Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier: ToXfxXohAp+G2hBC/O7BvsHy2JzUFPlbMAU/YjvZlQM=
Subject key identifier: BF:68:AA:06:E4:84:67:E7:0F:E2:2F:BE:89:BC:92:75:F1:ED:8E:F0
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 0197C313823119F637675154668D30348A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 23:02:04 +0000
Manifest this update: Mon 30 Jun 2025 23:02:04 +0000
Manifest next update: Tue 01 Jul 2025 23:02:04 +0000
Files and hashes: 1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: P40RTmk0FhRQ7GwFYHKf9Nx4H/a/4Cjsgyx8k7xGZfg=)
4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:13:82:31:19:f6:37:67:51:54:66:8d:30:34:8a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Jun 30 23:02:04 2025 GMT
Not After : Jul 1 23:02:04 2025 GMT
Subject: CN=bf68aa06e48467e70fe22fbe89bc9275f1ed8ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:cd:4e:b8:bb:52:21:9e:fb:f2:7b:d1:4c:
76:d3:05:aa:19:a3:2d:63:ce:79:b9:7c:55:6c:ec:
b3:e1:f3:3d:9c:9c:24:1b:67:9d:8a:2a:87:ef:13:
48:01:61:aa:30:1e:95:77:85:cc:db:cd:1f:17:f6:
71:f1:7b:5f:91:a3:48:4c:1d:ae:38:02:97:ea:6e:
c4:cd:1a:8c:dc:80:7d:15:0d:ac:d0:bf:8d:0c:40:
51:46:1b:66:ea:14:8c:80:fd:79:1e:a2:1a:93:38:
72:c3:1d:46:e2:26:15:8a:c2:40:dc:70:d1:33:38:
be:24:fe:fc:cf:de:dc:ca:07:82:36:14:bb:42:86:
4f:66:33:6f:d4:75:2c:11:9e:cf:65:45:45:5b:ed:
2d:12:c7:f4:7f:c9:62:f3:94:45:ee:0d:ae:bd:ee:
5e:88:5e:0e:51:2f:39:78:cf:2b:74:bc:a6:51:b4:
f0:89:a9:23:58:a1:4a:01:6b:56:0e:03:2a:33:6d:
2f:2f:07:c3:f1:4d:36:b7:a2:02:f4:d2:76:da:d4:
3f:e9:48:8f:80:6e:8e:7f:c6:32:e1:a0:bd:a2:fa:
f6:f4:bf:5c:13:8b:4f:e3:6a:cd:8b:f7:fa:11:b3:
13:b5:b0:00:53:3c:a3:9c:19:99:d3:e9:29:11:ce:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:68:AA:06:E4:84:67:E7:0F:E2:2F:BE:89:BC:92:75:F1:ED:8E:F0
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f8:db:42:55:dd:ab:4a:49:fa:95:fc:2d:55:a3:10:a2:a2:
89:92:5b:9d:cf:d7:0d:b6:e9:a0:a6:42:4f:a6:f5:1c:8b:f1:
11:be:7a:5e:ba:ae:1f:7d:77:5c:ed:a2:55:10:2a:6e:d3:16:
9a:b4:94:6a:9a:5b:7c:05:38:c8:7a:1c:55:9b:83:69:43:bf:
44:ac:8f:98:17:cd:30:2f:57:e3:f6:e3:26:3b:47:01:a5:1d:
3f:c8:95:9d:b6:78:5f:8b:03:68:41:94:c4:dc:5e:75:11:20:
e3:44:9a:95:f1:b0:08:a9:d0:4b:d1:2b:2a:01:71:f3:a0:3b:
b4:ff:7b:a5:b0:23:3b:d2:92:a3:ca:8c:06:4c:c6:5c:b2:e1:
1f:15:20:54:28:09:74:ca:ee:f9:2d:ba:1e:85:ff:6c:7a:e6:
77:54:69:49:d4:eb:81:11:cd:ab:2e:3e:6e:2b:77:35:7e:92:
7a:56:31:10:44:db:b9:3a:a9:10:ea:22:03:a9:8d:eb:9f:07:
f2:55:74:bb:d6:d7:6b:cb:ba:ef:79:89:66:1a:6e:ef:d0:62:
e2:47:20:96:5e:bc:fd:69:0b:1e:4a:15:f6:96:44:36:9e:21:
51:26:44:a6:df:14:42:71:16:11:29:14:49:a6:aa:13:d2:51:
bf:48:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:49:16 2025 by rpki-client