Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: vhXmrcaT8Kq7AYocUlRwHNHy0uezVbzb/NLhakbW7TE=
Subject key identifier: DB:7D:20:0A:5E:0F:F9:E5:3C:10:4A:9C:8E:8A:48:32:FD:A5:19:70
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 01984A779D01DF1997102C2AF7952229E0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0CE7
Signing time: Sun 27 Jul 2025 06:00:09 +0000
Manifest this update: Sun 27 Jul 2025 06:00:09 +0000
Manifest next update: Mon 28 Jul 2025 06:00:09 +0000
Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: sdzvwEaBGDXQ9XXKdFWbsR8Ijr27t05wxZikTS/DUzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:9d:01:df:19:97:10:2c:2a:f7:95:22:29:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Jul 27 06:00:09 2025 GMT
Not After : Jul 28 06:00:09 2025 GMT
Subject: CN=db7d200a5e0ff9e53c104a9c8e8a4832fda51970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:57:74:97:0e:5f:3a:5a:01:35:f2:70:a5:
e1:d5:e5:ed:3a:e5:08:56:27:78:40:05:50:0c:18:
16:6e:1e:c5:83:a6:a1:d4:c0:c7:47:c3:4a:da:38:
d2:2c:cf:27:2b:7d:0a:93:6d:05:fb:a9:20:88:75:
87:cd:64:1e:7c:7c:38:6c:16:73:f6:26:fb:68:e9:
cb:93:03:85:dc:d6:dd:80:40:b4:ec:49:40:d7:47:
37:0b:82:6c:d3:a7:de:dc:e4:5b:5f:7f:cc:1c:13:
eb:f6:c6:de:3b:b3:f0:f8:d8:25:28:b4:50:c2:5c:
4c:a9:2d:18:e4:75:80:b7:c3:32:63:75:44:b0:c1:
a4:3e:04:8d:07:9c:eb:8f:c5:e8:0e:67:b6:62:db:
a9:ee:bc:bf:b4:87:3d:d7:80:93:1b:98:3f:d5:86:
c5:92:83:52:81:e4:94:d7:69:ff:f5:bc:ac:63:9a:
11:cc:e6:8f:9a:22:5f:65:d1:b2:7b:aa:03:40:4b:
39:23:e2:af:9a:71:f7:cd:5e:c2:fd:4e:84:8a:c1:
e0:30:81:3f:2b:cd:ec:83:8e:6e:a7:61:8c:17:f2:
85:ab:b1:0b:14:1e:af:f2:cd:e5:40:23:ad:7b:e4:
76:10:4b:4f:65:8e:6a:99:a3:bf:91:d1:78:68:a7:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:20:0A:5E:0F:F9:E5:3C:10:4A:9C:8E:8A:48:32:FD:A5:19:70
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:92:f0:99:70:bd:ad:b1:c4:1a:da:8a:48:4c:b6:75:03:91:
e3:70:d4:81:f3:03:52:71:2c:5d:04:4a:7e:67:36:09:c4:47:
93:60:ef:73:e3:44:85:75:eb:58:eb:d7:47:56:fc:f3:a5:e3:
35:7f:75:ac:50:be:4a:dd:81:54:b7:8f:26:5e:65:f2:2c:1a:
47:dd:76:08:3b:7c:38:c9:b8:7f:7f:c5:e7:bb:07:d9:e0:03:
ac:fc:8d:f4:08:81:90:27:62:5f:6e:31:3b:b9:7a:b1:f2:d8:
37:b4:2d:38:95:65:2a:56:f3:82:29:09:df:46:a1:fa:9c:50:
2b:8c:e0:f5:07:7d:01:c4:2e:6a:f7:0b:5b:99:0d:24:4f:8e:
4a:8b:50:6a:20:b7:50:a2:ab:d3:ed:ea:57:1e:0c:8b:5f:44:
34:09:77:08:6f:ef:8a:15:a4:ee:59:b1:67:46:61:76:bf:0e:
81:46:4f:4d:b9:48:56:61:ae:66:06:39:21:b9:5b:76:eb:eb:
7a:ba:4d:71:ef:f2:ac:74:82:c8:9d:ed:27:95:0b:b1:40:8d:
85:5e:35:ae:06:e9:18:f5:c0:d2:fa:6d:43:ca:81:a1:be:4a:
58:35:7c:94:91:e5:10:4b:e3:0e:a1:2d:ff:5d:0c:3a:c8:fc:
5b:3d:52:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:12 2025 by rpki-client