Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: WmFxmPmjgUGWueBC7te7fhPVPwHG4bJmQfuNUPUR45w=
Subject key identifier: 58:81:73:82:36:53:C8:63:86:CF:81:76:12:47:A5:2F:97:91:A4:33
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 0197B6A24BEDB23CA6D19F182FBDD14E06CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:02:58 +0000
Manifest this update: Sat 28 Jun 2025 13:02:58 +0000
Manifest next update: Sun 29 Jun 2025 13:02:58 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: nDd/q6Rp/Gc0ma83aiOtvlKaVq5+hPPK3qY2ne4cvEM=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:4b:ed:b2:3c:a6:d1:9f:18:2f:bd:d1:4e:06:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Jun 28 13:02:58 2025 GMT
Not After : Jun 29 13:02:58 2025 GMT
Subject: CN=588173823653c86386cf81761247a52f9791a433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:92:a4:af:9f:85:04:60:a8:26:09:b0:01:
21:5f:32:d2:41:56:ac:67:b8:8f:a9:4c:34:2d:4c:
53:8b:45:90:d4:9e:a1:2e:97:c6:12:03:4b:04:6b:
5e:e8:39:fc:77:b9:7b:14:33:04:a9:b3:ef:95:e7:
9e:b8:b9:e2:1f:29:4d:a6:4b:47:ed:83:b6:5c:df:
b5:fe:fd:19:c7:66:0a:56:63:c7:9f:df:7f:d0:3e:
a5:71:c4:c5:31:1d:31:e8:8f:4d:18:92:d4:f1:91:
85:91:ec:de:1a:0d:18:dd:26:64:ce:07:09:17:24:
a5:00:1c:26:6d:0c:14:4c:f5:0f:30:0e:0a:f3:5b:
b0:34:6d:72:9e:24:60:c2:eb:78:0e:ac:01:03:fa:
47:77:74:39:a2:e2:5d:90:0f:30:4c:4c:a6:20:38:
c5:a4:86:4e:b7:4c:eb:9c:53:dd:54:74:25:ef:5c:
2b:2b:77:62:9a:f0:62:e9:41:94:89:7e:d8:c9:5a:
50:b6:ce:ad:c1:42:3d:19:df:6b:5d:b9:be:5d:e5:
51:1d:1c:4a:7c:f7:66:f7:23:e5:f7:a0:6e:dd:21:
3f:8e:cf:59:fc:9f:7f:ed:03:b6:4b:07:e1:32:d6:
fe:04:6f:70:36:25:3f:75:5c:66:cd:ec:01:fa:e6:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:73:82:36:53:C8:63:86:CF:81:76:12:47:A5:2F:97:91:A4:33
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b5:e8:70:38:60:6a:49:13:98:19:91:51:f0:bd:43:52:b3:
ba:5a:20:9a:ba:59:ba:51:e3:4a:3d:bd:61:1e:80:16:4d:f9:
b5:19:3f:f6:c5:ea:b8:72:5e:73:32:0a:25:98:37:c6:7c:38:
38:91:25:ca:08:a6:c1:eb:83:5c:e7:ea:ba:92:63:8a:d4:64:
cd:e8:66:f5:86:42:78:2a:02:35:6e:4c:d1:52:7d:18:6f:8f:
de:2b:f0:d5:55:b1:db:ca:c0:2b:1c:91:06:c6:5b:b7:84:15:
ac:a4:8d:6b:6e:89:43:c3:34:dc:f2:a6:26:a4:1b:a3:9d:97:
87:f1:61:ac:d0:bb:03:59:ee:9d:50:b4:1e:bb:c3:52:ff:da:
a6:3f:a8:d8:27:43:06:73:98:d2:be:a8:b4:92:e3:55:69:e4:
cf:7b:d5:48:0e:27:74:81:35:00:58:5f:a9:3e:1b:f9:45:7d:
68:2a:1a:fd:cc:b6:a0:74:f7:c1:d7:e7:a1:71:67:4a:6f:9d:
be:e6:16:7e:c1:d8:b8:c6:76:da:03:a2:fc:fd:af:9f:5d:fc:
76:1a:f4:76:5c:95:98:0f:08:cb:e5:ed:ee:19:c9:88:eb:b6:
16:79:13:a0:d8:6b:32:a4:50:8e:81:3a:9c:39:d7:93:8d:79:
e0:cc:de:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:09 2025 by rpki-client