Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: awun4wn4DPNdGd81vi2JUct8k9mfvrwoKMFXRHvlLS8=
Subject key identifier: 0E:6E:52:82:25:2F:72:72:56:2E:41:81:4C:93:3D:74:FB:08:D5:64
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 01975C12FC81EFBF2ED9EE28650AAB842ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 12C0
Signing time: Tue 10 Jun 2025 23:00:37 +0000
Manifest this update: Tue 10 Jun 2025 23:00:37 +0000
Manifest next update: Wed 11 Jun 2025 23:00:37 +0000
Files and hashes: 1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: nzKtm94L6AkFNqyFkgevblq8o0dwnXMrr2PZTIsHagg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:12:fc:81:ef:bf:2e:d9:ee:28:65:0a:ab:84:2a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Jun 10 23:00:37 2025 GMT
Not After : Jun 11 23:00:37 2025 GMT
Subject: CN=0e6e5282252f7272562e41814c933d74fb08d564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:38:a7:46:c8:21:06:c0:9f:ed:7e:97:bc:
92:60:da:b9:13:02:48:da:dc:0e:ed:fb:65:a4:4a:
17:89:48:d4:fd:a4:d2:a7:4b:4e:46:4a:ba:82:fa:
ff:a7:ef:c0:cc:37:00:2d:c8:88:5d:e7:48:a7:6b:
55:4d:9e:9f:c1:a3:ac:b5:77:e6:93:2b:92:ac:66:
dc:50:f4:42:a2:4e:ad:74:68:6c:ed:d9:02:00:f0:
16:e3:fc:3d:d6:da:b1:f8:a0:60:9c:fc:0d:de:34:
a9:0c:8e:0c:21:2d:34:01:38:56:d2:36:9c:27:c1:
f1:2e:ba:fd:ec:3a:97:34:69:9b:01:d4:89:ba:d7:
b0:f8:da:15:52:73:e0:78:e9:88:71:87:38:69:fb:
6e:3c:7c:93:98:9f:dd:f4:b6:4a:0d:b0:6e:fb:55:
14:7b:11:4f:5e:58:fa:05:04:77:d5:ec:00:4f:00:
0c:03:43:c6:eb:69:5b:7b:48:5c:f1:93:22:2c:6e:
cd:1c:49:84:25:92:bb:0d:4d:59:5d:85:55:84:35:
71:b6:3a:95:de:2c:6f:f7:55:5c:30:fa:e4:43:15:
bc:fa:c6:26:1f:d0:0a:06:cd:7e:9a:44:bf:0e:9c:
42:63:a1:78:b2:01:d7:dd:f0:a2:36:cf:35:9f:b7:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6E:52:82:25:2F:72:72:56:2E:41:81:4C:93:3D:74:FB:08:D5:64
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e1:86:75:40:68:a9:a3:d3:57:7d:53:82:ee:87:46:2f:e4:
98:fc:b2:1e:d3:5a:25:2e:c9:d9:9f:e3:f1:60:ef:1c:7d:ea:
28:d8:cf:53:9a:cf:d6:7a:3b:30:46:00:27:ad:cf:32:32:6e:
aa:bb:06:7f:dc:1c:e1:4e:38:44:6c:84:2a:49:66:b0:de:83:
b2:71:22:b0:37:b8:eb:ec:28:bd:c8:ac:8a:80:5b:f8:fa:36:
8e:99:e8:07:99:ec:5c:e8:2e:22:c1:92:7c:b3:e6:53:b4:7f:
d1:71:c8:97:f3:57:9d:dd:85:64:6c:ff:d5:b1:86:59:22:32:
af:b2:28:eb:e0:77:5f:bc:c7:4f:49:b7:24:83:85:c7:2d:26:
24:ff:61:e7:df:4c:89:57:9e:5e:14:c9:df:86:1d:8c:e1:b0:
88:6c:7e:9d:62:7a:69:52:60:2b:b1:db:dc:1d:75:09:1b:da:
6f:29:40:b9:e1:43:e5:27:56:05:cc:cd:33:a0:80:18:dc:bb:
86:2c:e6:49:93:d1:31:d6:bd:da:c3:f4:81:e9:b0:e1:17:9b:
0c:7f:07:70:92:37:4a:82:c9:f8:6a:5a:37:c1:4d:49:a2:b3:
dd:4d:38:b6:5e:c9:cd:a6:f1:d6:61:22:01:51:79:57:00:9a:
ab:eb:1c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:57:26 2025 by rpki-client