Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: LUP1yLLV4gWUVCTL7u8aWzV+S9r9BZiAKpILckBTlUc=
Subject key identifier: F1:D4:B6:F2:96:F0:A2:04:4A:FD:A4:C9:53:E8:6C:B8:CA:2B:7C:41
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 0197B7B30BD67A43810F498CC0A575001366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 14AA
Signing time: Sat 28 Jun 2025 18:00:53 +0000
Manifest this update: Sat 28 Jun 2025 18:00:53 +0000
Manifest next update: Sun 29 Jun 2025 18:00:53 +0000
Files and hashes: 1: 8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa (hash: 6ZZJ4QGkpbcq3hIOVhgvm79JeONPbl5ojVu1zQKUgnU=)
2: LiZI8DHKt2cl3ZGAwMQs7hzSWLY.roa (hash: YZv7B4YQ18wMpKvjotc88oKaw7AFVr3K3Ln8F9meSnc=)
3: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: jtJpCI647mss6jG/6CGCaQgeVTABcK5RtUkpIqaoM78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0b:d6:7a:43:81:0f:49:8c:c0:a5:75:00:13:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Jun 28 18:00:53 2025 GMT
Not After : Jun 29 18:00:53 2025 GMT
Subject: CN=f1d4b6f296f0a2044afda4c953e86cb8ca2b7c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:ab:4e:6d:60:5e:a5:ae:bd:86:b6:1b:18:
46:04:03:53:16:5e:e7:02:65:ee:13:c6:b1:1f:7e:
ed:4c:bc:0f:6d:5d:9d:f3:de:33:37:32:af:df:dc:
4a:6a:93:56:78:6e:16:0b:17:b7:59:7c:d2:9d:65:
22:14:a0:f3:54:26:f9:11:68:20:37:eb:dd:d3:40:
22:10:26:41:22:92:e7:d5:df:69:ff:dd:95:a0:01:
3c:d3:29:53:ad:bf:cb:98:dd:dc:6c:57:e5:f7:4e:
d1:8d:77:5d:ed:d0:d8:9c:47:95:a6:ed:2b:b1:2e:
aa:04:cb:d2:40:84:68:27:f6:2b:cd:06:5f:db:73:
24:50:a1:4d:f3:8c:9e:85:a1:bb:9c:8a:13:53:52:
ed:73:e8:ad:27:7c:6a:2e:a8:cd:fe:60:c5:3b:62:
48:76:b7:56:9e:4a:8a:ec:50:27:38:03:07:64:a3:
06:21:bd:da:9d:42:65:a2:fe:83:de:5c:36:39:83:
c5:a9:16:26:a3:a4:85:e9:16:2f:03:18:d7:eb:db:
23:3f:1d:3d:b9:ad:4d:97:45:64:84:65:2c:64:a0:
1c:72:14:d8:1f:bf:82:a3:77:40:83:ae:0d:c7:c9:
e3:c5:82:86:bc:85:c1:de:52:f8:a3:0a:77:d0:cc:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:B6:F2:96:F0:A2:04:4A:FD:A4:C9:53:E8:6C:B8:CA:2B:7C:41
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:98:51:78:48:d4:1f:64:f9:c9:a0:1f:84:44:a8:fb:2d:c0:
56:46:a9:68:dc:15:52:dd:22:16:55:6a:b5:70:25:93:99:ba:
de:40:c7:95:72:1b:ba:1c:68:1d:12:4c:52:2c:08:59:1a:75:
2f:ca:22:bf:05:a4:e7:94:3b:98:a5:77:58:59:cf:b2:d9:5d:
91:c3:a2:7b:28:18:c6:87:9a:aa:a6:92:c0:56:77:4c:f5:af:
db:36:0d:3b:25:e4:ea:84:59:91:d2:77:8a:14:0f:8f:46:1f:
71:ba:d6:d5:4a:79:07:da:bb:57:80:f8:69:c4:aa:46:8a:81:
21:6b:0f:39:80:30:97:24:77:96:e0:a5:46:99:02:d6:eb:78:
09:0e:dc:59:f4:10:aa:c5:c3:6a:07:5c:18:5e:bb:15:d2:3d:
97:45:92:54:69:fb:eb:51:fc:c9:33:f5:01:db:d9:d2:62:be:
9d:49:e2:6f:f8:62:0d:c9:00:12:6b:b1:10:f6:7d:8c:34:8a:
17:98:a4:40:22:66:cf:bd:7f:df:20:d5:e9:1f:d8:02:f8:1c:
8f:75:08:37:6b:f4:1a:eb:24:d6:ed:5d:27:c5:37:14:04:3c:
7e:1d:86:e2:43:17:4f:82:ac:7b:a4:78:07:89:f5:20:3f:04:
43:b5:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:25 2025 by rpki-client