Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
File: oLalsaFMhtTPtGxOhuzUBmgEzJA.mft (raw, json)
Hash identifier: q0fZdfqjRY8YensYzy6NwYqIDWDE430L+uOpNtWiR9M=
Subject key identifier: 07:98:9A:AC:2F:E4:82:80:6E:75:81:44:B4:6D:1B:4C:80:43:C5:7B
Authority key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
Certificate issuer: /CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Certificate serial: 019749315347B5ED44E4FBB500249857F322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
Manifest number: 0598
Signing time: Sat 07 Jun 2025 07:00:58 +0000
Manifest this update: Sat 07 Jun 2025 07:00:58 +0000
Manifest next update: Sun 08 Jun 2025 07:00:58 +0000
Files and hashes: 1: MCk_wjcNWplBl8XuQ-Q-tXaOPdg.roa (hash: FrFfJHN2MqG7rUNbBMB2RUeLHgQ0eftZ7IS2VaSzx58=)
2: oLalsaFMhtTPtGxOhuzUBmgEzJA.crl (hash: QDqPVGqtCWoDv8BHjxN9aoLX7yBeIfKidkCsXCF0WvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:53:47:b5:ed:44:e4:fb:b5:00:24:98:57:f3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Validity
Not Before: Jun 7 07:00:58 2025 GMT
Not After : Jun 8 07:00:58 2025 GMT
Subject: CN=07989aac2fe482806e758144b46d1b4c8043c57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:ff:9c:3a:ce:42:e4:96:63:66:68:bb:94:
f0:4b:a4:43:12:1e:63:66:0a:ae:33:c4:8a:38:93:
85:25:82:df:b5:2c:df:37:23:9a:7e:78:58:08:84:
ea:08:e1:29:e8:c1:1d:bd:f6:4e:09:39:c2:a0:38:
b8:0d:84:f7:55:e4:81:6e:e8:73:63:36:28:7a:5a:
9a:08:fc:aa:82:c9:03:ed:ee:e3:28:0c:1e:18:2c:
ad:cd:98:59:8c:fe:c3:b9:fd:cc:85:8d:9a:36:7c:
51:55:a0:86:ce:89:c9:4e:b9:f9:2f:b4:d8:f8:a2:
31:4e:22:84:ac:17:c8:ec:86:9f:00:10:18:77:d5:
e3:69:0f:81:e6:54:7f:50:22:31:be:67:94:43:26:
b9:a8:6f:ec:77:35:a2:c6:29:37:a7:7d:01:75:60:
7f:25:6f:82:ca:62:9b:77:c0:14:56:d7:1d:3e:b7:
73:09:29:ec:a9:ae:f3:01:8f:d5:b6:32:d0:03:16:
4e:05:eb:f8:ef:ee:f1:a1:a8:cf:b7:aa:a2:53:29:
d0:8c:a8:ce:cc:7d:2d:3d:c1:39:d0:78:a5:55:59:
a0:63:4a:16:51:81:c8:e6:f2:2e:39:75:1b:78:e1:
05:fc:bf:fe:97:f1:64:d4:13:42:eb:5e:5e:fe:b6:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:9A:AC:2F:E4:82:80:6E:75:81:44:B4:6D:1B:4C:80:43:C5:7B
X509v3 Authority Key Identifier:
keyid:A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f1:40:c7:ad:ed:2b:eb:45:f4:ff:e2:28:3b:74:1f:16:33:
31:47:f1:7c:a7:ec:89:81:a3:af:0e:01:7c:fc:cb:6c:72:fe:
09:b4:04:f8:21:86:4d:c1:09:42:c5:19:08:f1:88:59:a1:ba:
12:b8:d9:da:62:b6:23:01:9c:e4:7c:99:5c:e9:17:58:f1:9d:
86:22:df:a3:4a:c7:49:67:9b:68:55:40:28:ae:6c:c9:f9:48:
00:31:6d:85:c4:8c:2c:61:f1:4d:a3:b2:dd:3f:c6:bc:13:4c:
db:00:4e:62:d8:1b:bd:08:9d:a4:d5:e0:66:d5:ba:85:dc:ea:
51:0d:d5:b2:f6:b8:87:61:0a:9c:ac:fa:84:a4:f2:f6:c1:ec:
ca:b9:15:07:b4:60:32:27:11:14:55:d6:83:16:67:4b:4f:c5:
e3:c5:53:62:48:e7:69:42:39:22:99:29:5b:8a:cf:86:75:93:
68:3c:8b:2e:21:ca:9c:17:ed:a4:2a:f1:8b:15:ab:c5:f4:db:
b7:a5:6e:b1:2a:3b:6c:ae:a3:57:b7:e6:bb:96:0e:f4:fb:16:
b1:48:ff:19:d7:d7:1c:2b:e5:6c:ce:fb:b8:ad:65:81:65:6a:
b1:db:16:be:b4:48:be:a2:46:80:fd:f5:45:e8:d2:32:f8:8e:
65:00:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:30:20 2025 by rpki-client