Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: TEpddCBzsPJeIN5P/+jL9Xqc2qVWnoXEphlTIx33bm0=
Subject key identifier: 1C:78:D1:2F:97:26:91:DD:8D:7B:D6:5C:EB:58:37:2C:53:B8:CB:45
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 0197B6D77F59E2366D75D665ABEB1DFB9D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 06D1
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: AspvYduc_Jb9y8GXYBDLcC-_8EE.roa (hash: ensOUkmx91RQ9/R5jlP5oQpNE74zuacX+6PWKXjdOOE=)
2: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: 0PoafrfZ08HN5zcAjSd+pw9NXg2wo4PKkGlBqrowmKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7f:59:e2:36:6d:75:d6:65:ab:eb:1d:fb:9d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=1c78d12f972691dd8d7bd65ceb58372c53b8cb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:a4:81:e2:33:40:38:01:64:fe:35:a1:44:
d5:34:0e:a8:75:80:97:cb:14:da:96:4a:f1:8f:0c:
91:c4:3e:91:8d:66:7c:82:7f:ce:45:b4:da:e7:b8:
44:cf:ce:25:a5:8d:ce:d2:01:bb:6c:e5:a5:c6:72:
0b:47:8e:5d:38:0f:6a:f3:5e:e9:1f:e5:73:d9:81:
d9:00:eb:d8:5c:56:d3:27:2a:36:4a:f7:9b:3f:85:
82:da:4c:e4:20:ff:b4:4a:f5:a0:ee:f7:68:82:6b:
a0:d3:da:4a:59:39:5e:3e:0a:bc:d5:65:dc:1c:14:
60:27:07:e0:f6:97:c3:e8:08:39:2b:58:c9:c3:70:
eb:0f:3f:28:7b:87:49:9a:14:a2:fd:9a:3c:50:a8:
19:dc:ca:de:f8:5f:e8:bb:61:af:20:d8:fb:cd:e3:
7d:e2:67:ba:88:7e:31:bd:e9:5e:d0:5c:10:10:0e:
35:19:ea:0a:c0:37:4c:d6:a1:ec:25:e3:38:97:17:
03:9a:83:be:e3:4d:57:4d:db:84:08:bc:da:48:0e:
43:43:38:10:d0:ee:1b:36:37:a5:26:e6:eb:99:ef:
ce:8f:e3:1f:c9:f7:51:60:d9:f5:c6:10:3b:4e:fe:
79:33:f8:a7:5e:70:85:38:d3:6c:12:58:cb:b2:d9:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:78:D1:2F:97:26:91:DD:8D:7B:D6:5C:EB:58:37:2C:53:B8:CB:45
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:83:92:32:42:af:af:e3:ff:07:91:95:22:05:54:d0:11:e2:
94:6b:0b:25:8c:cf:11:40:4c:02:94:7a:48:b7:92:03:9b:2c:
2a:51:d7:04:8f:0b:15:bf:ac:f9:fc:f4:88:f8:95:81:91:c3:
b6:be:ca:d2:2d:70:a9:3b:45:4c:7f:53:f1:fa:0d:2d:f1:d9:
06:35:c6:07:c7:d3:ce:29:f3:56:37:75:a8:7e:90:0a:65:d2:
15:62:78:a9:89:c6:f1:4a:9b:85:a3:b3:21:ba:6c:85:ed:72:
dc:e0:11:eb:ac:53:27:8a:79:41:d5:05:50:85:e9:ca:02:35:
7d:8a:e9:6b:a4:57:7b:4b:28:10:b2:d5:04:d8:e9:c6:45:f1:
96:0c:87:cf:3b:1e:d9:28:cd:1f:e4:be:92:32:18:01:47:bb:
29:81:92:8d:40:f1:2e:0d:19:8e:6d:aa:2c:5c:ac:6d:75:3a:
2a:23:76:97:fd:22:82:7f:53:81:a0:1e:bc:c6:5b:66:37:ed:
a9:1a:bd:2b:c0:40:8e:d1:95:74:99:84:c4:f5:63:f0:39:59:
a2:1c:10:d0:03:0b:ba:09:fc:55:5a:d0:0a:48:c9:44:8a:58:
9f:ea:a6:39:bc:42:9a:d5:fc:f8:30:a9:18:0e:34:a8:ca:e7:
d5:cd:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:58 2025 by rpki-client