (hash: K5MxLIIsJZi0b8uxSN6P8iwqN8IRYG46MevLWFq6yc0=)
2: S5-p15oe6PO1US7yiwalFk2guhA.roa (hash: RxwUj9qrcB8W+bA9U60Y3Yd+aWieeN2zZTQTfRBMSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:19:92:c3:7a:77:63:40:1d:58:ce:51:f7:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388cccd78bf16533f33185443ea82dcdad920410
Validity
Not Before: Jul 27 06:00:41 2025 GMT
Not After : Jul 28 06:00:41 2025 GMT
Subject: CN=8f73591f4089f091d71ea5e3f3c9acb20ff2a69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:94:01:3e:85:6a:4e:20:0c:78:f3:d2:71:
54:ca:e2:91:5e:68:42:31:75:09:a1:69:29:be:78:
bd:fb:39:6b:9c:44:97:61:98:86:17:77:71:c0:4c:
42:53:9d:7e:2f:fd:5e:b8:f1:75:0c:1c:1f:76:8b:
0c:ea:56:e9:fa:ec:9b:a7:fb:d1:47:fa:ef:b9:15:
1e:f3:fd:76:70:eb:d3:3d:5f:d6:95:91:5a:06:af:
9a:7d:22:4d:2d:70:e2:9d:d5:de:cb:df:61:0f:fe:
79:91:3a:8f:b8:4d:c7:d7:c4:92:b7:c7:69:a5:9e:
27:43:b7:0c:32:0b:b3:48:49:5e:eb:12:2d:ea:66:
e1:f6:10:d5:b6:a6:2a:58:76:92:26:5a:08:31:e2:
96:2c:a2:7c:ee:2c:74:6d:23:d7:f2:b7:89:c6:cf:
d4:49:d1:00:85:44:87:77:c9:0a:9d:76:c4:5f:ea:
e6:50:49:c1:a4:be:ab:7e:a3:6b:03:36:10:9b:88:
ed:cd:fd:4e:d5:79:57:05:d4:b0:50:3d:27:40:18:
34:41:a7:6e:60:1f:0e:d1:c3:6c:d0:6d:c8:48:41:
40:1f:7e:ae:a2:fc:c4:78:69:4f:04:28:30:e8:d3:
74:fc:de:ef:c4:30:c3:72:9b:9b:a7:fe:f5:a6:ea:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:59:1F:40:89:F0:91:D7:1E:A5:E3:F3:C9:AC:B2:0F:F2:A6:9E
X509v3 Authority Key Identifier:
keyid:38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:35:01:72:dd:f2:3d:1c:6c:ee:0c:13:44:b6:97:af:b6:32:
90:f6:e7:d9:fc:53:89:7f:c7:1e:1a:87:a2:cd:41:93:3b:8c:
ec:65:61:e6:42:19:92:b8:77:57:f4:9f:0a:cf:07:46:f3:7e:
c5:85:e7:8d:0c:75:8c:f9:ab:e4:55:3c:51:e2:05:20:1c:be:
36:90:47:72:14:67:9d:3d:48:9f:60:c4:a6:a0:67:93:11:b5:
4c:84:81:f4:3e:8d:81:e4:a5:67:6a:c3:8a:8c:c1:f6:27:ba:
3e:a9:b2:57:e1:1a:c0:05:4a:66:cb:38:94:93:60:e1:cd:64:
fc:31:53:97:9c:2a:2e:95:2b:d5:c7:24:db:b9:6d:b8:c9:b7:
ad:55:b7:49:95:13:81:84:a8:0c:2d:99:77:8c:cc:f8:d8:aa:
e1:95:15:84:5e:02:8f:6d:a6:ec:9d:6a:31:08:74:36:15:96:
4d:cc:03:bb:9e:d2:55:1b:56:bd:5d:98:dc:6b:58:c8:5a:9b:
8d:a7:f1:1b:cc:99:a6:64:10:04:d4:9f:35:40:7e:60:75:a2:
5f:6a:7c:dd:83:17:8f:88:5b:3f:16:d6:3e:90:fc:ce:58:48:
91:d5:71:83:73:09:12:c5:f9:ff:be:a4:13:2d:7b:ae:f3:08:
e1:f1:fa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:31:13 2025 by rpki-client