Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: +Q0vhTb7txIbMbYwgzB2jEI8Lz4MzKZeSACWB3M+eRY=
Subject key identifier: E3:B2:20:AC:40:E1:51:97:CF:4F:95:51:D0:DD:3D:6C:61:A6:B9:AF
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 0197B70F3D40F37252598E86B411E0E93061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:58 +0000
Manifest this update: Sat 28 Jun 2025 15:01:58 +0000
Manifest next update: Sun 29 Jun 2025 15:01:58 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: SrH+QGXY6V5l9xGdg95Dr1lTMxgkffLXGVeXGUO8Phc=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3d:40:f3:72:52:59:8e:86:b4:11:e0:e9:30:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Jun 28 15:01:58 2025 GMT
Not After : Jun 29 15:01:58 2025 GMT
Subject: CN=e3b220ac40e15197cf4f9551d0dd3d6c61a6b9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:ab:03:2a:bc:90:59:e1:5e:bd:42:f1:1e:
60:70:60:46:6d:7f:38:61:9e:b8:a9:8e:bf:7f:d5:
cc:cf:63:f8:50:60:af:67:43:1c:7e:ed:48:41:c7:
59:8a:6e:37:96:24:3b:bc:cc:65:03:cc:cf:d2:7c:
b8:ca:5d:c8:d4:33:48:e5:e9:2f:54:bc:59:81:4c:
26:17:85:20:99:43:cd:6f:19:b6:0f:48:a6:1b:b5:
35:b6:f6:a1:72:95:00:a7:04:77:11:e7:5e:6f:65:
a8:90:ee:60:22:59:a5:da:93:21:76:80:58:3b:e1:
2d:3f:0d:90:b2:63:e5:c0:08:b0:d5:20:5c:43:c7:
ee:96:2d:f9:e3:b5:d0:00:d8:19:90:b0:21:a7:c1:
c0:81:bd:55:ef:6b:47:70:40:72:b4:e9:d3:0f:32:
6d:5e:0b:4a:dc:52:86:31:fd:9a:71:f6:f2:6d:95:
0e:06:2e:a7:56:32:54:ac:d3:b3:f2:e0:d5:6b:5d:
b7:41:fd:dd:55:e7:7c:e4:52:88:ed:de:b7:b3:f8:
e6:0d:b9:39:29:5b:d5:26:bd:78:7c:36:fb:66:a5:
2d:b0:7a:a7:b7:64:71:2f:2a:23:fa:a0:18:d9:20:
a3:df:ef:d7:7b:bf:69:56:b9:75:bf:41:50:07:73:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B2:20:AC:40:E1:51:97:CF:4F:95:51:D0:DD:3D:6C:61:A6:B9:AF
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bf:a2:e7:3c:03:ee:14:73:8a:18:c9:8f:df:45:f8:d9:cd:
7d:80:20:e7:35:54:ff:2c:5d:15:72:b1:c5:5b:4a:7f:0b:20:
f3:b6:03:4c:c5:0e:dc:3e:ac:fb:49:1e:79:5f:19:6e:37:de:
1a:fb:e8:67:e4:cd:61:39:0b:58:79:9a:91:a5:80:e7:c9:47:
74:39:0d:28:c4:ec:60:c0:89:ee:30:a8:65:f6:81:e2:96:86:
59:bf:c9:71:8f:f0:ea:fa:c8:8a:c9:c4:8a:f5:de:7d:b2:eb:
4c:00:71:7f:e8:8f:aa:af:1b:a4:8c:0d:0a:37:06:28:06:30:
64:2e:27:44:43:6b:0c:e4:9f:d9:27:b6:7e:97:8d:49:aa:2b:
fc:c1:eb:ea:22:e8:9a:12:07:be:0e:e3:02:b3:b7:42:fe:44:
38:e0:bd:bc:bd:a3:c9:83:1a:8e:cb:80:f0:14:55:ea:2f:ba:
37:bd:8c:fc:1d:86:30:15:89:a1:5a:86:d2:25:ce:46:1a:e3:
8b:cb:3d:a7:0e:f8:be:da:5a:07:4f:ea:e0:c8:93:9c:fd:8c:
6d:ac:96:74:7c:ea:62:17:af:48:42:53:e4:e3:e2:4f:b2:29:
a6:d4:f3:07:4f:f1:fc:42:69:66:00:ef:de:52:ef:7d:9e:a8:
ce:7e:37:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:09 2025 by rpki-client