
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: 5+p7ph9u2hSNe+fEwXcMWQ5Dv/NCTsBAX3kIYLf7cDc=
Subject key identifier: B6:FD:3F:97:01:56:15:93:65:69:FD:9F:22:07:8D:F6:B7:DC:39:B4
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 01974AB190A8E578D60151B42E343264CE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 150D
Signing time: Sat 07 Jun 2025 14:00:40 +0000
Manifest this update: Sat 07 Jun 2025 14:00:40 +0000
Manifest next update: Sun 08 Jun 2025 14:00:40 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: 1cp2toE+s1rzmT4Sfbc1XZhTjJJDXv24oZ1oDk6kbp8=)
2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:90:a8:e5:78:d6:01:51:b4:2e:34:32:64:ce:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Jun 7 14:00:40 2025 GMT
Not After : Jun 8 14:00:40 2025 GMT
Subject: CN=b6fd3f97015615936569fd9f22078df6b7dc39b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:14:ff:5c:83:4a:0d:6b:df:f8:74:b0:61:
eb:30:7e:f7:ac:89:c9:93:e4:43:c7:41:0c:11:af:
d4:90:5d:b1:e5:c7:dd:e8:05:63:0b:d8:38:5e:96:
3d:c7:b8:cf:de:ab:18:07:fd:c7:0f:4d:06:33:ea:
a7:90:4e:60:ff:84:8f:92:d8:20:70:dc:9a:00:4e:
9e:44:90:57:f8:4c:98:67:9f:fc:28:2c:9e:97:47:
61:bc:fe:d7:80:44:78:e8:c9:80:74:4a:9d:de:bf:
ef:b4:f4:47:cc:87:e0:b8:b9:9e:04:b4:29:bf:a4:
43:bc:0b:0b:eb:56:57:0e:0d:af:15:d3:24:d7:98:
da:91:dc:86:63:fe:78:12:15:07:b6:a3:b5:4d:67:
f8:1f:a9:5e:b5:18:87:6b:35:4d:8e:f7:59:ef:85:
b8:5e:63:5f:94:a2:90:f5:32:50:0c:7f:cd:0b:fe:
12:7f:e2:e2:aa:f1:46:db:18:4f:ae:0c:e4:cc:6d:
56:6e:a5:8c:ea:f3:d7:da:c8:91:b7:3a:35:2e:34:
d2:3f:ce:32:9d:a9:05:84:e1:a6:c3:92:fa:24:f2:
58:87:28:56:50:b2:ff:1d:c5:e1:d5:aa:aa:d8:89:
a7:3f:6f:f4:3e:92:bd:2c:df:82:a7:5c:dc:a8:c0:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:3F:97:01:56:15:93:65:69:FD:9F:22:07:8D:F6:B7:DC:39:B4
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9c:7e:1f:59:8b:62:56:9d:d4:3e:c8:a0:e8:3b:8c:ac:1f:
36:67:cc:f5:0a:5b:19:e4:18:86:69:e7:e0:68:d1:ac:74:26:
56:b7:ce:88:cc:56:26:81:a4:8f:b0:60:62:84:74:56:7c:35:
c7:5d:5c:6b:21:b9:38:a9:7b:5d:2b:b0:1f:a9:de:6e:49:df:
ec:e4:24:61:96:c9:33:15:22:7e:6e:c0:46:db:2a:59:b8:b8:
3c:6d:5e:d8:0d:da:5e:a9:b0:18:66:95:8d:94:9e:52:25:0c:
12:1a:61:6f:02:0a:36:f0:86:70:94:85:ba:5a:bf:48:e7:d3:
cf:34:d6:dc:f3:1c:10:48:8d:97:69:4d:78:67:e8:cb:2e:46:
9a:50:eb:89:76:d2:9f:a9:bb:1e:cd:1f:a5:8d:73:a8:ba:86:
9e:4c:cf:07:20:a2:76:a0:cb:3e:6f:46:78:32:34:9c:e0:e0:
e6:1d:5c:00:b4:4a:d9:23:a1:69:a4:7c:33:23:08:b9:60:e5:
8f:22:8c:ae:48:6f:dd:f2:41:e7:40:3a:27:78:c9:cf:2a:d7:
39:6c:34:b2:72:52:53:7b:61:6b:c2:d2:76:24:df:2b:99:70:
1f:23:20:8d:05:d0:10:a4:c2:79:45:29:4d:d6:73:cf:9e:74:
78:b8:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:04 2025 by rpki-client