Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier: n30aFxTEuy5x6t/Xu/kCjgiCzGGNkFEaR3CCqwe1hp0=
Subject key identifier: FB:DE:85:03:BB:CA:E7:29:23:92:21:4C:A3:86:B3:B2:68:E5:4D:EE
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial: 0197D2BCC1CB197F7E298CCBF3C72C8AC390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number: 0528
Signing time: Fri 04 Jul 2025 00:01:14 +0000
Manifest this update: Fri 04 Jul 2025 00:01:14 +0000
Manifest next update: Sat 05 Jul 2025 00:01:14 +0000
Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: JL0sFCBzlcmJ5XlQF0k76zpwQF5DuoCatiMuBMOXAvE=)
2: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (hash: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:bc:c1:cb:19:7f:7e:29:8c:cb:f3:c7:2c:8a:c3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Validity
Not Before: Jul 4 00:01:14 2025 GMT
Not After : Jul 5 00:01:14 2025 GMT
Subject: CN=fbde8503bbcae7292392214ca386b3b268e54dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:cc:c5:f9:d1:d9:87:a9:32:b2:f4:e0:25:
87:7e:1a:f8:6a:be:35:ef:32:3b:5e:d0:60:73:da:
3f:ee:88:4d:c1:31:54:72:63:5c:a4:37:31:a1:5d:
12:03:c7:6d:e7:3d:a3:ee:ff:f2:89:f8:f6:b1:00:
61:5c:72:3e:21:a9:8d:3f:a4:6b:2f:3c:3d:e1:57:
3a:41:1e:87:c0:fe:33:b1:42:b5:c9:79:ea:af:85:
a9:da:50:8e:0f:86:7a:27:cd:41:9a:59:af:36:a6:
b0:3b:ad:9b:53:7d:90:fe:91:a8:92:d0:43:28:f0:
2e:97:a9:91:f7:6a:3e:c8:b9:2f:be:e7:99:03:79:
1c:ac:68:12:c6:59:dc:85:99:24:23:04:cc:21:89:
9b:58:fd:bd:b9:f6:cc:f1:a7:08:7e:28:2c:88:e8:
f4:4b:10:b3:60:a3:fa:c4:ef:8f:8c:27:5d:e0:dd:
d4:ae:16:0d:1d:18:88:1a:84:12:23:27:77:f9:9c:
88:8c:bc:d4:2b:e6:1b:c5:07:09:2a:de:9c:dd:b9:
01:0c:c5:66:ed:64:34:c6:fc:07:e1:5b:83:ac:ed:
14:1a:c4:b1:e3:d3:25:d9:9f:d0:0d:f8:e7:90:41:
3c:4f:4d:70:29:aa:db:d8:22:68:f0:0d:67:43:bd:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:85:03:BB:CA:E7:29:23:92:21:4C:A3:86:B3:B2:68:E5:4D:EE
X509v3 Authority Key Identifier:
keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ea:34:6d:03:04:8c:cc:c0:cb:32:68:8e:b9:e2:27:d2:26:
f3:5b:ac:fc:f6:65:a8:0f:5b:84:72:29:4b:1b:7d:fd:89:7e:
75:eb:12:10:ed:8f:fa:05:29:c2:f3:e4:39:bc:73:0e:e8:95:
b4:e6:16:41:2d:58:c7:3c:85:e7:64:db:42:78:32:e2:10:61:
21:e9:ed:4d:50:d5:0a:3e:59:56:63:e9:23:53:37:f5:f5:d3:
b6:b0:a7:c4:bd:6d:9c:69:72:b8:a8:27:b5:f8:83:dd:6c:83:
43:55:d3:34:af:0e:90:25:c3:52:dc:40:59:41:12:49:89:bf:
d3:34:91:2f:f1:f7:e0:d2:09:bc:08:c7:ac:ec:a5:75:96:bf:
57:38:5a:99:00:f4:e6:6f:94:6e:de:7d:c1:dc:5c:a5:54:0f:
5e:06:84:24:30:ac:d4:52:6c:ca:3a:d6:25:d1:fa:a3:f8:b9:
32:30:c4:70:41:d4:95:46:5e:5a:b8:b2:50:75:9e:6b:71:7a:
69:35:45:47:09:21:85:27:57:30:c2:a7:93:45:df:0a:4f:43:
22:9d:4f:f3:73:9e:5f:78:23:aa:e4:4b:52:fe:14:5c:57:66:
4d:ff:7c:87:43:4e:26:46:2b:b5:f5:d4:21:03:c1:b5:f9:a0:
7c:80:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:52:43 2025 by rpki-client