Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
File: OJDnpFSaVx9otoja1PXO2OUpBos.mft (raw, json)
Hash identifier: X2NLuyEcAoPjNDqX+uGc2zT3oRo1u9tOdkS2hQ5wJs4=
Subject key identifier: EF:E1:67:0C:D1:98:3F:5D:AE:7C:54:7F:BE:F2:30:12:3D:5E:3E:B1
Authority key identifier: 38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
Certificate issuer: /CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Certificate serial: 0197B6A0860756F00A7DB492BA2D4314D4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:02 +0000
Manifest this update: Sat 28 Jun 2025 13:01:02 +0000
Manifest next update: Sun 29 Jun 2025 13:01:02 +0000
Files and hashes: 1: OJDnpFSaVx9otoja1PXO2OUpBos.crl (hash: Iitp9gxgJ8htd8ViXHw5UGSMimiD/q0n81LuszeVxN4=)
2: XaY9bUiZ_CFGYXPkNboje_P8adc.roa (hash: b9+EkuxILTVWiZrAAhWN9xohV/5GiE1XVfEOgozpLGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:86:07:56:f0:0a:7d:b4:92:ba:2d:43:14:d4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Validity
Not Before: Jun 28 13:01:02 2025 GMT
Not After : Jun 29 13:01:02 2025 GMT
Subject: CN=efe1670cd1983f5dae7c547fbef230123d5e3eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:21:70:06:3c:55:30:4b:25:62:e7:90:01:
ef:31:ef:f8:de:70:62:a2:3b:f6:d4:d6:24:39:a4:
cc:e4:11:25:7e:ea:13:f9:dd:be:5b:88:98:eb:25:
19:07:0b:e2:d5:1f:d6:5c:14:dd:54:e3:69:e0:55:
eb:2b:b7:86:bd:d1:d5:8c:02:a3:fd:1f:a9:50:c8:
ed:5e:28:d4:40:1f:12:15:75:8d:b9:ec:36:21:38:
fd:bd:76:79:4e:c4:0c:14:a6:4d:ea:36:4b:e2:73:
9b:fb:5e:71:50:94:d4:b6:6f:d3:e4:15:50:fe:d3:
f6:70:b5:f0:bf:d3:22:92:18:8f:ad:fe:5d:78:26:
7e:e5:bc:bb:62:b0:6e:5e:94:d9:3d:8b:89:d7:94:
de:bb:b9:b3:0e:9d:67:a8:87:b5:74:51:b0:d9:4a:
6c:3f:22:f7:e2:69:25:71:55:eb:ca:37:b0:70:6f:
68:fe:7e:79:ac:f2:1f:6d:8f:8e:d8:43:d4:6d:78:
63:d3:72:86:c4:e7:29:4f:9e:69:fa:01:52:2c:cc:
4f:c4:5d:53:cf:29:b5:13:e0:00:74:99:10:e0:92:
d3:69:c3:5c:db:8c:aa:b3:4d:d3:ba:25:a5:e7:65:
8f:1b:3e:e5:b1:08:e4:3f:1b:3b:c6:b2:ff:d5:ed:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E1:67:0C:D1:98:3F:5D:AE:7C:54:7F:BE:F2:30:12:3D:5E:3E:B1
X509v3 Authority Key Identifier:
keyid:38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7c:76:ae:47:b0:b7:e3:2f:88:1c:2c:d6:a4:2e:61:bf:9b:
3f:c4:d9:d2:a3:ba:86:75:d9:59:6d:c6:eb:a1:d8:fb:38:fd:
f3:1a:b4:28:c5:d1:36:c2:9b:c3:ce:6d:35:10:33:be:23:1c:
6b:e2:c9:96:76:84:dc:2d:cc:33:7a:87:bb:4b:92:ff:87:68:
8b:42:e8:ba:6a:5d:1c:ef:dd:0f:ea:65:6f:bc:d5:fb:9e:a4:
18:32:70:bc:87:bc:d5:a0:98:61:fd:4f:6f:79:03:5e:00:e7:
3f:b8:85:4f:a4:6b:93:46:f2:17:36:14:0e:cf:03:f6:01:26:
50:77:73:76:19:da:59:fc:b7:9e:02:50:51:71:80:4a:0b:3a:
c3:54:04:29:d3:8b:d7:03:4b:48:67:e5:9f:ba:d9:13:0a:14:
65:0f:ae:b7:39:cd:55:8d:7b:9b:c3:43:49:3a:4c:db:29:cb:
8e:bd:97:db:b9:85:1f:96:98:13:94:42:ec:b9:ef:b7:f6:14:
80:27:d2:3e:a4:b3:5b:8c:da:d1:c7:6b:08:35:11:4d:37:52:
fb:8e:37:c8:1c:93:3f:0f:39:49:8c:54:f4:09:9a:45:01:a3:
0b:0f:49:6d:33:1b:ec:2c:40:15:b0:0f:d4:67:b9:64:2c:a2:
84:aa:41:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:43 2025 by rpki-client