Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: 7RMpTjVEgDjY63RxIfnDlf6HQ97uydNnKICAg2XRqck=
Subject key identifier: 32:04:D3:21:D1:87:5A:FA:DC:5B:8C:15:94:B2:1C:2F:EA:47:9B:99
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 0197488C50F23CA0581609C68E5FAE854122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 11A4
Signing time: Sat 07 Jun 2025 04:00:44 +0000
Manifest this update: Sat 07 Jun 2025 04:00:44 +0000
Manifest next update: Sun 08 Jun 2025 04:00:44 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: Np9ceK4Ys13VoEwpZ6Uq1TSq/kqHuzr9Y2xVYXkM7Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:50:f2:3c:a0:58:16:09:c6:8e:5f:ae:85:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Jun 7 04:00:44 2025 GMT
Not After : Jun 8 04:00:44 2025 GMT
Subject: CN=3204d321d1875afadc5b8c1594b21c2fea479b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:f6:b5:40:df:e5:93:bb:b0:e3:23:30:27:
c9:69:22:e8:c5:31:7a:ee:17:9b:52:15:82:93:a6:
d8:90:71:2a:f5:8b:40:ff:e6:39:a0:a5:68:0b:55:
67:bf:34:67:d4:69:20:99:e9:87:b4:37:33:89:ab:
f8:b5:2e:12:d6:19:f1:a7:2c:b6:33:65:30:df:6b:
83:56:48:81:d5:e7:92:bd:f6:20:95:03:7b:ce:dc:
2e:b8:67:93:5c:51:3f:d6:d4:20:2a:f4:b5:1d:86:
90:59:3a:5c:63:d5:da:89:c1:c1:db:ca:86:94:cc:
04:e2:eb:77:7b:4d:4b:75:50:c4:86:27:32:95:22:
11:ba:cf:a0:fb:89:d8:db:58:16:38:15:b3:ac:73:
ff:05:54:5e:96:f7:50:33:a6:49:34:69:90:3b:fa:
00:b4:5a:57:a1:07:d7:dc:60:d7:d7:59:60:1f:a6:
4a:0d:3b:a5:6d:aa:0f:9d:b9:7b:e6:44:70:fe:fe:
4d:13:ea:98:5f:5c:ee:53:78:ce:b3:79:82:66:c6:
73:f6:c3:2e:19:37:cc:9a:ee:bf:b3:82:05:e0:01:
30:61:c5:94:4f:27:14:b7:e5:09:3f:dd:da:8f:fc:
be:f5:21:a8:28:1d:71:2a:59:bf:de:00:19:fd:9e:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:D3:21:D1:87:5A:FA:DC:5B:8C:15:94:B2:1C:2F:EA:47:9B:99
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b2:fd:32:0d:02:17:8a:7b:bb:b1:d2:cd:47:9b:88:08:c2:
fd:a2:7f:aa:f2:89:05:08:63:35:71:bc:a4:97:2d:bd:d9:fe:
90:3f:4a:89:fe:4e:37:47:7b:5d:3e:06:0f:ec:c0:9b:a8:b2:
a4:d3:aa:6f:cb:bd:23:40:44:7a:1d:ad:af:3f:90:6a:6d:dc:
22:f6:56:57:f4:14:78:f7:06:9a:10:df:99:86:23:8a:7c:b6:
19:04:8c:79:55:66:c3:14:87:9a:c8:96:e1:6f:26:59:61:3c:
35:13:29:ad:fd:8c:5e:13:be:f9:4d:e1:6f:db:1a:87:4d:e5:
2e:28:49:69:ec:3d:63:52:9f:83:44:84:95:53:76:1b:27:b8:
66:81:9d:d3:8a:e6:54:36:5f:35:71:63:38:9b:e7:7e:4d:92:
73:17:4a:05:e9:89:e6:9d:d3:11:e0:48:e1:25:f7:96:16:b5:
1d:22:8a:bd:c5:e0:1e:b7:e9:38:a4:73:e9:e8:82:e9:b8:d7:
47:3d:93:1c:17:fa:68:e0:87:f5:87:fe:d4:ab:7a:60:87:cc:
5e:6a:bc:95:86:4f:be:d3:17:93:54:90:80:02:0f:75:91:97:
05:9c:77:47:c2:10:51:ed:cf:6a:09:93:d1:96:73:34:c5:3d:
9f:8f:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:58 2025 by rpki-client