Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: 1eZBl4QX9IZCT+9SXZeZSU/Irx3bejwTs3YKdLrJxuE=
Subject key identifier: DE:BF:32:CD:68:04:B9:F6:98:D5:F8:04:32:92:0F:B2:41:38:2C:30
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 01975A5B77DE641909D45CC54B7977F86C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0DF1
Signing time: Tue 10 Jun 2025 15:00:33 +0000
Manifest this update: Tue 10 Jun 2025 15:00:33 +0000
Manifest next update: Wed 11 Jun 2025 15:00:33 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: oBzVMvvgEOkuZCAUR/L2urhaG2kTC+eN9Sb8WmwSTik=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5b:77:de:64:19:09:d4:5c:c5:4b:79:77:f8:6c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jun 10 15:00:33 2025 GMT
Not After : Jun 11 15:00:33 2025 GMT
Subject: CN=debf32cd6804b9f698d5f80432920fb241382c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:4a:92:71:4f:a9:cb:bd:02:e8:9c:7c:56:
e7:63:61:26:3d:11:9e:e4:b2:26:13:7d:96:83:a0:
73:66:99:64:95:6b:f9:f6:ef:ad:bc:b1:92:b8:03:
6f:62:52:02:73:9f:34:91:49:f1:d4:71:65:a5:3c:
40:6c:73:c1:fe:aa:03:28:f8:35:b8:12:11:cf:e5:
59:cd:40:af:2f:e7:be:98:f0:a8:62:a2:ca:23:66:
29:cd:b4:34:9d:ab:66:a8:53:71:fc:9d:cc:5a:86:
44:82:64:89:de:c0:ec:34:b3:5a:3b:98:bc:0d:4b:
f9:24:01:fa:9d:54:3e:87:8a:4a:b6:2e:78:bb:13:
29:85:15:30:53:ef:33:02:05:59:b6:c9:14:4b:da:
f7:0e:e8:0b:92:02:2a:5a:9c:2b:45:5f:9b:57:95:
37:a9:97:b0:7b:98:16:17:a6:8a:e4:2f:41:67:b1:
fc:18:19:35:a7:cf:52:0e:01:e6:11:c4:b4:fc:d6:
f1:d5:fe:e8:35:d6:41:56:91:c3:26:00:de:bd:81:
71:ac:9d:b7:60:a0:c0:85:66:ff:34:79:53:50:9d:
29:20:6b:37:af:64:55:6a:0d:23:b9:a2:50:87:ca:
65:42:99:55:45:23:7d:0e:18:53:06:21:1d:c9:aa:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:32:CD:68:04:B9:F6:98:D5:F8:04:32:92:0F:B2:41:38:2C:30
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6f:d9:1f:44:ca:18:d7:3a:8b:c3:68:25:72:a9:f0:8c:06:
c1:ff:c7:6a:c3:be:ac:4c:58:6f:34:1d:b4:eb:e5:a2:fb:51:
38:0b:62:88:43:26:bb:65:a1:44:08:d1:27:3e:cf:b2:09:3d:
26:91:6a:93:a8:9e:81:d6:05:cb:9c:86:e0:3e:d2:08:56:29:
0c:00:7f:2a:f6:17:7a:5c:06:2e:66:8e:c0:47:15:69:97:a6:
f4:25:d4:fa:32:dc:d8:ee:3c:4e:6b:d8:a3:51:73:6b:8e:06:
03:02:fb:2c:db:23:a0:4f:de:ff:a3:7f:0f:bd:33:46:66:d1:
c2:f4:fe:ad:94:3c:ed:9a:61:d6:24:e2:b5:c1:67:e4:f8:1c:
0e:4e:a2:ca:82:e7:68:d0:5b:a8:db:e4:fa:a0:43:a7:ef:e3:
0c:22:e5:61:be:c0:5e:ad:f1:e6:be:59:09:c4:8e:23:7f:c8:
99:7a:53:dd:ef:0f:92:dc:a1:77:4a:0e:63:8a:77:df:0d:bd:
07:60:d8:12:2a:81:39:c2:bd:9b:45:e4:5a:36:ee:92:00:69:
82:1d:32:98:0e:89:32:37:2a:83:46:87:09:a9:c0:0b:97:3e:
35:cb:4b:14:60:63:02:e6:34:a1:88:59:dd:37:65:d5:c3:b5:
ad:3d:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:45:55 2025 by rpki-client