Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: 1kmkwroIKJ72mWOMLuHelCp6o34um2+sBEWhgnus0q8=
Subject key identifier: 51:5B:F5:78:F7:F5:2F:94:11:13:37:DA:53:99:9C:C5:0D:2B:0A:80
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 0197B77C1C9F7292405029BA398C9DA62227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: OUNyAemX9guAVWtZp3xC7qcDon4JMcBgMO9IK+Bu4LA=)
2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1c:9f:72:92:40:50:29:ba:39:8c:9d:a6:22:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=515bf578f7f52f94111337da53999cc50d2b0a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:f5:3c:d0:fe:d7:4d:85:5a:6d:11:37:0e:
72:eb:9c:19:04:f3:98:66:d0:89:2a:c8:85:2b:e9:
6e:88:21:ac:0d:59:43:e2:f2:8e:64:b3:57:f0:5a:
47:57:93:fd:0e:64:d5:06:12:49:e3:c2:67:b8:6a:
2a:d1:38:8d:02:26:1b:99:ef:e8:11:af:80:02:75:
00:9e:74:fa:b0:e0:c7:e1:71:48:d1:cb:5b:fd:2c:
59:81:03:2f:49:1e:14:f7:af:42:b6:3b:2b:e7:88:
c1:b3:f1:6d:08:73:be:80:82:c9:52:df:76:37:02:
08:33:a2:86:68:07:43:1f:cc:40:19:3f:56:b9:41:
bd:6a:6a:a2:ef:c2:13:fa:5d:d7:c9:68:e4:1b:30:
5d:78:71:cd:d6:3a:a9:8d:e0:e4:a5:9a:fb:64:bd:
2f:c9:d2:c8:0a:91:51:b4:1f:fa:74:e8:69:19:a6:
5b:d8:e0:c7:4c:32:11:ce:97:2a:04:0c:cd:51:e8:
9e:37:6a:e2:c2:21:bf:3a:c4:22:48:6b:92:7c:e0:
26:55:de:6b:b0:60:a8:1a:16:aa:2c:61:e3:c8:4d:
b8:eb:8c:47:88:49:c2:ab:b1:0e:9f:ef:ac:33:64:
de:18:f8:14:26:41:7c:3d:73:42:e1:37:8c:f7:51:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5B:F5:78:F7:F5:2F:94:11:13:37:DA:53:99:9C:C5:0D:2B:0A:80
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:b7:83:7e:ba:e0:0b:81:ef:65:6b:ba:65:75:43:0a:56:b7:
d2:49:9b:ef:12:c5:44:ab:ed:1c:01:d2:b6:cc:e4:72:4b:71:
52:7d:bd:61:6b:53:22:75:b3:e8:b1:1a:9a:3d:c9:fe:7b:90:
15:80:e3:ff:05:22:1f:69:22:17:7e:8b:90:7a:4c:a8:da:8d:
4b:80:76:f0:2f:01:73:0f:8f:16:b1:4f:d4:4f:86:8b:9e:9a:
5d:35:cf:55:5a:d9:4e:01:17:ac:a1:03:d7:e4:31:43:c4:9b:
9c:88:80:ce:00:aa:28:6f:9d:38:c2:93:37:a8:85:28:bb:ad:
b3:a4:eb:49:2f:ff:53:13:ee:f7:6a:53:28:f7:c4:5b:af:48:
c5:02:0f:cb:13:e9:81:9f:99:bc:e2:e9:6b:b3:a9:0a:ab:72:
37:d4:bd:58:f6:21:90:8c:20:12:5f:b6:55:61:99:c4:f2:cb:
e0:64:a9:5f:26:f5:cc:20:19:97:72:f8:53:8c:eb:28:91:d7:
52:1e:a6:f0:5f:6e:27:be:61:17:81:a7:dc:81:b4:15:06:97:
c8:95:f6:6c:b9:fb:8c:c8:a5:34:ec:79:52:d8:d0:97:58:a1:
a6:f1:09:85:bb:02:77:73:0a:bf:e2:06:d9:54:33:37:d1:74:
f4:c9:83:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:23 2025 by rpki-client