Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: WZYCaAZ7h+YXqWNGgJR5zQpaPNffOLBOum387lk0KyQ=
Subject key identifier: 45:FD:AF:73:0A:FF:7A:96:F1:58:41:91:F7:79:27:96:6B:F4:A9:DA
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019746D48D1A5FBD99586B625EF518491D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 01FA
Signing time: Fri 06 Jun 2025 20:00:24 +0000
Manifest this update: Fri 06 Jun 2025 20:00:24 +0000
Manifest next update: Sat 07 Jun 2025 20:00:24 +0000
Files and hashes: 1: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: nWV/X/W2SeG4iWtV0XJWJnRw+Ce15rNi2AgFqcXRedI=)
2: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
3: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:8d:1a:5f:bd:99:58:6b:62:5e:f5:18:49:1d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Jun 6 20:00:24 2025 GMT
Not After : Jun 7 20:00:24 2025 GMT
Subject: CN=45fdaf730aff7a96f1584191f77927966bf4a9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:60:2a:21:7a:5e:02:48:8d:56:df:57:18:
e7:39:60:3f:c0:75:69:b3:d6:c8:66:4d:b1:54:2e:
88:9f:3a:a6:a2:b3:c3:2d:51:2b:3d:75:28:a7:46:
6a:fd:53:26:30:cc:24:75:e9:ac:48:2c:ee:9d:4f:
23:16:db:a9:40:4e:e9:e0:33:5f:eb:21:5f:2d:2d:
ca:02:51:f7:4f:d7:86:71:ac:af:a2:72:84:70:bf:
ad:e4:b4:ed:d2:0e:58:b6:99:f0:79:43:8f:b5:97:
60:b5:6a:d1:0a:92:0c:61:df:b7:3c:47:02:5e:a2:
0e:ed:17:9a:e0:2d:fe:1d:e7:47:4a:f6:6b:23:5d:
1d:c6:fe:b1:f3:9e:f5:6b:6d:fb:0b:fc:0e:d3:82:
9d:2e:c2:dd:e5:93:a4:92:9a:37:8b:1c:e9:fa:54:
47:1b:d6:18:d6:95:26:c1:7e:0f:73:28:0d:1c:fd:
e4:ae:84:dc:3c:e4:c2:f0:3c:f3:f4:73:2b:b8:0b:
09:68:79:1e:02:f3:87:c8:8e:d9:29:8a:88:8c:a4:
82:a8:40:b0:fa:57:6f:0c:5f:04:98:52:37:dd:41:
61:10:45:62:ad:31:9c:fc:9b:69:46:5a:c6:00:84:
27:29:54:f0:28:43:db:c1:46:74:4b:1b:c5:b3:aa:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:AF:73:0A:FF:7A:96:F1:58:41:91:F7:79:27:96:6B:F4:A9:DA
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f6:35:44:fc:5f:9c:27:6d:1e:01:5d:c6:91:b5:fc:b2:34:
37:a5:bc:90:82:d4:77:53:ea:34:32:a2:5c:21:16:69:d9:3f:
2e:11:54:81:a8:e7:12:2e:e6:9a:60:3f:98:3d:da:97:1c:26:
27:63:1f:c8:52:68:03:51:1d:29:38:b5:08:cb:55:8d:91:48:
e6:6f:a5:b9:21:0a:40:a5:2a:6c:5d:79:c7:52:1b:fb:44:93:
90:a5:b6:2c:af:18:b6:b7:a3:8b:e9:0a:ce:4d:21:53:26:6d:
e2:04:74:13:f3:87:d8:b3:36:d5:7f:ff:7a:df:89:9c:47:16:
de:f6:22:79:26:8b:d4:e6:f1:7e:72:7f:f1:5b:3e:5d:5f:49:
ab:7e:c9:3c:d4:79:83:dd:78:e1:6c:53:e0:99:98:f2:41:c0:
19:eb:28:55:fb:0b:cb:ce:fc:70:29:19:bc:4b:54:9a:25:c0:
d4:e6:03:64:64:ff:14:a2:7e:99:12:c8:01:b2:a1:5f:a6:b9:
68:7b:65:c0:b2:43:ec:96:4f:98:ec:32:2d:fa:ff:fe:85:eb:
a1:fd:c5:28:af:cb:50:34:e0:8d:fc:0c:f8:98:2b:ec:31:65:
56:ae:20:27:d4:f8:c6:81:57:67:a8:a6:fc:e8:9f:30:5d:92:
75:61:5d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:48 2025 by rpki-client