Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File: OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier: cnAXHe8gj52WFhd3UXvzEtX56ct6MZIqvpY7SZ3miQ0=
Subject key identifier: 43:57:B5:7A:48:E2:41:32:49:CA:77:64:03:7B:1B:3A:24:32:8B:E0
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial: 01974A436BC022316081550DF17A058A741A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number: 0A47
Signing time: Sat 07 Jun 2025 12:00:21 +0000
Manifest this update: Sat 07 Jun 2025 12:00:21 +0000
Manifest next update: Sun 08 Jun 2025 12:00:21 +0000
Files and hashes: 1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: q2Qsuj6zJhMpXoYIMZPknkmrZ+fGStqzTiq6yRm0kf4=)
2: ZheJClH79M-pTRLGEsquKEEr6pM.roa (hash: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6b:c0:22:31:60:81:55:0d:f1:7a:05:8a:74:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Validity
Not Before: Jun 7 12:00:21 2025 GMT
Not After : Jun 8 12:00:21 2025 GMT
Subject: CN=4357b57a48e2413249ca7764037b1b3a24328be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:1d:7e:d8:dc:bc:2a:14:e7:ff:fb:0e:be:
22:b9:f8:61:3b:f0:c9:a1:2e:92:2d:bb:bb:56:e3:
a3:9f:2c:21:07:66:46:08:fa:1e:2f:9c:37:45:67:
b6:6c:b5:cf:bf:a9:29:c6:9f:00:4d:79:08:09:15:
40:dd:f6:fb:5b:a9:ed:19:c6:94:e4:00:3b:c8:5a:
b4:58:11:6c:e1:45:8a:3c:d8:ce:97:99:6f:29:4c:
86:45:d0:2f:6e:73:4a:72:a5:c8:80:5e:a5:47:d9:
36:b8:bb:37:a0:9c:5d:dd:e3:4c:3f:77:05:f3:9d:
23:94:41:a8:48:24:60:51:b1:a8:86:0a:f0:21:63:
33:55:fc:fc:df:da:7f:57:07:dd:30:5c:14:ff:42:
a2:49:f1:64:c1:ba:2d:0d:1f:a5:b6:fd:68:ab:85:
9b:c2:48:49:ff:8b:5a:a3:c1:b1:82:cf:e4:7c:36:
3c:95:55:e6:60:a3:3e:32:84:3d:78:16:90:26:3d:
0e:c4:be:29:3e:ae:e2:42:dd:4e:f6:8f:2d:aa:6c:
bd:ee:22:9f:28:b5:05:a3:4a:e8:be:d7:1f:54:c2:
a9:3f:c1:72:b7:a7:e0:f7:f3:a1:9f:62:3d:c4:d5:
32:00:53:7b:65:38:77:98:41:7f:71:d3:93:24:a0:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:57:B5:7A:48:E2:41:32:49:CA:77:64:03:7B:1B:3A:24:32:8B:E0
X509v3 Authority Key Identifier:
keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ef:01:43:6c:66:8b:37:f3:bb:b0:28:5f:62:b0:81:45:48:
0e:43:3e:67:aa:70:c6:87:ef:ab:31:8f:eb:51:76:86:af:ba:
d8:55:72:78:46:64:41:7d:b7:4c:54:5c:29:7c:72:4d:c9:82:
b5:7a:aa:4f:bd:c7:5b:1a:b4:5b:0d:76:2f:96:af:6c:05:18:
a6:5f:67:17:52:75:05:f6:90:6d:d1:e3:4f:5a:f2:48:5f:c9:
54:92:72:5e:39:7d:4d:a6:30:bd:34:d9:3d:42:a6:bc:57:d9:
8e:83:23:3c:71:7c:d5:fd:33:4b:be:0e:ea:7e:19:95:76:9d:
7a:ca:68:51:10:de:33:a5:0c:a3:e2:36:1a:16:c7:f0:0a:5d:
b5:ab:e7:9f:cd:a0:14:f6:db:03:63:ca:7f:3b:48:b2:d2:22:
b8:25:98:12:3b:52:12:66:43:8f:49:7a:89:02:08:9a:bd:a4:
ec:bc:90:ce:76:f4:0c:9e:85:13:3a:08:20:47:a6:a0:62:bf:
41:0c:d1:6e:7f:a1:3d:18:c0:58:82:e1:84:9b:20:3c:6f:14:
a1:fb:8f:0c:63:59:be:7a:8a:3c:89:6e:5d:85:35:e2:62:73:
67:ba:6e:f1:ac:0b:2d:91:a0:a3:41:a2:e4:c4:bf:d5:9e:3f:
ff:44:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:49 2025 by rpki-client