Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
File: OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json)
Hash identifier: FLmcB+UUjCNr/UhiyufuuUOe7ByINn4ZHOllM+TUdPo=
Subject key identifier: 3C:1A:54:AE:55:94:7E:54:A6:7E:09:FE:82:75:6C:A9:81:D0:EC:CC
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial: 01974EC570F3492ADD71D9BD8D5DABED667A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
Manifest number: 0663
Signing time: Sun 08 Jun 2025 09:00:51 +0000
Manifest this update: Sun 08 Jun 2025 09:00:51 +0000
Manifest next update: Mon 09 Jun 2025 09:00:51 +0000
Files and hashes: 1: GzEFY4FMaNIn9ALjdEIyqJJseSE.roa (hash: A0TZx6QvZikNrmKwA+Q10TiJHkrQxZ4XZGZdjheoj80=)
2: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: tGLUVKJT3VKdx+DHu/myb8CXzmM3Z8JZY9kQXXd5m6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:70:f3:49:2a:dd:71:d9:bd:8d:5d:ab:ed:66:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Validity
Not Before: Jun 8 09:00:51 2025 GMT
Not After : Jun 9 09:00:51 2025 GMT
Subject: CN=3c1a54ae55947e54a67e09fe82756ca981d0eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:9b:2c:d1:80:af:00:db:70:54:17:c4:70:
e5:c8:59:43:97:e8:85:eb:82:9f:b3:0f:1f:9a:17:
b6:33:c5:ba:cf:26:9c:56:01:b1:1a:51:26:0d:12:
c1:fd:03:4c:2f:d8:42:cf:dc:93:c6:f6:a5:c3:66:
23:e2:15:6c:64:72:fe:a5:5f:f2:3a:e6:38:bd:c3:
1f:42:a6:00:9a:57:c5:42:31:4d:8d:e8:cd:2c:6f:
05:85:8d:d3:04:ba:ba:8d:0a:12:d7:0e:e1:75:6d:
cb:eb:1f:0d:e1:48:5d:6a:1c:9f:67:7e:ea:93:99:
31:ce:ec:29:1d:fc:ef:cb:81:46:2d:cb:01:f0:0d:
a8:e4:fe:e6:cc:b8:c6:f7:6b:5b:c2:40:c4:0e:af:
f6:0d:23:ab:76:fe:cf:fa:7c:c7:eb:ba:c4:c1:14:
ec:0d:cb:08:ac:5d:43:1f:c2:e1:cf:de:30:72:91:
23:09:02:c7:f0:18:3f:d2:be:54:ec:45:3a:97:ef:
e6:33:3c:7c:4e:f6:8f:6d:34:0f:18:09:2b:20:87:
ce:ed:c8:02:85:44:6f:51:d2:1b:9d:ef:bf:db:48:
20:d0:99:55:55:84:9e:dd:ea:ae:36:5b:13:d3:e5:
56:8d:01:b8:65:f1:a8:ae:d2:e5:a3:41:3e:5a:7f:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:54:AE:55:94:7E:54:A6:7E:09:FE:82:75:6C:A9:81:D0:EC:CC
X509v3 Authority Key Identifier:
keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d1:b6:20:0d:95:94:8e:7d:8d:3d:b7:6c:0c:1a:f3:6b:17:
ed:1f:e9:a0:de:e7:67:a2:2d:86:e8:50:e7:53:6a:bb:93:ae:
29:45:b0:5f:33:e3:1c:e9:3e:24:e1:8b:ca:55:ab:91:28:b2:
54:18:b9:8a:27:f5:e5:09:ce:80:e9:81:7c:f5:fc:75:a9:77:
b3:4a:ff:b9:89:7d:70:1a:81:74:c8:ae:77:82:c6:cb:8b:8a:
45:1d:14:1d:de:54:e7:80:79:7e:00:4a:0b:88:66:30:80:0b:
12:92:bc:4c:46:96:d0:e7:77:af:6a:71:e9:6a:0b:7b:8d:01:
ce:25:ad:2e:f5:8b:ae:6e:af:78:c3:01:cc:6a:0d:b4:29:4f:
bf:51:75:72:88:8f:67:91:bf:7a:d5:e9:98:9f:f2:fd:08:00:
bd:e4:df:81:59:d1:bb:9b:36:9e:1b:c5:8d:8b:9b:24:b9:b9:
0f:25:c2:fc:db:c9:58:4f:b3:25:63:57:a5:98:80:95:4a:68:
bc:f0:e7:5f:a3:8a:2a:1e:33:98:93:6c:4e:8a:81:50:2b:89:
43:18:60:ef:95:9c:f9:16:73:29:5a:1f:94:b8:84:37:28:7d:
0e:ee:25:8d:16:6e:a0:de:1a:9e:38:14:46:12:83:07:58:7f:
c0:ae:21:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:47:02 2025 by rpki-client