Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier: jOkmbbV0oHwcI7To53Y7G3WTvjob+xY00JANMU5RxtM=
Subject key identifier: 37:CD:5D:00:74:7D:EC:A8:DA:96:71:CF:D9:34:65:79:B7:53:8A:67
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 0197B7455CAF485E63956191C21F155AAC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number: 0306
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: pqjKjJAfmRzzkrWci262nA42G1f7JOZGLz/Q7Dhn9nE=)
2: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (hash: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5c:af:48:5e:63:95:61:91:c2:1f:15:5a:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=37cd5d00747deca8da9671cfd9346579b7538a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:11:64:fd:ea:06:35:af:cf:af:c9:2c:94:
66:e5:8e:2c:0a:4e:46:d6:42:f4:fe:86:82:d2:44:
c3:6c:01:c8:24:50:fd:4a:a5:4b:e6:86:b4:2a:d8:
d0:0c:ee:21:89:d1:a4:57:25:34:6d:3a:74:fd:fb:
4a:2a:c4:12:2a:4b:f2:6d:00:dc:5f:3a:69:66:9e:
05:9d:f6:bf:6e:2e:ce:50:93:1f:06:c4:e6:de:f3:
e0:7d:c6:77:85:1c:8b:a8:ac:cb:1b:45:2b:18:2e:
24:f8:39:69:c1:ce:ce:e4:72:b1:2a:13:f2:b3:25:
6d:c0:3d:6d:1b:5a:01:d9:57:31:57:d0:6b:83:22:
d0:a2:5f:81:a0:68:d6:15:f8:17:ad:88:4c:a5:70:
d8:c9:a3:41:c5:1a:54:80:36:7f:9a:c2:f4:c8:53:
03:38:73:99:6e:3c:b7:ff:ad:31:b3:e1:7a:61:2b:
89:07:04:09:2b:e0:e2:d5:ec:28:d1:c6:ed:a7:44:
d1:4e:98:25:42:ec:b6:14:84:6d:f0:37:92:98:6b:
fc:f0:b5:b9:14:79:eb:c3:51:1c:36:c8:e5:6a:50:
35:f1:c9:69:4c:0f:ff:4c:b0:7b:cd:c5:c0:02:52:
9b:ec:e7:d9:7e:40:57:b9:89:ee:91:ce:09:06:29:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:5D:00:74:7D:EC:A8:DA:96:71:CF:D9:34:65:79:B7:53:8A:67
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2b:0c:30:cf:8f:63:0c:18:b3:2d:13:38:5d:5f:c3:a4:56:
df:d1:d6:8f:5e:30:a6:86:c2:d8:8a:44:01:66:c6:ee:74:36:
93:96:c0:41:d4:42:e5:59:d9:24:27:fd:3b:33:ee:8a:c1:0c:
17:0a:34:3b:92:05:93:3f:a7:24:f2:71:f7:20:2b:cf:1f:b3:
7a:6f:a9:86:c0:7c:2a:94:1c:32:c6:30:cd:8b:59:38:27:ef:
3a:71:63:8d:af:00:2f:71:78:fc:b8:cc:70:9c:40:f1:ae:2f:
01:71:82:3a:c9:75:e2:f4:cb:57:47:6b:d9:9e:80:15:f2:8d:
5a:46:54:12:4d:54:5f:41:07:50:23:c2:2d:91:83:62:0f:43:
1a:c8:27:18:12:01:a2:e8:8b:f0:14:d4:34:39:be:b9:06:98:
5b:b4:07:c1:58:0a:d7:98:6e:1b:18:dd:d5:42:58:66:6d:5f:
b7:a3:6d:55:ff:60:14:dd:88:50:4b:12:b3:de:81:9b:dd:03:
40:4a:af:95:c2:b3:53:f3:fc:81:c4:52:4c:af:cc:0b:f6:5b:
4d:ca:93:c7:7d:c3:6a:71:d7:9f:c7:22:a7:7c:de:78:a5:3f:
1c:ba:e2:b7:8f:bd:f5:79:2e:1e:39:22:b6:d8:51:b8:7b:cd:
69:5b:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:37 2025 by rpki-client