Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier: z6vET/CPVEKug83NOrSl2Qz+DQSXIPrR5S0+Y+JOjsA=
Subject key identifier: 34:B5:D5:8F:38:4D:59:94:3E:76:51:8D:AD:E8:F5:14:8A:12:0A:72
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial: 01976471A37813AC9AD548CB692A86E2BD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number: 0CE7
Signing time: Thu 12 Jun 2025 14:00:58 +0000
Manifest this update: Thu 12 Jun 2025 14:00:58 +0000
Manifest next update: Fri 13 Jun 2025 14:00:58 +0000
Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: 9mVK2rzUrx1R/5/wHLoHBFVuEe5rQdnJ6NEF4M/OzO8=)
2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:a3:78:13:ac:9a:d5:48:cb:69:2a:86:e2:bd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Validity
Not Before: Jun 12 14:00:58 2025 GMT
Not After : Jun 13 14:00:58 2025 GMT
Subject: CN=34b5d58f384d59943e76518dade8f5148a120a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:23:34:99:35:50:aa:f8:72:e8:1e:02:bc:
89:a5:a6:6f:45:80:5d:a8:9a:12:98:df:28:c3:88:
af:c5:d0:31:2f:f1:12:66:e2:08:4d:e9:2c:8c:f3:
d7:24:6b:42:81:c8:89:d4:ad:4b:81:8c:2b:a0:5a:
b0:e2:09:0d:57:7e:7e:d6:37:a5:7b:4a:78:e7:f5:
e3:7c:35:01:ab:82:aa:b4:c9:17:73:d7:67:ab:3a:
0f:ec:12:0f:a2:df:68:c5:94:ec:30:64:d2:e7:53:
aa:d5:62:c6:e8:69:5e:f1:68:ac:37:54:25:4b:79:
9c:6f:10:30:21:cb:b5:f3:b0:f1:5d:cb:d8:b1:7e:
21:ae:6c:a6:ef:f0:d4:6c:dd:2c:34:2f:94:f3:06:
fe:95:11:0e:03:4f:e1:b0:6c:60:e0:fd:4a:7d:c2:
f1:70:bd:72:cc:cb:59:09:bb:01:76:7e:d2:a4:cb:
f3:18:93:53:17:e9:db:e7:cc:db:9c:5a:3e:e1:d6:
cb:62:4c:c1:c2:c7:4a:80:83:65:89:a4:11:9e:c2:
0a:50:36:f1:a0:b6:98:4d:16:e4:9a:a5:c2:e5:83:
4f:00:7a:76:71:37:52:4f:2a:06:ab:09:06:f2:35:
77:0c:c0:8a:76:f8:7c:29:cb:26:bd:71:46:12:a7:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B5:D5:8F:38:4D:59:94:3E:76:51:8D:AD:E8:F5:14:8A:12:0A:72
X509v3 Authority Key Identifier:
keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:16:22:c0:51:aa:ff:e4:cf:f8:8a:01:df:93:79:19:54:ff:
0a:b5:e2:10:43:7e:5f:72:a5:37:dd:6f:1e:69:66:18:64:8e:
9e:6a:9d:72:10:8d:81:a7:29:e7:32:d3:0e:c3:e9:72:31:ca:
e5:c2:a3:5f:37:0c:0c:39:b8:43:33:8a:66:39:18:5a:8b:e8:
70:45:36:62:81:ab:54:cd:80:dc:dc:0c:b1:a1:0b:32:0f:46:
30:93:a6:bc:45:d8:e0:12:4e:ff:47:63:c6:1f:73:49:fa:bb:
41:51:a1:4a:2f:a0:1f:88:0f:f5:58:62:f6:04:7a:6f:bd:66:
83:da:d5:79:e1:7d:8f:ac:92:16:ed:bf:52:96:24:ca:82:01:
e6:75:2c:25:73:fa:ee:af:72:5a:cd:46:04:be:e0:fa:d9:db:
a7:0a:f0:94:e0:1d:d2:a3:a5:84:96:df:bd:3e:df:91:ea:10:
01:f5:74:17:a4:5d:30:53:d9:44:c0:38:fd:e2:2e:80:4b:95:
2e:b3:b2:97:33:63:d8:7a:1f:b1:37:36:da:e2:6f:ba:f0:3b:
6c:5e:80:ab:b6:8d:c1:7e:72:9f:3d:1c:f7:f2:a0:54:13:fb:
ed:80:6e:42:a3:36:1d:68:a8:30:51:9c:c0:07:3a:48:36:f5:
ad:5c:58:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:44:44 2025 by rpki-client