Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: zPVcs9At6suWZ0KkHS0kXJKKNS67vf083/6XYF5mTtw=
Subject key identifier: 2D:84:C8:DD:4A:F4:FB:9E:F8:36:65:AC:35:55:CA:47:F4:EB:E1:8C
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 01974F6A1C005764A77B49C3FF8F3B947D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 12:00:43 +0000
Manifest this update: Sun 08 Jun 2025 12:00:43 +0000
Manifest next update: Mon 09 Jun 2025 12:00:43 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: /t5H0v7Dmex7TQ2XfExI3401Y4WjyMViNHg5q7bfijI=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:1c:00:57:64:a7:7b:49:c3:ff:8f:3b:94:7d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Jun 8 12:00:43 2025 GMT
Not After : Jun 9 12:00:43 2025 GMT
Subject: CN=2d84c8dd4af4fb9ef83665ac3555ca47f4ebe18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:47:ac:9b:b8:55:82:62:01:96:90:65:2f:57:
50:e8:2d:61:0c:12:7b:cf:99:03:0f:4c:c9:02:ae:
e5:9e:b1:94:32:59:76:90:60:fd:40:64:12:16:83:
11:ec:5c:09:61:73:4b:55:89:f4:8f:47:0d:e1:a3:
3e:d4:68:e1:f8:d7:87:9c:3b:d3:42:5d:7d:f5:23:
3f:ba:13:60:c6:ef:b1:75:c5:52:8a:20:60:bf:92:
f3:8a:5d:84:a0:45:1f:fc:63:6d:cf:65:dc:e4:13:
41:cf:5a:ce:a8:ee:60:89:91:3c:ab:fd:70:bd:35:
36:bd:67:96:2a:bc:7a:e0:9f:e5:0f:43:f4:e9:35:
a3:07:ed:e9:40:f0:49:1f:d8:c8:e4:9c:9c:1d:1a:
a6:e3:29:63:31:47:77:d7:75:f9:9c:31:00:5f:a5:
6c:5a:f1:07:6e:84:fb:a5:ac:a1:e4:b1:91:39:bf:
78:86:bd:5d:cf:71:07:27:64:5e:bb:e6:9a:f3:e3:
17:f2:9d:00:3a:6e:50:fb:73:90:61:17:7c:5d:e9:
69:8c:40:29:38:88:6a:b3:f1:b8:b9:7d:60:48:d7:
b3:be:8c:26:0a:ee:78:93:b7:bc:64:af:9f:65:e0:
cb:c9:e0:ac:b1:67:7a:e7:1f:fa:7d:e0:a2:7d:fd:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:C8:DD:4A:F4:FB:9E:F8:36:65:AC:35:55:CA:47:F4:EB:E1:8C
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7d:59:77:13:d3:8d:ee:61:25:1d:b7:89:37:e5:51:fb:25:
3b:22:37:c2:d0:8d:38:92:8a:11:f9:6c:24:eb:b8:48:7d:53:
a5:3b:3c:34:bf:be:2c:53:dd:56:3c:09:c4:2b:0f:42:92:5f:
53:a0:c8:8b:2e:a2:89:fd:c5:93:65:22:d9:7e:4b:ff:83:c7:
f5:3b:6d:5e:82:1e:ec:90:9a:79:0a:0b:ed:e4:93:4a:d7:37:
40:24:a0:ae:bc:47:83:a6:a9:e1:57:72:ca:06:0c:01:15:35:
3e:5d:7c:ed:75:56:69:5b:65:56:0c:93:9e:1d:d7:66:6a:52:
1f:53:6d:5e:fb:7e:55:eb:47:9a:7d:50:32:81:d0:1e:68:e5:
b3:e5:92:e2:62:10:7f:1e:05:83:0c:e4:3d:29:8c:47:b7:ce:
f0:a7:1b:de:6b:1b:83:8e:72:9e:6c:ff:a4:d7:21:2b:ba:ab:
62:3a:b8:8e:c8:f5:57:26:85:45:3b:c6:89:01:d2:59:fb:51:
3e:93:af:57:fc:70:7f:c6:83:71:75:90:2f:21:8b:e5:40:89:
68:cf:df:57:ab:53:b1:66:37:b0:d3:72:f2:31:f9:dc:c9:ee:
34:07:c4:20:6a:86:b3:8f:d3:a1:17:42:b4:44:c6:b3:ef:0c:
02:cb:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:26:34 2025 by rpki-client