Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: DGkzfYu5jANFVU6FHmUNRD4gHKS8+up+b8ngoWDfwG4=
Subject key identifier: DC:4F:28:3B:E9:AD:C9:37:34:A8:EC:E7:F2:4A:E6:20:D9:96:9E:9F
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 0197B7EADCAD10F3579BB19AB20CAE6E4E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 0E74
Signing time: Sat 28 Jun 2025 19:01:51 +0000
Manifest this update: Sat 28 Jun 2025 19:01:51 +0000
Manifest next update: Sun 29 Jun 2025 19:01:51 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: /YNkJrfsjlSrb+uGLP8IxWkdf+nNAmkYXbTIpasYB2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:dc:ad:10:f3:57:9b:b1:9a:b2:0c:ae:6e:4e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Jun 28 19:01:51 2025 GMT
Not After : Jun 29 19:01:51 2025 GMT
Subject: CN=dc4f283be9adc93734a8ece7f24ae620d9969e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:de:33:2e:f2:40:57:00:8a:18:1e:3b:e5:
a8:1d:7b:2c:ee:0e:da:07:79:91:26:0d:99:ba:01:
d2:11:07:05:a7:44:e9:8d:fc:ae:48:38:76:0c:ab:
44:a7:18:d7:56:de:57:89:fb:95:c4:53:49:80:15:
d1:ec:ea:4f:8b:69:f3:31:a0:d7:70:c7:51:4f:bb:
6e:bb:76:ff:3c:af:e2:8c:d1:74:c2:c4:14:cd:a9:
ff:67:f3:0e:f1:4d:e7:2f:2a:14:21:f3:6e:be:d8:
4d:a5:3f:61:7c:fc:d0:80:47:6d:92:86:52:8b:d1:
cb:bf:09:8c:af:0f:79:fb:e2:6d:15:5c:0f:9a:11:
b5:c6:65:da:8c:c7:66:68:f3:cb:dc:ba:ba:0c:04:
e1:5a:ed:c7:12:30:38:b8:ae:b7:d3:02:c1:4a:0e:
0a:59:94:32:e4:c5:65:69:25:7b:e9:1b:c5:f1:5f:
cc:90:17:f0:b4:eb:36:ab:ea:f8:b9:ba:9a:03:57:
78:6d:a4:7e:8d:cb:0b:38:56:ee:a0:5d:c8:01:09:
97:10:45:f4:90:34:e4:c8:a2:60:f2:c2:89:d3:8a:
3d:ca:5f:e6:1a:a3:a6:70:84:ff:42:b2:f8:1f:0f:
ce:d5:de:36:19:0b:2a:2d:ab:af:ee:5a:7e:06:b9:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4F:28:3B:E9:AD:C9:37:34:A8:EC:E7:F2:4A:E6:20:D9:96:9E:9F
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:f7:dd:a7:a4:48:ad:13:ad:fd:33:9f:68:e1:79:71:2d:ef:
b6:52:8b:78:84:40:6b:7b:30:d5:6c:d1:58:37:98:0d:77:7a:
6f:73:da:65:3e:70:47:2e:5f:1a:89:ce:92:77:ae:77:9b:54:
6f:0f:f3:bc:4a:b6:05:d3:90:b5:ec:f3:6f:19:92:3f:24:67:
19:86:a9:77:2b:44:af:db:cc:fa:df:35:7e:3e:fc:36:2d:24:
af:22:20:a0:e7:31:f9:b3:09:6d:c8:69:8a:44:a7:b4:1b:4e:
0e:6c:91:d5:98:2e:b2:93:b9:ba:52:df:d5:5e:40:5f:46:e2:
b4:f7:03:33:93:20:be:f0:f4:d4:d4:1f:a7:e9:ef:50:b7:05:
43:5f:59:cb:cb:34:ed:bb:90:51:21:5e:f6:f2:86:79:7a:86:
3f:fb:ea:91:7a:61:25:ab:f8:a4:1a:05:cf:f2:d5:df:15:04:
07:b2:94:0a:14:e7:ac:64:9d:09:75:bc:87:9c:ba:a0:2e:e1:
4d:4d:70:23:fa:33:ba:ae:76:96:79:76:15:cd:88:24:3a:7f:
de:89:12:2b:39:87:d6:8a:a5:26:4f:c7:d5:10:00:cb:79:fc:
b9:23:e2:48:d3:17:4c:6d:24:49:e6:b8:fb:c6:8b:a2:d6:d1:
53:4b:ef:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:13 2025 by rpki-client