Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: Lvd8V1F3G2pB5VE1QqLXqdfTz27RHP24g2v6hw/Ug7g=
Subject key identifier: 8A:78:89:45:DB:42:D1:80:44:1E:8D:06:66:E5:F3:D8:B4:1B:11:00
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019762BA3B818C51B8AFDC36F6EFA116B138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 034D
Signing time: Thu 12 Jun 2025 06:01:01 +0000
Manifest this update: Thu 12 Jun 2025 06:01:01 +0000
Manifest next update: Fri 13 Jun 2025 06:01:01 +0000
Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: z9XcD7mGBkmeZMVxsfw1aF6FCpN6tJg2h1wm1wOg2Og=)
2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:ba:3b:81:8c:51:b8:af:dc:36:f6:ef:a1:16:b1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Jun 12 06:01:01 2025 GMT
Not After : Jun 13 06:01:01 2025 GMT
Subject: CN=8a788945db42d180441e8d0666e5f3d8b41b1100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:3e:36:89:e8:dc:73:c6:da:f8:77:0e:ba:
0e:71:55:11:60:18:65:a1:a3:2c:8e:52:34:2b:ec:
05:5a:40:63:f1:e4:cc:12:19:86:f4:11:ef:27:f9:
3f:66:e7:b1:90:f8:62:d3:af:40:c4:f4:8e:1a:ae:
f9:2c:6a:eb:e5:ca:32:31:24:0b:f7:ea:4f:dd:06:
c9:75:49:60:00:c2:0c:ef:23:52:e8:67:e1:f9:95:
a5:42:05:d5:dd:1f:96:53:7a:e6:dc:35:3e:63:29:
9d:b2:27:ba:10:b6:45:dd:79:ce:10:0a:b9:b2:c2:
c8:45:28:8a:a3:ef:c1:19:7e:5f:34:62:e5:6e:9b:
13:39:95:17:00:8f:fa:30:88:f9:d2:a8:ba:8e:c2:
8c:af:09:da:77:f2:b4:ec:5f:a7:a2:64:c3:9a:bc:
1f:fd:0a:39:04:40:67:92:52:28:88:23:ed:59:a9:
a2:78:f4:f9:f9:69:85:d1:8a:d3:3c:51:37:13:11:
02:30:67:c7:5f:a4:ae:6f:d1:e9:31:1c:3f:e3:09:
8e:74:a0:ef:e5:18:f6:33:bd:8a:67:d0:2b:9d:c6:
a1:f0:11:2f:89:33:60:65:ce:e9:8d:66:17:77:67:
52:67:2b:8f:c7:fb:3a:69:ce:1f:8b:cf:f3:c2:3c:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:78:89:45:DB:42:D1:80:44:1E:8D:06:66:E5:F3:D8:B4:1B:11:00
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f5:c6:45:71:3d:76:4e:c4:ea:d2:02:3e:ee:c1:c3:bc:75:
31:a8:56:57:86:42:b8:a3:3e:a7:4b:4e:c2:82:0c:cf:98:83:
68:de:2e:68:ed:a8:8a:15:60:43:c2:3c:06:14:5d:58:9c:e7:
0b:06:bd:7e:5e:ac:04:a5:ec:9e:44:09:cd:70:59:5c:ce:07:
ad:35:34:de:a4:d1:b6:5d:97:95:95:0f:93:2e:ac:a4:51:28:
6e:f4:1f:cb:b8:8c:47:e7:a9:0d:42:6b:ce:a7:2b:8a:8d:ed:
97:c2:e7:39:d6:9e:4f:81:32:5b:03:31:50:e3:5e:b3:18:b7:
75:be:c2:2e:06:b7:50:41:bb:19:35:8f:01:7f:01:88:ca:25:
70:70:0b:1f:5e:29:cb:24:e9:fe:52:4c:18:c3:60:42:98:f5:
f8:d3:36:46:db:15:a9:29:8a:8e:b4:71:66:da:86:5f:da:20:
97:06:89:f5:f6:d3:69:c3:75:90:68:cd:56:a5:de:56:bd:5c:
e7:05:ac:bb:be:c1:84:cd:b0:95:59:e9:91:a9:84:52:6f:af:
b6:5e:91:b4:17:e6:49:38:c5:f3:10:b7:3c:8e:38:2f:f2:54:
ef:4e:b7:ce:db:cb:91:23:e9:ba:72:fb:70:2a:09:64:0c:17:
60:11:72:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:50:45 2025 by rpki-client