Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: 3Wrn+9XaZ95s+C7E564sfkXS8RFlBJHgvnk+RjaXBH8=
Subject key identifier: 19:AD:62:C5:36:0E:3E:FB:BB:FB:4A:0E:C7:D4:0D:FE:75:F4:08:1D
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 019764DEED36CF3F1844AEC8DCE8DAB71E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 0EF0
Signing time: Thu 12 Jun 2025 16:00:20 +0000
Manifest this update: Thu 12 Jun 2025 16:00:20 +0000
Manifest next update: Fri 13 Jun 2025 16:00:20 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: hoSPMpCNQD+kLWwiiYFnEu4OJuzT/Xy5Met2cz4pKkw=)
2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:de:ed:36:cf:3f:18:44:ae:c8:dc:e8:da:b7:1e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Jun 12 16:00:20 2025 GMT
Not After : Jun 13 16:00:20 2025 GMT
Subject: CN=19ad62c5360e3efbbbfb4a0ec7d40dfe75f4081d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:8a:81:4e:2c:a4:0c:5d:48:08:f2:60:cd:
50:4a:2e:e5:16:1b:6e:0e:bb:bd:01:13:80:88:63:
54:0b:e4:53:fd:4f:a0:c1:5a:1f:a2:e1:f5:6f:71:
79:fd:8f:21:c8:ab:be:24:01:7e:6d:45:4d:f1:fd:
a9:67:33:d3:a4:0d:b5:a5:aa:9d:f6:cd:26:9c:e9:
f9:c0:88:71:6a:dd:07:a0:3a:b0:35:7b:df:e6:04:
ac:7b:da:a6:18:3c:3e:4f:e0:8a:c3:32:5e:77:9c:
b1:44:37:8b:c5:68:b6:1d:f2:dd:5f:00:eb:f3:3a:
9d:2f:25:c7:bb:bb:77:d0:12:6e:9b:02:e7:1a:ee:
3b:a2:fe:fe:bb:90:c7:19:94:34:af:f7:6c:ad:88:
18:af:b7:3b:73:d2:6c:df:5e:2b:5f:40:5e:ba:a4:
ae:41:24:a2:00:64:0f:4a:cf:88:1a:ab:2c:ca:c8:
ee:d2:74:39:bf:72:d1:4f:31:1d:61:d4:38:ad:0a:
9c:1f:29:29:83:dd:86:90:3a:be:37:78:13:67:9c:
26:e2:08:15:8d:4e:e3:84:63:d0:19:fd:07:dd:a2:
7d:64:cf:47:0c:10:eb:2c:d2:5c:e7:fd:25:d8:a3:
c1:d2:4d:5d:67:04:de:45:d4:77:08:73:6b:83:15:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AD:62:C5:36:0E:3E:FB:BB:FB:4A:0E:C7:D4:0D:FE:75:F4:08:1D
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f3:46:86:7f:77:1e:83:21:2e:b2:8d:4b:67:d5:06:77:98:
91:6a:83:43:2c:25:11:ec:6d:0b:50:0a:44:f3:3c:1d:b3:a4:
15:84:15:6f:94:f6:dd:e3:9b:22:49:78:4a:c3:1d:c0:16:35:
87:a4:a2:12:06:b7:c6:23:9a:9d:e9:2d:fc:4d:3f:82:e7:b2:
f6:ba:63:8b:f8:e2:60:88:12:fd:ba:93:22:36:73:e1:c4:7b:
f4:36:e7:16:2b:60:eb:c2:d2:15:a8:ce:c0:a7:86:64:c6:0d:
44:d1:9c:60:a9:d3:64:4d:d1:76:7c:92:2e:12:45:9b:45:55:
8c:57:06:e9:af:ba:4e:f3:10:36:cd:4c:06:ae:03:12:a0:bb:
dc:e2:72:56:0a:28:4a:1b:f1:74:36:ba:8f:b1:55:bf:14:2b:
b1:62:9b:0e:47:0c:c9:83:47:82:4f:5f:eb:2a:31:ac:06:b8:
f2:49:b2:ae:aa:b0:8c:97:2d:26:69:43:74:45:dd:30:42:a2:
2a:d9:1e:6f:d9:2b:cc:57:79:69:34:5d:a5:02:0f:ae:41:63:
2e:8d:c0:36:6f:f4:a0:93:d0:35:66:56:90:cd:2f:a2:78:4e:
60:c8:8e:f2:93:27:dc:f8:10:bf:e1:19:b8:fe:42:f8:10:bf:
c5:33:f7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:35:28 2025 by rpki-client