Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: 2TaWE3HpDMeQ6gohbXmOyQCdimdX8OmEYXAQyaqiEl4=
Subject key identifier: 25:26:60:C0:54:02:10:14:29:61:5B:BA:87:E5:71:ED:AA:AC:05:C3
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 01974D7C0441A069F88858CC83BB3EECAC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 113E
Signing time: Sun 08 Jun 2025 03:01:02 +0000
Manifest this update: Sun 08 Jun 2025 03:01:02 +0000
Manifest next update: Mon 09 Jun 2025 03:01:02 +0000
Files and hashes: 1: epViL3MVi9bWXcuzA24cAMVu98I.roa (hash: SrcEH3xgjkVSJRtnVeoxwKETukrMGUr8rXBzqe4u9C8=)
2: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: 0JehzA6jPcDPmaw8XkXNLMc7ctC5+IaauwySihoEI44=)
3: t21KiufosQo5FokIl-zuM5q85cQ.roa (hash: ORk8mRTrURZ5LhEnK810DaoqajLoQtqn9GMcGAQKm3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:04:41:a0:69:f8:88:58:cc:83:bb:3e:ec:ac:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Jun 8 03:01:02 2025 GMT
Not After : Jun 9 03:01:02 2025 GMT
Subject: CN=252660c05402101429615bba87e571edaaac05c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:70:8f:54:29:a9:3e:13:6d:ef:eb:fd:aa:
9a:fe:36:68:8e:3c:47:fa:46:8e:77:0f:c8:b7:ae:
db:a2:10:ba:a0:92:9c:33:8e:1f:83:05:66:cc:fc:
7d:3b:71:8e:d1:da:d0:e6:d8:ce:66:e7:56:e7:cb:
05:a1:d4:d0:d5:49:a7:a7:98:56:16:3a:1a:8d:a2:
b1:fb:dc:65:89:19:63:22:69:56:5b:62:96:6e:a0:
15:15:44:27:2a:1e:b0:1c:36:fe:02:cf:cc:47:e5:
7f:b1:cc:3b:01:e2:08:67:84:1e:b4:0e:70:60:e6:
38:70:c2:9a:a2:78:15:cb:45:d2:a0:b5:04:da:0f:
52:c6:2b:35:af:0d:94:d8:f2:8d:5e:65:46:51:25:
24:01:28:9e:c0:67:ad:27:de:66:48:60:59:ec:7c:
bd:2e:15:96:41:3f:86:c7:d0:ce:be:86:c6:15:cd:
96:2f:6f:53:40:bd:a2:81:f8:e7:53:47:2d:60:23:
30:b5:bb:30:f1:9a:f8:7a:37:a2:e7:7a:20:7f:e3:
dc:af:df:94:65:1c:79:89:97:59:3c:61:01:97:77:
8d:6c:f7:4f:6e:3b:13:35:ae:cd:6d:27:95:fc:4a:
f3:20:54:6a:8f:1d:ff:d9:90:90:70:fd:f6:0b:8c:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:26:60:C0:54:02:10:14:29:61:5B:BA:87:E5:71:ED:AA:AC:05:C3
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:c5:30:74:56:c4:73:e1:33:6c:af:05:eb:c4:71:10:99:
c8:3f:1f:6d:36:a7:cf:b9:d9:1d:c2:01:79:63:92:1b:aa:f5:
d4:59:78:ff:d4:dc:87:2d:bd:ad:8b:3e:f1:f8:45:38:e3:c6:
8b:48:4d:75:28:b8:1a:ed:48:57:07:00:4b:95:c1:b2:40:34:
e9:ab:e9:0d:61:59:9f:40:e9:1b:20:ee:be:d5:9b:46:96:25:
f2:9a:cc:e5:80:c9:8b:e3:86:df:e0:58:60:e4:a5:34:36:65:
43:da:e0:76:ec:e5:f9:3d:e4:5e:d0:91:9a:a7:7f:14:99:20:
eb:96:72:db:c0:18:a3:8c:57:13:2d:4c:67:b2:9c:0c:fb:d0:
42:d4:ac:7f:bb:40:f6:9a:6b:3f:a7:65:ba:25:b2:21:6f:ba:
04:7a:fe:61:ed:27:92:b1:d1:87:fd:b4:fc:86:e2:25:d9:5a:
86:8c:65:7e:30:4d:d0:7a:f7:9a:9f:7a:81:45:64:6a:93:c8:
d6:9e:13:fe:c7:0c:6f:56:2a:b0:03:4d:5b:f2:24:c5:10:bd:
3a:ff:26:32:87:32:6f:cd:03:ae:68:1c:ee:ef:a2:10:8c:59:
68:8d:dc:6a:33:f6:50:09:18:11:44:34:9a:90:16:1c:e8:90:
ed:53:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:47:38 2025 by rpki-client