Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: RxuTy2/13doASa2tosvj3JOGDuvTK1abFtcUXypyw54=
Subject key identifier: 50:86:D9:74:D1:BA:79:21:53:FB:2F:28:D9:01:C3:8C:9F:7D:A7:F6
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 01993612CDD8D14C6FF909ABEA79D0403D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0D61
Signing time: Thu 11 Sep 2025 00:00:25 +0000
Manifest this update: Thu 11 Sep 2025 00:00:25 +0000
Manifest next update: Fri 12 Sep 2025 00:00:25 +0000
Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: wI2oyGD3ZAK9Wy0L5wTyaqOH9bYiC/ywhOjSPQh9gWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:cd:d8:d1:4c:6f:f9:09:ab:ea:79:d0:40:3d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Sep 11 00:00:25 2025 GMT
Not After : Sep 12 00:00:25 2025 GMT
Subject: CN=5086d974d1ba792153fb2f28d901c38c9f7da7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:37:03:41:28:54:5b:45:24:05:e0:30:38:
f0:a3:fb:55:b4:03:7b:a6:70:63:39:6a:7a:aa:0c:
62:b0:14:91:14:c7:5d:b6:51:f0:5d:b1:be:2d:c1:
72:93:f5:f7:63:d8:cd:90:e4:12:26:69:11:50:0d:
90:81:99:53:32:35:65:48:e1:11:1f:6e:d2:6a:96:
1b:e0:03:c9:c6:f2:31:24:8a:5f:54:83:cb:0c:71:
6d:fe:5f:f1:46:08:6b:5e:54:ec:56:58:18:e2:80:
1e:62:27:98:8c:60:f6:b5:16:65:b6:ff:84:c3:f4:
62:5f:45:22:1b:02:47:ed:3d:70:c1:9c:06:fd:f6:
97:e5:24:23:66:da:97:81:37:ec:5a:14:41:39:32:
56:a2:b3:37:96:bf:2e:e5:48:16:7d:3e:dd:2f:0d:
bf:ec:77:8e:93:57:e6:95:93:98:47:12:44:3d:4f:
31:39:9a:d2:2e:e2:f3:25:73:57:2e:16:e1:22:93:
07:a0:71:25:85:d5:5f:33:5a:c6:a9:0f:9e:09:bd:
f5:de:70:7c:f8:d6:a4:1d:d8:e2:43:aa:00:80:c7:
cd:b3:a2:4f:3b:13:2b:c3:ab:80:08:a4:d0:a1:70:
ee:31:e3:59:e8:a2:06:e6:37:08:c9:fc:60:23:5d:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:86:D9:74:D1:BA:79:21:53:FB:2F:28:D9:01:C3:8C:9F:7D:A7:F6
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e5:98:88:52:59:c6:35:c4:53:fc:70:5f:88:2c:5b:7e:12:
67:0b:77:d2:1b:af:cc:fd:2d:a0:4a:b4:8e:e4:bb:00:5d:2e:
f4:70:47:aa:2a:8b:c8:16:e2:e8:60:da:7c:e5:8a:90:0b:c8:
8e:b4:06:26:b2:14:30:d0:a3:ba:32:3c:f5:ae:92:9d:ae:cc:
a6:1b:48:c7:10:1b:c1:6b:fd:62:be:4f:30:1d:5f:5c:69:cb:
58:c7:08:6b:db:4b:97:1f:d6:b7:37:f0:e6:e8:b7:0d:09:e9:
6a:52:35:eb:14:90:df:15:72:47:e3:0c:e6:13:aa:f9:1d:ea:
44:a1:f2:d7:10:93:12:6d:a5:10:08:12:11:73:39:47:67:ec:
8b:93:f2:38:78:34:85:22:34:c0:e5:af:ca:70:0a:88:be:3c:
44:88:fb:9d:e0:4b:56:08:04:bf:15:0f:84:9b:23:6c:68:15:
c6:a6:99:94:e7:68:f3:ce:4f:89:fa:6e:03:8b:3d:6e:dd:76:
75:d0:01:12:e7:8a:f5:ee:55:93:74:e1:3e:61:39:38:d4:22:
17:51:c6:c5:7b:48:91:2f:a2:be:40:01:07:5b:6b:97:5d:42:
c6:28:7b:53:20:c7:f0:cf:98:f5:97:50:17:4d:3a:71:10:58:
cf:4f:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:44:52 2025 by rpki-client