Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
File: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft (raw, json)
Hash identifier: ESQ1xC/O3z+YXeiWMy5iFHpLmbrJ8Not0KA2aHFpJFA=
Subject key identifier: C6:D7:FB:CC:23:DF:02:7C:B0:A4:75:EA:FF:E5:12:4A:5C:AC:FB:77
Authority key identifier: A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
Certificate issuer: /CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Certificate serial: 01975EDD69DD316708AFF092C787F05EA6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
Manifest number: 0540
Signing time: Wed 11 Jun 2025 12:00:58 +0000
Manifest this update: Wed 11 Jun 2025 12:00:58 +0000
Manifest next update: Thu 12 Jun 2025 12:00:58 +0000
Files and hashes: 1: QTH68uA3y3zqOE98H-X27hlKLHg.roa (hash: POyUR/thMzWlT6agcEoWXyNHRaqJHhqSVA15ql0XP6U=)
2: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl (hash: DZePVE5NpI5eQ9tSGXAa4i0jqVWt2xy8spE5DeG5qLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:69:dd:31:67:08:af:f0:92:c7:87:f0:5e:a6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Validity
Not Before: Jun 11 12:00:58 2025 GMT
Not After : Jun 12 12:00:58 2025 GMT
Subject: CN=c6d7fbcc23df027cb0a475eaffe5124a5cacfb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:1d:c5:00:7f:2a:ff:75:60:f0:1c:9e:18:
ff:37:b3:d7:92:03:f9:76:ec:32:79:0b:73:b2:b5:
6c:90:0f:ce:72:92:0b:57:db:93:34:a9:8b:b2:dd:
8b:05:5a:51:c5:85:00:58:22:3a:70:86:c6:25:92:
e7:6c:62:90:42:33:e6:d3:4d:7e:a1:bb:2f:ee:52:
15:96:89:6a:65:9f:87:c1:2c:64:1c:ab:52:4a:c4:
71:0a:48:4b:fa:a1:ca:ef:ef:60:40:e0:fc:a6:a7:
4f:ec:a2:02:a8:67:30:d6:dc:4e:4e:37:28:70:81:
cb:fa:50:fd:fa:47:78:a1:c2:d4:71:2a:9a:bc:c3:
93:33:da:b5:d0:b3:67:2d:8c:42:94:01:a8:b9:85:
92:8d:f5:e0:78:9d:66:b7:10:0e:51:81:6e:ca:f4:
61:2a:1a:67:2b:e6:44:f0:d4:5b:f6:b9:38:94:3f:
2c:51:90:b2:b7:92:60:ea:0f:2a:eb:38:d2:cc:7e:
83:06:ee:c1:27:70:f1:a1:48:9d:a5:c0:44:d9:85:
42:e9:37:56:22:b4:35:05:e6:45:6b:d6:a0:78:58:
9b:d8:ef:21:02:ab:c5:21:77:de:3b:32:da:82:f1:
c1:a2:33:48:d4:51:b7:5f:5e:d6:e1:70:44:8a:33:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D7:FB:CC:23:DF:02:7C:B0:A4:75:EA:FF:E5:12:4A:5C:AC:FB:77
X509v3 Authority Key Identifier:
keyid:A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:83:3e:73:48:4d:9b:fa:af:8c:27:6d:2d:e4:42:86:ec:c8:
1b:b8:cf:bc:c3:c7:b2:11:1c:af:b6:78:57:9f:1b:f5:96:8f:
75:1c:95:ba:27:34:b2:8d:99:3b:26:a0:30:27:6f:29:dc:6a:
40:9b:3e:b1:1e:53:26:3b:42:f5:3e:b5:d8:34:df:25:b7:65:
74:73:1a:4a:76:6b:d6:a8:4d:1d:04:6d:ae:0b:d9:4b:4a:1a:
5c:63:1d:cc:d9:58:fa:37:e5:7f:47:35:e4:0d:1b:5b:ae:fb:
8d:77:21:54:e9:bb:ea:3d:71:c4:c0:f4:77:49:aa:41:36:d7:
3b:a5:c7:af:1b:80:05:f4:07:5a:f3:26:90:ba:a9:6c:93:46:
91:ce:cb:43:b6:de:db:47:ff:3c:86:81:b0:bd:b8:8e:15:dd:
a4:08:7a:7a:db:33:5e:50:4b:86:64:74:f0:58:81:d2:94:86:
c0:52:b5:6c:7e:8f:17:8e:ab:3e:6c:f5:18:a6:45:53:8d:0f:
d1:70:f0:13:cf:12:1c:d6:28:bc:e3:1d:ad:91:90:70:66:2c:
c5:0a:03:e7:58:73:af:05:bc:6d:9d:37:e8:61:88:4e:2c:cd:
0f:1f:5e:5d:4a:59:0e:8a:36:79:78:51:21:67:91:fb:7e:2c:
58:55:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:25:20 2025 by rpki-client