Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: +Wee4It5wrLBnZokfXWF9GQ1mZbDvmKpjng0X9z4Xyg=
Subject key identifier: 3E:F3:6C:0A:D9:82:F4:22:03:06:FD:17:69:E1:E0:83:29:9C:47:0E
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 01975EA62BA282EB6981864733AB078914CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 11:00:37 +0000
Manifest this update: Wed 11 Jun 2025 11:00:37 +0000
Manifest next update: Thu 12 Jun 2025 11:00:37 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: h9pPBtiFAD7HJb5fT1mA4WNNXp+TX/QKwzud5bXRNgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a6:2b:a2:82:eb:69:81:86:47:33:ab:07:89:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jun 11 11:00:37 2025 GMT
Not After : Jun 12 11:00:37 2025 GMT
Subject: CN=3ef36c0ad982f4220306fd1769e1e083299c470e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:8c:1a:5b:4f:b7:45:c9:0b:58:e3:9d:a9:
e8:e1:d7:04:de:b5:4f:73:b9:7c:b9:03:1f:96:62:
5c:d9:5d:da:3d:9d:10:0c:dc:cc:59:f0:24:c6:f0:
95:16:f4:c8:01:85:cc:99:60:44:7a:c3:c2:83:fb:
06:24:ca:a7:6a:ea:e3:e8:1f:6f:a4:76:f9:50:1b:
49:06:90:c6:91:27:d5:a8:9b:b6:0a:85:20:2b:1b:
62:56:74:e9:e5:68:6c:c4:6b:a6:f3:e4:4e:11:02:
bf:b1:3e:dd:92:ef:56:24:a3:0e:d7:a5:b9:9a:5a:
c1:4f:10:81:3b:d2:5b:6d:cb:8f:e3:29:0e:ea:7c:
d4:22:72:31:98:10:6f:78:29:c4:67:ad:5c:b3:a3:
2c:1b:55:da:81:da:5d:02:0e:1e:40:87:04:36:49:
0d:24:f5:d5:ca:dc:57:d8:2a:22:2c:61:c3:09:97:
f9:b0:5d:03:e1:62:a4:87:c6:cb:43:4e:01:03:bd:
81:48:64:e9:6e:a7:37:42:4a:5c:3a:9e:83:9c:92:
70:03:26:db:8b:ba:9b:0b:35:7f:43:5a:8d:4e:8e:
46:5b:14:ec:9f:8d:55:0c:0e:8c:ba:b6:56:ad:7a:
5e:43:9c:aa:e4:3e:07:76:57:f5:38:d4:cf:17:6b:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:6C:0A:D9:82:F4:22:03:06:FD:17:69:E1:E0:83:29:9C:47:0E
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:32:01:24:cc:5a:55:b0:bc:8a:37:2c:2b:30:95:e6:f2:05:
af:04:4c:83:95:8c:ef:47:06:c3:fe:51:45:c1:8a:b2:91:de:
f4:e6:6c:ee:cd:86:a0:bf:15:5c:67:f2:e3:f4:2f:eb:71:2f:
db:b4:b1:8c:04:c2:14:9b:eb:0a:1d:5d:52:fe:dc:f3:77:01:
72:30:22:91:46:5b:93:02:03:0e:89:59:eb:b7:f1:7d:6e:e9:
4e:ca:da:5c:8f:74:8a:d0:f2:ba:ec:c0:eb:57:a2:3d:ba:3a:
ae:9e:97:8a:38:84:62:b6:15:12:84:f5:39:f4:66:a1:68:94:
70:5a:2a:ef:d4:55:40:06:45:cc:98:9d:81:b1:b7:15:5c:aa:
1b:b0:0e:58:ba:13:e0:b9:bb:cc:58:98:d7:29:7c:21:be:81:
9c:64:ed:cc:14:0b:ed:2d:7c:d8:e0:5a:4f:49:7f:40:87:97:
8f:37:3b:6b:b3:68:39:16:50:54:2c:b9:da:8b:72:19:16:89:
9d:58:0e:a4:b3:fa:02:fc:1e:db:48:1f:43:dc:06:f0:2a:c8:
fc:55:a9:70:bf:6a:7e:ed:60:f3:1e:36:e8:d7:20:76:8f:03:
40:5f:f0:4f:2e:70:d0:33:23:98:0f:f2:a7:d9:de:2a:1e:04:
ee:7c:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:01:52 2025 by rpki-client