Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
File: oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json)
Hash identifier: Dhzh19A9pE1E+EN0MpDC11Pw5z5Fa19dPsQwip2N0Iw=
Subject key identifier: 5F:2E:CF:38:31:9B:CA:E2:84:15:B3:31:D7:7E:5C:5E:70:16:81:85
Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
Certificate issuer: /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Certificate serial: 0197C312A612CA022BAE1CF3575D05B922B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
Manifest number: DE
Signing time: Mon 30 Jun 2025 23:01:08 +0000
Manifest this update: Mon 30 Jun 2025 23:01:08 +0000
Manifest next update: Tue 01 Jul 2025 23:01:08 +0000
Files and hashes: 1: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: Cvrj5Xr7oJdr09H7qy8FcdAbOWtAQZZZ1jDOFWntouE=)
2: sT1fnBcommpqYG28Wvu_VZnisuk.roa (hash: bgoEmCHH3xYPTJAnecz6TfwkrZtOdQNWaY0Or/vvOhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:12:a6:12:ca:02:2b:ae:1c:f3:57:5d:05:b9:22:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Validity
Not Before: Jun 30 23:01:08 2025 GMT
Not After : Jul 1 23:01:08 2025 GMT
Subject: CN=5f2ecf38319bcae28415b331d77e5c5e70168185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:b2:f8:b5:5c:e0:f7:b9:4d:10:89:f3:ff:
28:f7:0b:13:67:14:61:ba:0d:97:05:34:da:51:f8:
64:32:48:8f:38:a3:ae:a7:b1:ce:cd:c9:39:01:a6:
d5:13:15:1c:d8:5a:58:62:39:3b:f5:9a:fc:ba:7d:
87:33:cb:c7:f3:2c:18:b6:67:e2:6e:0c:df:35:44:
54:12:21:8f:9f:dd:9a:40:37:25:f6:82:ea:8f:0e:
e0:95:4b:f0:81:fd:78:40:d5:1a:39:c4:c1:f1:5d:
00:4c:c7:7d:85:68:c1:cc:8c:8d:7b:18:24:bb:cb:
43:a3:fc:eb:91:10:54:18:e0:fa:2b:ff:1e:d9:01:
42:e5:0c:51:9c:65:4b:26:12:44:fc:98:59:a9:15:
73:d4:8a:45:01:6b:d6:aa:81:c4:2c:a2:c2:59:87:
23:9b:29:e6:c3:4a:02:f0:46:fe:b7:6d:56:71:58:
2c:42:d4:0a:a7:47:16:e4:d4:e0:ba:65:c5:6a:38:
4d:06:5b:00:d4:c3:06:e1:68:bf:0c:38:6d:9f:37:
f4:8a:b2:b8:1a:26:74:80:a9:d6:20:d6:ab:ee:1c:
a9:16:77:18:e7:d5:42:c9:a3:ed:90:1e:f8:2b:e2:
59:40:60:2f:00:c5:2f:45:e3:05:87:eb:4e:07:30:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2E:CF:38:31:9B:CA:E2:84:15:B3:31:D7:7E:5C:5E:70:16:81:85
X509v3 Authority Key Identifier:
keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:03:ce:a7:fc:3a:5a:4d:b6:1b:2a:fb:07:b8:94:5e:e1:44:
b0:21:17:63:59:42:78:01:58:a9:71:17:b4:ab:88:10:ea:bc:
98:c8:53:65:a5:28:9b:97:14:6d:15:62:d2:8a:92:ee:43:73:
7b:5c:37:61:f4:88:62:3a:61:67:18:d8:c1:84:95:e3:ab:95:
38:cf:41:ba:e3:9d:47:2a:c1:b5:e5:81:e1:bc:15:49:8b:d7:
1a:36:09:5d:07:4e:ac:49:10:42:31:93:d8:de:ce:f1:c5:95:
5e:5a:83:cd:e6:b8:16:38:5c:51:dc:a1:85:54:56:72:eb:cc:
d1:c8:81:d6:a5:c1:6f:40:07:11:0b:73:d7:87:89:e8:1b:14:
8a:76:22:2b:4e:86:62:90:17:36:aa:71:18:1d:2d:94:ea:c0:
d3:72:ac:3b:8d:12:9c:6b:d7:7c:c5:1c:46:fb:f2:99:a5:e1:
fd:fe:89:41:f8:e2:6c:5a:0d:ad:5b:75:14:9f:a4:0a:b9:f1:
03:47:cf:5b:79:56:a0:3d:67:7a:ca:d0:6f:fc:dd:19:95:bc:
d4:37:10:75:1a:d0:d2:89:d2:72:68:04:6a:4a:6f:10:48:79:
ad:d3:88:e3:28:32:af:c8:30:97:e5:9e:f3:30:4e:33:f7:1c:
95:92:0e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:29:05 2025 by rpki-client