Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
File: oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json)
Hash identifier: oMmgsrCxYsmlj8F6zwXHIPgMc3+qfEeHPvWenCztx/c=
Subject key identifier: 79:97:D5:7D:0D:66:CF:D5:36:D7:A0:E2:78:6C:E7:C2:02:C4:14:6D
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial: 01976AE18AAC9FA67EB1049870C7B9536617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
Manifest number: 1028
Signing time: Fri 13 Jun 2025 20:00:55 +0000
Manifest this update: Fri 13 Jun 2025 20:00:55 +0000
Manifest next update: Sat 14 Jun 2025 20:00:55 +0000
Files and hashes: 1: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (hash: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=)
2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: gVjq02BpBWz2V4BJ/htzn0RV4NLFU8yakOJO5CbXNMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:e1:8a:ac:9f:a6:7e:b1:04:98:70:c7:b9:53:66:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Validity
Not Before: Jun 13 20:00:55 2025 GMT
Not After : Jun 14 20:00:55 2025 GMT
Subject: CN=7997d57d0d66cfd536d7a0e2786ce7c202c4146d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:71:14:53:00:a8:1d:5d:52:ef:2f:11:cb:
1d:f3:05:af:05:ff:97:fa:1d:bc:31:5e:b6:fe:2a:
ef:6e:c6:97:9f:b5:dd:12:bf:62:13:a0:fa:a8:2c:
d0:14:75:7c:ac:aa:d5:1a:98:96:94:05:90:0d:e6:
17:aa:f6:2f:eb:f3:a6:88:54:4d:9b:e4:1a:93:7a:
ea:7f:98:f9:66:24:c9:52:86:90:74:26:22:88:89:
2a:30:68:19:49:89:32:b7:ed:f5:e6:1e:b1:e4:41:
99:3d:6f:9b:4b:11:fc:10:46:39:0f:5b:3e:0d:9d:
58:fc:b0:0d:03:bb:30:a4:11:02:33:d1:ae:46:c3:
8c:48:d1:9a:8f:59:5f:2b:04:6a:dd:97:02:60:e5:
9c:af:7d:54:12:7c:94:c8:50:5f:4a:f3:fc:99:dd:
ae:90:47:44:d9:cd:63:40:cc:d3:5f:c0:50:a8:3d:
78:a7:68:03:46:52:dc:bc:9b:61:d1:07:59:1c:97:
2f:69:ce:85:33:65:8f:52:bb:7f:f2:60:5b:ea:53:
3f:ad:a5:96:2c:27:47:6d:a2:6e:1d:5f:8c:c0:1c:
ea:06:b8:55:e7:53:a9:77:6a:e1:9d:16:8f:8e:18:
90:6d:94:f6:1a:a9:d7:77:d5:bd:af:0d:49:be:1a:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:97:D5:7D:0D:66:CF:D5:36:D7:A0:E2:78:6C:E7:C2:02:C4:14:6D
X509v3 Authority Key Identifier:
keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:cb:b3:f1:1f:52:1c:c1:9a:1b:b3:90:d8:fa:bf:dd:23:82:
e2:c3:58:9b:84:5a:aa:b8:13:5c:9e:e8:c5:58:ea:1b:aa:e2:
8b:2c:32:ba:09:cd:d1:ce:e5:2c:a6:55:85:26:8e:b4:9d:aa:
2e:b8:53:c1:16:3b:40:fd:1e:3c:57:c5:e9:2c:f6:0f:71:dc:
0d:ef:93:f5:e1:a2:ef:ea:af:df:ce:15:be:36:b1:ef:b4:14:
ae:b2:c5:f5:07:64:a1:db:f8:f9:53:60:2d:05:59:bb:53:cf:
67:88:4e:25:76:b0:6e:13:6a:ba:43:0a:73:34:1d:d5:09:92:
a0:c5:b1:78:6f:a4:74:29:08:a5:ad:2c:ab:83:57:55:9c:97:
b0:76:45:18:b3:56:60:1d:2d:6f:75:b1:6c:a7:6d:ba:c4:c9:
4c:50:91:69:20:b7:ee:93:56:48:b4:f8:3f:90:52:af:13:89:
a2:92:9d:0e:70:c2:c7:55:7f:b1:fd:56:e6:d4:c2:82:70:cc:
d8:d2:c2:dc:f2:d2:d5:29:34:2f:12:42:d4:45:bc:f2:3a:4a:
9d:cf:3a:0e:d8:7a:81:c4:84:42:d8:e9:00:d5:31:50:ac:79:
99:12:b1:e0:f2:20:82:ee:ba:e1:66:2e:a4:06:f9:aa:0d:d7:
5b:2b:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:58:35 2025 by rpki-client