Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: k5X+p1AilizY/LKRpI90DTZJU6c39dJHJ6w5hE8rjH4=
Subject key identifier: 64:14:48:D8:46:B3:34:AA:BB:45:79:A5:76:B3:6F:7B:64:F5:35:90
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 0196E569C5472FE11C42F913A0F154F58C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 0167
Signing time: Sun 18 May 2025 22:00:36 +0000
Manifest this update: Sun 18 May 2025 22:00:36 +0000
Manifest next update: Mon 19 May 2025 22:00:36 +0000
Files and hashes: 1: GHoYC29SdZ8JHtSYpKsW5kablNc.roa (hash: Ggk2bB2uCoFFVfvkzavwaobQUbDhv+a9KTxQ1jDSQZ0=)
2: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: 8/KEhCA5/QbFGTSfFHa6aWuSSeoT+Qd68ZAFenuABOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 May 2025 15:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e5:69:c5:47:2f:e1:1c:42:f9:13:a0:f1:54:f5:8c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: May 18 22:00:36 2025 GMT
Not After : May 19 22:00:36 2025 GMT
Subject: CN=641448d846b334aabb4579a576b36f7b64f53590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:1e:00:85:2f:73:ec:94:b9:2a:02:38:fc:
f8:e4:89:39:e8:24:79:7e:01:c5:f0:5d:d7:71:89:
aa:c9:32:2f:50:1e:88:85:c1:08:69:e3:b7:9d:8a:
3c:59:2e:c1:03:f1:73:51:fb:4b:c3:62:83:84:e4:
9e:41:d4:c6:1e:3c:e5:4f:9e:b7:c6:7f:eb:94:3a:
b4:2c:31:5e:06:4e:a1:29:5c:f2:53:56:4a:3e:e2:
ee:70:66:63:1a:4b:ac:9d:f7:90:ca:9f:55:1c:c4:
e6:28:f7:0a:4a:3c:28:d3:fd:7e:fc:e2:3a:c2:6a:
12:80:22:ca:d6:48:10:2c:c6:79:4b:f8:59:16:0a:
ec:7f:0a:a0:e2:6c:0c:92:bb:8c:17:88:4f:91:54:
1e:cc:cc:72:29:c7:c6:fb:1a:cf:f0:8b:16:1b:09:
fa:28:fb:10:e9:16:8e:94:07:55:4e:b8:42:42:16:
b5:25:00:24:1d:3c:49:57:17:7a:ef:a5:b9:c7:b8:
53:6d:23:f3:84:ee:dd:5f:d0:15:e6:db:1c:b3:7b:
9b:ae:5b:63:a0:83:b5:4b:15:c9:67:4d:d1:f7:ed:
30:09:2e:8e:cd:e8:73:27:94:9d:7b:3f:ff:3e:09:
e7:33:9a:98:3f:85:04:8a:e5:36:24:70:6c:0c:6d:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:14:48:D8:46:B3:34:AA:BB:45:79:A5:76:B3:6F:7B:64:F5:35:90
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ea:5a:b8:9d:fd:3e:08:16:b1:2c:c7:8b:72:75:b9:ab:e2:
d7:de:00:da:b5:2e:a2:c8:da:64:b6:58:ef:c2:5e:b5:6a:b9:
45:d6:a1:9e:b2:41:99:ab:9c:a6:da:8d:96:28:a9:c1:21:d2:
24:7d:d7:2d:14:f4:f0:45:49:6b:62:45:ff:fe:06:e0:b8:63:
49:34:7c:17:d9:16:fa:c6:6c:59:64:2d:92:00:d9:91:08:5a:
a0:27:09:e3:b3:3a:fd:ad:5e:8f:7c:88:ee:1b:54:71:a4:6b:
0b:7b:d8:26:66:eb:84:b9:8a:69:f0:bd:2c:92:f3:94:f8:cd:
e9:d9:9d:c7:81:8b:19:5e:f9:aa:ec:72:39:2d:92:d3:43:1c:
97:83:c5:ba:1c:d2:fe:09:a5:38:d9:b2:b7:ba:53:2f:77:de:
5b:0b:1d:23:a9:1a:3a:98:70:a4:4f:09:c6:f1:84:9d:a7:ac:
83:87:17:1c:04:5a:54:e6:57:5f:f4:11:ae:97:10:31:07:63:
b0:48:72:e2:c1:e7:2d:dd:a6:e7:7e:f2:8e:9c:21:3b:b6:3f:
16:51:7d:dc:52:d2:91:1d:27:e1:0e:c4:b6:54:91:ab:c7:fe:
12:62:88:47:df:27:4d:19:43:d7:76:17:ec:7a:8c:ad:64:c4:
7e:52:f2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 00:38:21 2025 by rpki-client