Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: 6D1sr5NwjxTYNS/KbEzuSVOpurdl+cWcRaiDS8uQKqY=
Subject key identifier: 7B:83:7B:E0:41:3F:F0:28:40:C8:6E:16:F6:1A:4C:C7:D0:40:BE:9D
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 0197470C2CFD940321EE9D05827F64D6EF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 1582
Signing time: Fri 06 Jun 2025 21:01:09 +0000
Manifest this update: Fri 06 Jun 2025 21:01:09 +0000
Manifest next update: Sat 07 Jun 2025 21:01:09 +0000
Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: RoUdJIv6bqnhZszPSNI2rEbKE+jsxwiUREJyxMFRkpg=)
4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:2c:fd:94:03:21:ee:9d:05:82:7f:64:d6:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Jun 6 21:01:09 2025 GMT
Not After : Jun 7 21:01:09 2025 GMT
Subject: CN=7b837be0413ff02840c86e16f61a4cc7d040be9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:c8:a7:7c:d2:8c:33:cd:44:98:5d:e6:3e:
ef:df:d2:7b:af:64:67:06:97:fb:db:77:de:f4:d6:
37:71:44:06:70:12:f4:6f:8f:9d:39:4b:b6:98:79:
3b:8f:63:b5:78:f8:2b:c9:50:54:09:e5:9a:73:ef:
10:c4:66:ef:32:24:d5:01:72:3b:c4:8c:00:5b:99:
96:93:ae:f5:80:b4:8b:07:67:35:f5:70:78:a3:a7:
87:85:be:d1:46:f1:0b:c4:a7:07:9e:ca:52:06:53:
37:7f:5c:a5:9d:3a:a9:a2:ce:9a:8c:f0:a6:2c:c9:
27:0b:ea:79:53:8e:a8:42:d8:df:68:73:30:fd:42:
45:16:2e:50:13:72:ba:a8:91:62:a4:b9:eb:f7:9e:
97:5f:52:e6:00:3a:0a:e9:c7:b4:cb:5b:7c:a3:01:
60:9a:80:c4:f3:de:f5:0b:31:05:49:72:75:68:32:
80:11:77:43:4f:95:82:9d:2f:40:55:94:ac:88:cc:
59:27:0a:0a:d1:65:93:6d:84:1c:79:69:7b:df:d4:
38:39:7d:07:9f:4d:a2:b6:4f:ea:06:da:bf:04:18:
d1:24:9f:0b:4c:7f:fc:9d:e5:2d:f2:4e:21:ab:89:
ed:ce:b5:2a:7a:6e:31:01:4d:22:34:27:07:45:e3:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:83:7B:E0:41:3F:F0:28:40:C8:6E:16:F6:1A:4C:C7:D0:40:BE:9D
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9b:91:fb:1d:4c:36:27:5d:de:3e:69:61:7c:ff:10:cb:20:
44:88:00:8b:90:e8:31:f0:e8:fa:e3:c1:73:c2:55:89:4d:74:
b7:de:89:a3:61:d7:6c:95:bf:6f:53:7c:f2:9a:59:6a:17:9c:
49:6f:e9:25:67:f9:f2:ef:f1:9c:d5:af:e9:ad:f0:d9:bb:ef:
6a:72:9c:08:75:2d:3f:4f:a4:38:40:ea:e8:b4:79:62:e4:95:
94:96:06:c4:ab:75:ac:00:8d:57:7d:3c:66:0c:3a:52:81:31:
32:6f:fa:f1:6d:f3:0c:29:f5:45:2a:99:cd:ed:52:35:d0:40:
b2:63:e9:3d:fc:e8:8f:1a:99:31:f6:8d:83:91:05:23:e7:5b:
81:19:85:84:3d:65:ca:2f:aa:be:90:0c:16:bd:4c:67:b1:a2:
9f:d6:6b:84:45:7a:47:e3:44:b7:33:f5:10:7c:54:53:8f:2a:
76:12:58:ff:0d:1a:a8:dd:f4:cc:a1:7b:d1:a8:bd:94:b7:5f:
7b:d8:32:e7:cd:f2:b2:54:a6:b6:88:2f:6a:ae:05:be:86:05:
bd:49:48:e4:be:36:f0:51:78:82:2d:68:28:86:d1:b7:2e:cb:
2f:b4:6c:9f:f0:df:40:9d:4e:69:16:d7:b0:52:01:67:24:f4:
f7:cc:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:15 2025 by rpki-client