Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: FurVxgZpXU6GBBGHUyhNQmpJ+YXJWubGebEoa3+H1b8=
Subject key identifier: 39:95:14:42:39:7A:88:26:93:50:F3:D6:2E:C9:21:F7:CB:33:BC:F3
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 01976395FCFF5D680F897F0B48802779A892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 0EB8
Signing time: Thu 12 Jun 2025 10:01:03 +0000
Manifest this update: Thu 12 Jun 2025 10:01:03 +0000
Manifest next update: Fri 13 Jun 2025 10:01:03 +0000
Files and hashes: 1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: +jFwHDDMlEcZvt6B+rtYSII+qKlrUaDkaF9owi3CUG4=)
2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:fc:ff:5d:68:0f:89:7f:0b:48:80:27:79:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Jun 12 10:01:03 2025 GMT
Not After : Jun 13 10:01:03 2025 GMT
Subject: CN=39951442397a88269350f3d62ec921f7cb33bcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:6a:d3:dd:3f:04:28:64:b8:d7:07:75:7f:
e6:8f:78:2a:e2:47:fa:6c:b9:9c:a6:2c:70:d6:9d:
b6:f0:46:be:f6:11:67:03:fe:f1:df:05:b6:f0:a0:
32:17:b1:71:91:3d:58:ca:2a:99:5f:d7:fc:f3:60:
79:f3:cd:21:f5:34:f0:74:0a:4a:09:79:7e:de:ce:
fb:24:c7:bb:fa:4e:b7:f4:9c:4b:1a:fb:cb:e3:d8:
79:d8:d1:e7:1e:d6:67:e0:79:5d:77:34:e7:fa:20:
11:72:17:45:fc:be:67:05:e4:b1:fb:de:8d:77:7d:
47:a1:60:ff:94:eb:55:d7:57:5b:41:12:cb:a8:55:
cb:d9:8a:6c:58:ff:e7:f0:ed:24:b3:52:1f:ea:65:
92:7c:47:8a:d1:82:ef:91:6e:50:0f:81:a0:54:70:
20:cb:d2:d9:9b:7b:28:51:4b:20:21:b3:59:99:c8:
ce:79:3c:6b:68:4d:b2:b0:37:c7:03:3b:6d:ca:ac:
42:28:69:0a:b2:2f:48:34:88:de:c8:d5:77:c4:9b:
01:26:ce:31:33:4f:12:06:21:d1:2f:ce:5f:d7:2e:
9f:34:db:40:fa:d9:c7:c3:bb:8d:17:bd:29:73:af:
db:16:98:69:ae:15:3e:75:d5:0c:1a:24:9a:ab:af:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:14:42:39:7A:88:26:93:50:F3:D6:2E:C9:21:F7:CB:33:BC:F3
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:75:2c:73:0b:56:b8:9a:ab:58:ad:50:d4:c0:7f:53:f4:e4:
5d:99:f5:6e:4e:30:d7:3a:4e:c0:9b:dd:58:32:0d:d4:f5:36:
1a:94:2b:09:be:8e:35:83:3a:b2:d6:df:0f:60:6d:bd:9b:d7:
38:fe:f0:e6:6f:23:9f:21:47:a5:46:27:3b:55:fe:69:ba:a4:
d3:27:0a:d3:95:d8:15:03:c8:cc:04:b7:d8:4f:38:b3:f1:28:
54:d8:de:ea:da:fd:30:c2:9c:2c:6e:27:c8:98:00:4e:51:26:
72:4f:a6:06:40:93:75:aa:77:80:86:bc:32:b3:13:c6:5f:14:
8f:a4:23:a4:86:1d:b7:ba:5f:d2:33:df:7e:dd:b0:ba:b0:14:
0d:d7:ff:24:77:d8:e7:f2:dd:d7:e4:3c:a4:bb:79:8a:c2:c9:
63:d5:23:87:f8:ec:1b:79:0d:7b:27:0e:8f:f5:b5:cf:48:13:
7f:11:70:63:79:fb:72:68:fa:b9:b2:32:d1:b6:67:eb:4b:c8:
5a:5a:c9:30:56:eb:81:50:d5:b2:09:e5:87:2e:19:8a:a7:25:
36:fe:3e:e0:a9:a8:67:a7:e4:3a:80:4f:43:7e:63:6d:41:03:
bf:bc:1c:7d:31:8d:c0:b7:a6:7f:9e:17:52:7b:ec:31:12:54:
2d:b8:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:18:17 2025 by rpki-client