Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: 76HLEhU1+tWcp2W+yDKCAQoKdpCY/l3RRjsM6TWcnBw=
Subject key identifier: B8:CC:1E:C8:2E:1C:B3:D5:52:76:B2:65:55:84:9F:52:E2:51:7F:16
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 019750B44F2B3A9862D8263433E1CAE13A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 0FBE
Signing time: Sun 08 Jun 2025 18:01:23 +0000
Manifest this update: Sun 08 Jun 2025 18:01:23 +0000
Manifest next update: Mon 09 Jun 2025 18:01:23 +0000
Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: XnUvdXwnEyxYRwPjgII4vjfbfb2F7A65TrU4yqtiThQ=)
2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:4f:2b:3a:98:62:d8:26:34:33:e1:ca:e1:3a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Jun 8 18:01:23 2025 GMT
Not After : Jun 9 18:01:23 2025 GMT
Subject: CN=b8cc1ec82e1cb3d55276b26555849f52e2517f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:7b:b8:a5:c4:4e:35:47:60:9e:a3:39:b1:
8f:22:ee:6e:1c:79:ba:33:ce:3b:d8:9e:e9:9c:9a:
bd:0c:9d:e4:91:7e:19:26:5c:ce:fc:ec:d8:4e:56:
3b:91:f2:bf:76:0d:da:1d:9c:93:a5:d6:2d:07:20:
b3:de:fb:39:ea:5f:96:08:85:60:d3:bc:3f:85:0d:
e6:7e:4c:cc:a3:5e:57:97:5a:50:ff:64:77:95:2e:
1e:89:c5:23:7d:8e:c3:f6:6e:12:b1:bf:d6:9b:d9:
a3:cc:cc:76:f7:0e:59:51:cb:25:cf:f3:14:3f:0a:
83:55:b2:e2:c1:2c:b9:a1:4f:24:30:fd:ca:84:29:
2a:0a:bb:47:0b:19:96:b8:5a:47:66:74:6f:ac:59:
13:a6:24:a0:0c:48:ff:cb:cf:67:b1:6b:eb:23:f2:
95:6f:11:7c:16:a0:b4:8e:e1:8e:92:d7:a8:bc:3a:
96:08:07:12:b7:35:99:1e:3c:9a:fb:2f:fa:d9:55:
a5:ee:7f:55:58:aa:37:84:20:9e:2e:fe:4a:90:b6:
95:ce:6d:3d:2c:61:e6:11:a1:12:76:61:c6:02:a2:
01:ad:42:b1:ec:b9:81:6d:0f:e0:f8:35:6b:0f:81:
39:25:21:ed:6f:6f:3f:78:09:15:d5:8c:32:22:23:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:1E:C8:2E:1C:B3:D5:52:76:B2:65:55:84:9F:52:E2:51:7F:16
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:67:b2:b6:84:bc:2b:bd:90:ab:8c:20:34:0f:d7:2a:d9:a5:
9c:5f:45:d9:77:4e:93:71:81:59:bc:20:a2:83:b0:b8:bd:4a:
81:30:07:4a:75:50:b1:8c:88:04:8c:0f:c8:5c:c0:51:3e:fa:
af:9d:b7:ca:a6:8a:35:a4:2a:c6:23:b6:b7:bc:ec:d8:ed:2c:
92:7e:eb:64:d4:2f:c2:33:8c:65:11:50:4a:8e:39:1c:b5:5b:
1b:92:30:59:ca:ac:56:73:59:0d:df:e7:01:ea:ad:23:2b:32:
55:ae:46:95:69:89:a4:21:8b:ba:7e:36:2b:5b:54:f6:f4:1a:
71:0a:2e:71:e6:71:ff:92:a3:fa:4a:6c:5b:f4:b6:51:1d:fc:
9d:5b:90:18:27:59:db:61:b9:30:7d:db:b3:17:75:92:19:06:
28:8b:ed:74:76:76:3a:94:e9:f8:66:5c:4d:7c:79:7e:67:da:
be:1a:f2:f8:8d:b1:f9:28:9e:b3:fa:ba:11:e2:a5:4f:04:2d:
16:30:4f:a7:cb:a6:76:51:51:5b:81:2e:e3:66:3d:61:cb:fb:
18:49:19:7c:48:2b:99:6f:63:9f:5b:2e:71:89:79:92:68:d7:
4e:4b:96:6c:76:95:97:8b:6c:21:fd:fc:85:46:6c:9e:e4:db:
b6:ed:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:03:10 2025 by rpki-client