Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
File: oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft (raw, json)
Hash identifier: cYRJwN0SjbqMeGBlFGUTilVvsBArQYujcRjp6d87lzw=
Subject key identifier: 4F:D7:E5:4C:99:E1:7F:71:57:C7:94:F8:52:E8:22:64:98:E1:27:E9
Authority key identifier: A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
Certificate issuer: /CN=a220dda64843a4ee364b089356ca87995830fd77
Certificate serial: 0197B890089F85B7FC66CAC0DADB6DF16562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
Manifest number: 0CDD
Signing time: Sat 28 Jun 2025 22:02:16 +0000
Manifest this update: Sat 28 Jun 2025 22:02:16 +0000
Manifest next update: Sun 29 Jun 2025 22:02:16 +0000
Files and hashes: 1: f3Wn9TOfcfxB3VYXWanqfMC6WRI.roa (hash: CJSEzeKkH+A8u48zVCzb/MrI7FvV/Beze1CPp3UTLZU=)
2: oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl (hash: Y0g5/vrewl8YbmK+XbZbSDZslsUVg3gOKnc9K9NvrwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:08:9f:85:b7:fc:66:ca:c0:da:db:6d:f1:65:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a220dda64843a4ee364b089356ca87995830fd77
Validity
Not Before: Jun 28 22:02:16 2025 GMT
Not After : Jun 29 22:02:16 2025 GMT
Subject: CN=4fd7e54c99e17f7157c794f852e8226498e127e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:90:4a:81:ed:95:9f:bf:e2:e1:48:6a:3b:df:
5e:09:4f:45:0e:1f:be:ed:95:0f:50:5c:7d:2e:2e:
2c:b2:de:73:05:06:d8:a7:4c:aa:8e:1c:be:9c:21:
be:3f:ee:0f:82:dd:40:0a:65:a7:0a:3d:e4:73:85:
76:b9:47:25:1b:41:58:60:9e:e0:4b:7f:af:8b:c8:
46:84:77:e6:d8:e8:5b:38:61:30:89:c7:20:9c:3e:
5d:4d:80:39:a3:33:89:a1:e9:9a:27:87:4a:f5:91:
28:e4:76:02:11:92:9c:3c:a4:6d:28:87:bd:12:88:
8f:0c:95:b1:c0:8d:23:0f:88:2b:26:30:f2:72:4a:
12:f6:06:85:a7:c5:b5:62:d9:cd:af:7c:ae:d2:21:
73:b7:bd:b7:c6:2e:44:4c:71:98:48:9d:25:52:1f:
22:04:77:8b:2f:88:59:9a:4d:c8:93:70:3f:4c:e1:
0c:76:64:66:fa:3b:3e:98:d1:a6:d1:16:39:78:64:
d7:ce:6c:c1:73:e0:5b:ed:50:cb:fb:68:f9:83:d3:
46:37:fc:19:74:9f:fe:c8:6f:06:71:67:14:c6:f6:
0b:d1:72:f2:80:90:20:fe:c2:aa:8f:e3:2b:cf:ab:
4d:85:c9:7d:1f:d4:52:a0:5d:07:aa:54:c4:7e:e8:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D7:E5:4C:99:E1:7F:71:57:C7:94:F8:52:E8:22:64:98:E1:27:E9
X509v3 Authority Key Identifier:
keyid:A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:11:2b:68:b3:8f:31:ae:74:5f:c1:f2:39:43:4f:2e:fa:38:
f7:60:09:b6:da:3d:9b:92:65:e5:53:a3:eb:5b:c8:2e:a0:ff:
2d:aa:b6:94:28:ed:b8:4c:cf:52:69:8a:fe:86:86:69:4d:0b:
97:75:a4:dd:49:ed:00:b6:88:a9:e5:77:3e:f1:ba:77:3a:8e:
f1:be:8d:5a:8a:70:77:5d:5b:38:57:61:6f:86:21:45:f7:8c:
e7:04:1f:43:3a:f7:4d:45:0d:ac:68:85:51:d8:22:f9:66:ef:
13:c8:45:4d:80:98:42:6b:b1:79:dc:0c:5e:53:56:4a:e4:dc:
05:9e:f0:40:de:2e:6a:2b:49:5d:3c:6b:db:ce:93:d4:e3:7b:
e9:65:05:bd:e3:bb:19:bd:a7:c2:38:cb:22:69:b2:16:5e:99:
5c:16:6c:ed:24:70:f4:6b:4f:5f:d1:f9:09:2b:c4:60:3b:3a:
0d:02:06:bb:7c:1d:24:f5:b1:f3:bd:73:72:73:1c:14:2a:cd:
fa:0c:63:29:4c:03:54:7d:f9:ea:76:a3:7a:33:2a:71:0a:e6:
f5:05:af:fa:e3:27:79:40:88:fe:81:2c:ea:1a:b6:5b:bd:46:
da:0a:7d:3b:91:04:d3:d4:b8:8f:8f:47:87:23:8a:51:87:16:
dc:4f:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:33:54 2025 by rpki-client