Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: GyEaPVIn8/L4ECWMxlo714vyIv7/4Jbbkg5DUJ/1ye4=
Subject key identifier: FA:F3:8A:E5:60:B7:A5:B8:1A:2C:D9:15:2F:06:D0:FB:90:FC:19:EA
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 01974AE91DC04B7479295DB4AF83B6F4F9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 15:01:20 +0000
Manifest this update: Sat 07 Jun 2025 15:01:20 +0000
Manifest next update: Sun 08 Jun 2025 15:01:20 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: bkIZHIVnaWC2/9l/Xik+GJPXVDUfjMvMF7FPANAuxxI=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:1d:c0:4b:74:79:29:5d:b4:af:83:b6:f4:f9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Jun 7 15:01:20 2025 GMT
Not After : Jun 8 15:01:20 2025 GMT
Subject: CN=faf38ae560b7a5b81a2cd9152f06d0fb90fc19ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:15:c0:2c:94:09:5d:9c:97:72:74:2e:16:
d6:be:ca:f5:62:16:d5:4d:ba:0b:3e:22:bb:bf:55:
e2:88:20:6a:ac:ce:1d:84:16:23:53:ec:35:c9:3b:
7d:39:1b:41:c7:d5:18:43:fc:16:bc:05:96:b8:ac:
62:2f:66:0d:b6:53:f9:88:2a:26:41:7f:47:7a:84:
02:e8:e8:24:59:1f:9a:e2:2d:b2:89:37:0d:2c:c9:
db:43:7b:b1:e1:30:39:13:a8:67:87:16:4e:f4:5b:
91:fa:e9:26:75:1d:e5:19:a4:a6:60:4d:72:4f:87:
2a:95:f8:d5:43:b0:55:c1:bf:a5:a0:2c:5f:68:4b:
e7:b8:6a:bc:71:cf:46:fd:6c:d5:81:cc:57:15:a8:
5d:17:55:16:9e:02:8a:3e:84:c2:0c:f0:5c:f0:b2:
80:c1:b8:c6:37:01:b4:d2:a3:59:00:89:dd:79:1a:
2d:e5:7f:8d:4a:a1:22:d7:c7:0e:63:f8:ff:72:fe:
8f:37:f2:3b:75:c9:2f:48:b2:33:7e:fc:8c:59:23:
af:d7:ed:60:86:f6:ad:88:63:ab:f1:b7:70:aa:a8:
72:d4:c1:57:3c:6e:74:fa:70:d8:1f:13:16:1a:c1:
a5:38:43:df:26:d4:33:6a:a6:87:f6:1c:b9:cb:5c:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F3:8A:E5:60:B7:A5:B8:1A:2C:D9:15:2F:06:D0:FB:90:FC:19:EA
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7c:44:33:f1:33:fc:ce:73:a1:87:ba:f8:b0:ff:5f:36:65:
21:f2:60:5d:87:f9:e3:22:f7:69:d9:01:77:c3:3f:f6:99:31:
50:31:a5:79:77:36:89:21:01:9d:12:64:d2:16:03:26:73:ad:
07:3f:c3:dc:f4:10:3f:2b:a2:6b:41:91:bc:d9:64:a3:04:60:
30:49:c9:31:16:2a:ee:e7:15:92:36:6d:03:26:ae:51:7c:58:
10:06:d4:8c:d3:bd:65:76:9b:9c:f7:b5:8a:32:0b:ed:73:13:
98:79:e9:42:09:df:f0:c1:1e:84:f0:fa:25:e4:0a:28:8a:6d:
ba:f0:8d:f3:6c:c4:bd:aa:f2:07:1a:cf:a1:72:20:4b:9d:44:
9f:b6:8f:c6:60:f7:0b:da:72:9b:3a:14:96:7e:d6:9b:71:91:
f9:cc:82:4a:1f:df:d4:d7:96:da:2a:a2:6a:46:c7:b0:d0:f1:
ca:ad:4a:bd:13:a2:eb:e9:e4:aa:aa:bb:d1:36:31:a5:1d:64:
25:cd:13:dc:fc:3f:22:66:7b:ff:6f:8b:84:d5:0e:14:75:43:
b5:64:33:24:bf:2c:fc:35:ef:67:1f:e1:81:70:9b:5e:50:9a:
fa:68:32:95:42:f6:3b:55:be:07:c7:a7:d2:50:27:91:cd:61:
9f:31:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:30:04 2025 by rpki-client