Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: NHd00toTiBqPJu7ytqHraSCGOCoumc0p1Aaz/6j0LPA=
Subject key identifier: 24:7A:75:24:DC:AA:7F:96:2E:85:26:C4:1F:B1:AF:09:9B:C2:A0:6E
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 01974AB1C37C2BE0883CA421CAC8E96FADBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 14:00:53 +0000
Manifest this update: Sat 07 Jun 2025 14:00:53 +0000
Manifest next update: Sun 08 Jun 2025 14:00:53 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: WvIReu6Kf3VeSvmbGf1X6huakBfxkbT8Ko3pCQDCu8E=)
2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:c3:7c:2b:e0:88:3c:a4:21:ca:c8:e9:6f:ad:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Jun 7 14:00:53 2025 GMT
Not After : Jun 8 14:00:53 2025 GMT
Subject: CN=247a7524dcaa7f962e8526c41fb1af099bc2a06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:aa:36:ef:7c:c6:7f:08:e6:97:12:ee:06:
44:bd:b7:ea:8a:dc:83:97:b6:3c:df:e3:0a:cc:3a:
2f:6f:be:c7:02:01:c0:63:26:44:ec:88:07:42:ff:
b8:a5:f1:49:b0:89:0f:af:50:8b:33:24:12:66:e4:
f2:9d:ec:d7:7f:71:3e:89:ab:c1:b3:91:26:47:6a:
0b:fa:11:16:a3:15:df:13:cf:c2:35:bc:64:e6:43:
2f:2c:97:16:4a:d9:d5:79:5b:2b:8c:de:ca:b5:41:
71:8e:29:91:a9:ad:6d:a0:f0:b2:aa:f8:fb:2c:f7:
85:5e:a4:af:50:3b:f0:3f:30:35:3a:52:ad:55:83:
ff:46:d4:d7:32:57:ee:1a:bd:35:7d:8e:9a:50:17:
c7:30:b8:22:f3:0d:36:06:8c:ef:18:7a:da:4f:c4:
20:d2:25:33:e3:68:fd:75:2b:db:74:7a:86:de:b1:
13:d2:9c:c1:78:9e:74:9b:17:3f:03:c9:bc:dc:03:
bb:8b:d5:aa:74:94:a3:70:73:35:66:62:63:a2:7e:
6d:d8:99:ae:7a:b6:65:fa:e4:8f:aa:ca:6a:36:4c:
e5:02:e0:53:11:bc:ab:d3:28:c5:67:71:94:9a:8e:
0e:4a:76:2b:13:2b:55:77:7d:3b:f1:16:54:c4:5b:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7A:75:24:DC:AA:7F:96:2E:85:26:C4:1F:B1:AF:09:9B:C2:A0:6E
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7b:0b:d3:a1:de:6c:32:dd:52:5f:7d:b0:1d:03:4c:33:3b:
80:9e:c3:86:0a:ed:38:eb:1f:49:98:c7:48:a4:e0:f3:f5:05:
1b:1d:10:8e:61:94:e7:0d:ff:02:c9:8c:19:e5:41:f6:d5:a7:
bd:17:a3:85:75:11:df:36:df:54:3b:a9:d6:7b:2c:19:62:91:
3a:eb:41:d1:06:52:49:89:08:9c:3d:0a:eb:d6:90:c6:17:4b:
11:4f:24:c0:88:90:16:0f:a5:37:a1:66:4d:64:fc:66:29:ff:
33:15:57:c2:33:a1:7f:82:b7:e2:48:de:eb:47:c7:23:63:b4:
89:04:ad:18:a9:23:b7:ad:46:c5:59:1d:1d:60:ab:d6:d1:dd:
d1:ed:24:42:9f:20:7d:5d:5a:55:9b:79:c0:b8:99:ae:e0:e7:
48:d4:e2:2f:05:0b:d8:ed:1a:11:6b:22:56:d9:af:2d:84:b7:
20:92:e1:9d:7a:ba:05:cf:40:d4:4a:3c:04:ac:f8:42:75:bd:
fb:0f:ab:b4:e1:13:94:9a:ed:bb:2b:ba:96:e3:82:9d:36:d3:
80:08:bf:33:a8:df:cb:67:cf:77:22:e5:8e:4a:4d:6f:30:8d:
31:26:33:5f:f2:f4:d9:57:be:7c:08:f1:39:78:9c:39:36:c6:
d8:dc:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:53:54 2025 by rpki-client