Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: RzTzy5+O2Hzkc02KREkztspfnyNYphumJtNrmB9pGY4=
Subject key identifier: 58:98:D9:DC:56:68:8C:82:3E:87:DD:0D:FB:A1:9F:0B:A2:11:6A:8E
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 0197462FEA202C7BE9AABE8A9B0D93FAB770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 0F9F
Signing time: Fri 06 Jun 2025 17:00:34 +0000
Manifest this update: Fri 06 Jun 2025 17:00:34 +0000
Manifest next update: Sat 07 Jun 2025 17:00:34 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: /at82L++tLESJSlMZ+QnlW685j+rSW2HOxfdK/a+6DI=)
2: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (hash: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:ea:20:2c:7b:e9:aa:be:8a:9b:0d:93:fa:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Jun 6 17:00:34 2025 GMT
Not After : Jun 7 17:00:34 2025 GMT
Subject: CN=5898d9dc56688c823e87dd0dfba19f0ba2116a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9b:f5:44:f3:a4:6e:56:b2:9f:a4:74:05:f1:
65:6d:4d:66:a1:9f:7d:8a:29:22:50:08:a4:04:fd:
3e:86:72:87:39:84:67:92:4b:c6:98:7f:39:02:ea:
3d:30:28:60:8d:35:62:b1:6d:bc:39:a8:b1:8b:29:
55:08:3c:5c:e6:96:a3:63:c7:e5:ba:eb:fc:a2:34:
ee:93:e1:d5:38:9c:e6:40:87:1b:ae:51:f5:cc:d7:
21:b1:5c:ac:13:45:73:3e:16:a7:8e:d3:be:5a:ce:
b1:bd:c5:37:39:f7:91:1a:cb:81:fe:5a:ef:5a:da:
4d:8c:30:a5:89:2b:5a:c2:dd:b3:aa:84:cc:90:87:
48:2a:e1:e0:5c:ed:22:f0:c4:6d:c7:61:58:6a:20:
5f:69:77:f8:92:9f:eb:db:c1:96:ac:b1:45:ae:cd:
78:ba:9d:51:c5:63:7c:ea:7a:05:ff:95:b0:1a:1d:
85:7d:5f:47:03:93:9e:e9:e0:e8:37:4d:93:9b:ed:
e0:bd:eb:ab:5a:53:ac:3c:ba:e7:ef:be:7a:14:a7:
06:1b:df:5a:02:f3:48:7b:5c:65:c8:34:85:74:ae:
c1:d7:52:ab:a1:ba:27:49:8f:89:c6:9b:74:bd:13:
a2:5c:3f:0d:76:db:41:3f:44:b6:16:71:c0:b4:8f:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:98:D9:DC:56:68:8C:82:3E:87:DD:0D:FB:A1:9F:0B:A2:11:6A:8E
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:21:10:58:e8:cb:68:3c:1b:0e:bc:70:1c:6a:61:93:22:cc:
9f:50:13:8c:fc:be:2f:6e:17:c0:28:32:15:66:7c:6a:51:88:
42:cd:ed:0d:87:61:04:48:04:06:92:f8:1c:65:c7:e5:16:f7:
d8:ab:09:7f:fd:73:c2:78:1d:fc:b0:57:55:30:33:4d:d2:e3:
12:15:dc:32:4e:28:9d:81:41:f4:7b:8e:c1:8b:b5:dd:7b:f9:
79:19:80:4b:c6:3e:24:1c:14:fb:26:06:39:b8:dc:dd:a3:4c:
ef:61:fe:dc:28:65:29:26:48:4e:6b:14:6f:d1:62:ce:16:c9:
76:35:da:33:bc:6e:5a:d0:a1:0b:48:bf:57:8f:50:b3:5c:a3:
d0:a7:7d:b1:a2:93:ff:7b:c8:5d:f7:56:c7:75:44:a5:fb:e9:
c1:bc:69:fd:dc:ed:89:6e:47:d8:22:6f:44:8d:14:6f:51:15:
a3:07:f6:50:74:cd:dc:12:74:b9:e3:3e:6b:9c:48:5f:25:04:
ce:e3:c2:65:93:fd:4b:f7:80:6c:0d:9e:b0:ef:d6:e4:8d:08:
4d:d0:10:d2:3c:d2:27:1a:3f:dd:64:b1:87:01:64:5c:76:df:
41:c3:f8:28:d0:7a:b3:98:8d:ac:bc:f5:e4:23:e5:75:6c:fc:
9d:5b:e5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:59 2025 by rpki-client