Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: DMDrg3sky5BfJgiUoBqDUpzeBTONZ3yuOectbcpbRic=
Subject key identifier: DD:0E:9F:CF:21:97:3D:1B:84:4F:36:CF:99:21:F7:56:5E:72:6E:5E
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 019748C2FE04F9118592680D3409D3401484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 1441
Signing time: Sat 07 Jun 2025 05:00:27 +0000
Manifest this update: Sat 07 Jun 2025 05:00:27 +0000
Manifest next update: Sun 08 Jun 2025 05:00:27 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: cO9sp+ei6QxEulYTXDG+D/VOknYSYzm2vfgkCWQ6V40=)
2: SEFQEUahukCO25CLynieJYFwZgg.roa (hash: X7nkM3WeHmcxHA7JwfIjXwagYEA1ZAkZsVPWtjQPu3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:fe:04:f9:11:85:92:68:0d:34:09:d3:40:14:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Jun 7 05:00:27 2025 GMT
Not After : Jun 8 05:00:27 2025 GMT
Subject: CN=dd0e9fcf21973d1b844f36cf9921f7565e726e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:5f:a5:78:6a:a7:51:2c:1a:18:b1:d4:1b:
75:69:8d:f0:e4:89:8f:9c:af:78:e6:6d:04:46:e9:
c8:88:ad:78:55:3c:1f:61:83:31:a8:16:75:10:ad:
c1:a3:90:8f:13:0b:c5:f7:38:ab:08:d8:89:66:31:
e2:63:14:bc:e2:5a:fd:cf:24:d1:e1:1d:a7:80:17:
0d:a8:7c:8a:bf:b5:02:34:ca:42:2e:7b:7b:23:5e:
03:d9:5f:00:50:bf:93:39:b1:1b:9c:ae:80:e9:ae:
0e:ff:8a:d0:d3:33:d9:ae:05:8d:62:a1:2d:76:48:
b2:47:34:b9:94:e2:1f:db:15:7a:b3:85:03:66:39:
8d:52:02:0a:eb:42:da:14:2a:79:96:25:37:a9:2c:
e6:2d:d9:5a:bf:53:11:a0:c4:d7:4f:f3:41:d5:65:
d3:30:f0:6b:1c:b5:4e:77:42:99:b4:be:51:e6:98:
58:2d:81:93:3a:54:ef:b3:fe:2c:86:7e:25:a7:50:
e3:e4:ef:5e:d8:99:3c:40:9e:f8:eb:80:e9:c8:62:
03:33:70:d3:04:b6:73:aa:31:42:0a:19:06:d4:4f:
d7:71:3c:3a:f0:95:3a:67:fd:f9:38:74:9c:aa:65:
b7:df:09:07:8c:aa:10:80:19:a8:24:d3:b7:d3:a4:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0E:9F:CF:21:97:3D:1B:84:4F:36:CF:99:21:F7:56:5E:72:6E:5E
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:01:7d:f1:f2:8e:eb:95:2a:f2:5b:1f:45:51:e1:4f:ed:79:
83:f6:d6:8c:6e:e8:ae:b0:be:8d:56:25:7a:0f:3d:21:0b:7b:
8f:00:90:93:04:7f:64:3b:27:13:72:5b:49:88:1a:73:ea:13:
b4:36:ab:8f:56:38:72:94:17:89:45:f8:8b:49:08:a7:81:20:
08:38:7a:17:e6:67:0d:10:fd:10:68:6e:b6:2a:91:8d:ef:60:
28:12:ef:7a:19:63:4f:de:0e:c3:7c:54:75:a2:2c:1f:93:c4:
00:86:bb:87:77:1d:db:cc:4d:34:18:43:97:87:48:e0:7b:f4:
71:68:f3:a0:a9:da:cf:f2:a3:2b:d0:fc:d7:73:af:b9:84:e9:
69:c2:b1:c5:88:7f:9a:cb:8d:72:b6:0c:ba:76:f2:b9:67:66:
02:c0:16:c8:a2:6d:09:73:f0:75:ca:66:25:a1:75:36:fb:eb:
da:69:6d:81:7d:1e:62:84:3e:42:15:ae:f0:a2:5a:90:35:50:
8f:77:bc:b0:1a:8c:f2:89:8d:76:9c:98:64:89:94:85:1d:bf:
6e:7a:e9:c8:76:c3:84:dd:dd:7f:17:57:cd:0f:07:71:d0:79:
2c:87:b7:9c:43:33:fd:19:69:8b:7f:09:45:90:ee:3f:92:10:
e0:e2:60:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:06:40 2025 by rpki-client