Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: uNX8BniePEOlSj82Myd74ihNSZ7jtarHGeZ5WLMNEFk=
Subject key identifier: E3:27:13:2E:00:A7:E9:ED:58:D1:D1:DC:62:B2:67:74:AE:84:36:3F
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 01976AAAAA29E16A89A7B1A1CA29AE97FEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 01AC
Signing time: Fri 13 Jun 2025 19:00:58 +0000
Manifest this update: Fri 13 Jun 2025 19:00:58 +0000
Manifest next update: Sat 14 Jun 2025 19:00:58 +0000
Files and hashes: 1: GHoYC29SdZ8JHtSYpKsW5kablNc.roa (hash: Ggk2bB2uCoFFVfvkzavwaobQUbDhv+a9KTxQ1jDSQZ0=)
2: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: iJxwpxSqXYVd51rvZ2igmU8GK2isPPQIcUmsBA+NC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:aa:29:e1:6a:89:a7:b1:a1:ca:29:ae:97:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Jun 13 19:00:58 2025 GMT
Not After : Jun 14 19:00:58 2025 GMT
Subject: CN=e327132e00a7e9ed58d1d1dc62b26774ae84363f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:f3:35:48:9b:8b:45:5a:c4:72:5a:41:7b:
42:51:67:27:e7:a9:6b:ff:54:fe:12:a8:36:b1:7d:
18:9c:7c:ff:b3:53:a5:7b:b9:97:40:cb:d4:79:29:
b9:d5:24:51:c9:09:16:ed:e2:d6:b6:93:62:13:28:
c2:12:80:bd:eb:be:08:aa:7f:23:ce:92:84:a4:c6:
09:ee:09:7e:1b:5e:c2:1d:f7:a0:46:1a:24:fd:c6:
91:41:eb:1a:f4:45:ce:18:36:12:c0:81:81:75:2e:
8f:cb:3d:66:c5:ec:6d:a6:48:9b:6c:0a:3f:c0:9e:
76:f2:1e:a6:b0:8f:47:74:17:13:b0:9a:ca:2f:b8:
96:c0:25:ca:03:eb:00:3c:94:71:1c:fd:7a:d2:6e:
13:23:b4:c8:39:3d:8d:af:26:18:1a:72:af:a5:9f:
a5:0b:82:2f:84:fa:21:7d:e3:68:a4:a7:6a:d5:84:
b8:b5:66:25:86:05:3e:92:32:6c:52:ed:fd:c9:c8:
5c:3d:f6:a0:c6:b0:6f:67:99:dc:53:19:05:a9:60:
56:a2:a8:7c:0a:56:19:dd:ca:44:e0:98:13:cf:60:
32:54:8d:13:20:de:7b:49:ee:fd:43:0a:44:45:3f:
7a:a7:34:88:11:bd:4d:27:64:c2:34:28:bb:a9:b5:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:27:13:2E:00:A7:E9:ED:58:D1:D1:DC:62:B2:67:74:AE:84:36:3F
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0e:d3:0c:2f:03:fd:86:70:61:4f:71:99:05:0b:12:48:f3:
26:dd:fa:0d:cc:ce:16:c2:ca:d2:cf:6a:42:be:de:2b:08:28:
46:06:3c:f8:85:ad:e6:84:7e:d7:11:03:c3:48:aa:18:2c:95:
ea:6f:0a:7a:b3:37:dc:3e:52:4d:f6:56:20:9a:94:e5:9a:7b:
7a:19:25:1c:72:7a:40:83:9f:b3:39:34:b5:a0:d2:61:0b:e0:
46:05:12:d6:a4:dc:42:01:4e:21:6d:75:e4:7e:bb:3e:a4:21:
53:a8:77:46:cd:10:68:1d:6f:1f:51:d0:7a:0c:01:00:f6:ea:
b2:43:7a:ce:a2:60:31:fb:0b:ad:8b:20:51:f4:68:82:bb:17:
ef:bc:98:de:ee:8e:52:a5:7b:b0:ff:76:81:03:b1:89:2d:6d:
40:a8:b5:e9:3b:cd:20:8f:20:b8:ee:e9:77:cd:77:83:f6:95:
f5:87:c3:db:fb:25:a2:ec:96:4f:c4:07:ea:57:d4:c2:a7:cf:
09:ab:de:e7:0f:33:93:12:51:8e:b6:88:33:c4:44:a8:7a:4a:
26:39:da:d9:88:00:a7:af:0b:fd:1c:25:5f:1e:80:a7:92:7b:
66:e5:35:c4:1c:de:21:61:25:61:5e:17:d2:13:ff:6f:80:bf:
6c:46:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:23:27 2025 by rpki-client