Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: xDBwpLQsQtseA+27TbbaPoDkVdKskOAJz9kGRBXudHM=
Subject key identifier: 1E:89:12:D9:B1:48:8C:1A:41:84:8E:59:1A:0A:81:3C:DB:D2:54:2D
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 0197B6D77B1A755E5EE4CD21DEB29EDB3A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: wtPj/QYpBL5f6Drc6nUY1HRfUt1FdvN376GE3rztOKI=)
2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7b:1a:75:5e:5e:e4:cd:21:de:b2:9e:db:3a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=1e8912d9b1488c1a41848e591a0a813cdbd2542d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:35:b7:4b:54:e2:7e:1a:42:3b:e0:8d:9e:
d0:3b:0a:a9:87:f4:2e:4a:29:1c:fa:19:83:bc:83:
a6:15:fd:ea:81:b6:81:42:bf:24:ff:4b:63:a8:d7:
b1:d3:b7:ad:7d:a9:26:81:0d:87:dd:a6:2a:06:4f:
c5:7a:f6:60:a7:14:84:20:fc:b3:6a:16:ff:51:7f:
b7:80:8c:2a:58:37:de:32:c4:e4:53:95:38:d1:2d:
d4:ab:e7:34:9d:6e:1c:ec:8e:f3:c8:55:b4:d5:bf:
df:c9:97:e2:de:9e:f8:63:81:d4:18:dd:b7:39:6e:
4d:7a:07:50:1d:5a:bc:05:c6:e8:e8:86:92:e2:b1:
b0:9c:c5:82:39:39:4e:08:54:6b:7e:5e:3a:1b:d9:
3a:42:ba:14:00:ec:b8:04:fc:15:90:6e:67:91:ed:
da:c7:96:a9:f3:22:6b:ad:21:61:6c:c3:d8:b6:37:
25:5a:c4:3c:e5:f1:da:7c:e1:4a:51:92:e4:f4:02:
c8:c7:51:90:95:e3:a9:6f:86:3e:5e:4c:5b:6d:4c:
73:e8:1c:b7:24:1a:4e:17:af:f4:9e:0e:d3:06:5e:
2a:d4:fc:04:5b:5d:3e:e5:db:39:a2:b7:42:79:09:
0a:07:64:48:c7:c8:f6:d7:8c:78:e8:e9:8f:de:2c:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:12:D9:B1:48:8C:1A:41:84:8E:59:1A:0A:81:3C:DB:D2:54:2D
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:45:6f:b7:78:a7:fd:a3:9b:65:1c:c7:a0:87:41:87:8c:95:
4c:b5:fe:7a:6b:59:86:3e:dc:1b:2f:1f:ce:49:c2:7a:35:18:
c1:70:d3:22:75:6b:0a:79:08:53:7e:be:a5:ee:5c:2d:a8:0b:
a3:66:b7:4c:c8:7b:7c:b8:ce:89:1c:87:df:67:b1:6d:f6:d1:
07:12:f6:97:cc:2e:e5:dc:86:ec:63:3b:45:9f:a7:f7:0b:2c:
09:5a:01:88:c8:74:53:df:3f:9f:fd:d3:b4:ff:65:e2:fa:ec:
cc:1c:e3:19:1c:0d:6f:7a:39:cd:90:48:77:4a:4f:ea:dc:5e:
27:71:d9:7d:69:29:47:ab:b3:8a:bb:68:c2:62:6b:8c:17:74:
a3:40:ed:74:9e:9f:b1:b1:d8:98:d2:44:09:bf:c9:be:7b:b7:
26:f4:b9:03:97:a6:1b:4e:d8:97:05:b8:39:e0:d6:bb:8e:15:
08:4e:83:b2:a1:65:57:0d:04:df:9c:44:5f:d7:91:66:8b:38:
c8:ac:ae:25:7c:f9:f2:cc:39:05:5b:01:19:10:85:5b:9b:0d:
c8:9d:0b:b3:50:82:96:a4:a2:e5:84:85:5d:89:a7:37:49:9d:
9e:4b:3e:8a:0e:b9:6b:63:68:33:41:f7:bd:5d:7f:76:ac:45:
92:eb:f8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:00 2025 by rpki-client