Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier: VP/gmBAvkCFsBt2bs7CUKRxtU0bmfYJr1TwUknH+FPE=
Subject key identifier: BD:39:C4:D4:81:F5:98:9F:08:22:4C:B8:0D:79:3A:B3:BD:E7:65:DE
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial: 01974A7B484218111C2DCD1F89AC59DC9C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number: 14E4
Signing time: Sat 07 Jun 2025 13:01:22 +0000
Manifest this update: Sat 07 Jun 2025 13:01:22 +0000
Manifest next update: Sun 08 Jun 2025 13:01:22 +0000
Files and hashes: 1: 8iSreq9sFy4jQpPohIGSY5mGVho.roa (hash: JWocgKBNIhnSVWHkP0cAfvpMZaqkdklTc5KStlxqdMY=)
2: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: 441+9N/fioHM59wwZ8o19+gqCGjTyNmK87V/2/xuRTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:48:42:18:11:1c:2d:cd:1f:89:ac:59:dc:9c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Validity
Not Before: Jun 7 13:01:22 2025 GMT
Not After : Jun 8 13:01:22 2025 GMT
Subject: CN=bd39c4d481f5989f08224cb80d793ab3bde765de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:d6:98:1f:fa:6e:3b:8f:ff:be:af:27:1b:
28:a3:2e:6c:db:4b:5a:45:c2:46:40:86:71:00:bf:
62:9d:35:b2:52:27:29:b9:37:1c:d4:d2:5f:18:57:
7c:d9:d4:ab:34:ac:73:fa:0a:2c:c9:bb:c0:77:6b:
49:0f:60:2c:0b:ab:b6:22:d4:f0:f3:d7:82:1d:3d:
23:86:e1:e5:e2:45:1e:08:f7:b7:a7:c4:1a:f5:20:
fd:09:8e:8c:d1:07:1f:62:aa:2f:48:fd:90:ba:cc:
25:ad:5d:ec:3c:7e:11:c1:e0:86:69:8c:51:ef:d7:
bf:4e:95:eb:52:43:10:85:51:89:64:59:06:99:0c:
22:8a:00:2f:70:08:d3:45:96:e4:96:db:b7:52:6d:
23:75:c5:bb:88:81:67:44:9a:df:fd:c9:e4:b4:8e:
0b:96:7d:bf:9c:80:6b:5d:14:f5:9f:fe:59:39:6b:
55:50:8c:32:f8:42:d5:51:f1:e0:e2:45:af:ea:63:
21:31:ce:82:c3:3a:58:67:8c:82:f4:d1:18:82:a5:
d1:ea:c2:c1:c9:61:94:a5:b8:47:0d:15:53:52:c9:
88:bf:9f:c8:ac:70:09:7c:b2:3e:90:1f:f6:9e:87:
1f:e3:c1:93:02:6a:16:fd:64:07:19:59:c7:42:b4:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:39:C4:D4:81:F5:98:9F:08:22:4C:B8:0D:79:3A:B3:BD:E7:65:DE
X509v3 Authority Key Identifier:
keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5f:a7:ef:7d:e9:d3:37:6a:75:2c:4d:1a:9c:3d:4e:bd:95:
aa:dc:d6:4c:c5:d5:cf:c3:bf:5a:55:cf:3a:7a:af:ad:95:cc:
a7:0b:7b:ae:25:a1:62:d1:2c:bf:06:60:49:9f:ec:f1:dd:f5:
6b:66:6a:6b:69:50:cb:6e:86:84:99:2e:9c:d6:3a:f0:77:50:
4a:2e:26:5a:d3:21:69:c5:d7:b7:2d:ec:a3:d8:e2:ef:28:79:
45:38:39:3f:89:b4:68:e9:f9:a4:c8:31:32:37:ce:4d:48:8a:
76:26:82:38:d8:4e:10:e3:1f:77:a9:42:8b:d0:7b:cf:2b:92:
23:ee:ab:e9:dc:cc:5d:27:f0:ae:6b:78:d8:29:ba:79:3b:38:
90:25:55:b0:05:ef:91:a6:da:40:6d:47:6a:6e:5a:f3:9f:e6:
06:33:34:b6:84:5d:92:b8:ae:d2:17:94:d5:b9:c8:89:a9:17:
f7:2d:1d:24:2b:32:a5:77:d1:16:42:c1:96:b2:18:5d:79:51:
a7:e6:b0:42:a0:ba:19:0f:37:a9:d1:36:f1:c9:f9:e1:16:d6:
b0:2c:cc:46:1d:4b:62:c4:4b:59:9e:6c:a1:a6:20:06:97:ec:
d0:85:ba:b1:11:e3:52:fe:cf:0b:39:75:4a:1b:b1:96:bf:97:
88:b4:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:19:08 2025 by rpki-client