Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
File: u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json)
Hash identifier: mPdlOEJXl7MioV5i+51V5UDeToNPj1dlP4bdYFTeE1M=
Subject key identifier: DB:C5:1F:D9:48:32:27:E5:D5:95:93:7D:ED:97:FC:43:1A:2F:DE:93
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial: 0197B82110A086F55E68ED3504ED26515A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
Manifest number: 021C
Signing time: Sat 28 Jun 2025 20:01:04 +0000
Manifest this update: Sat 28 Jun 2025 20:01:04 +0000
Manifest next update: Sun 29 Jun 2025 20:01:04 +0000
Files and hashes: 1: 8Ul6EUbN8nuEp2NFtsX4pXAa4zQ.roa (hash: u/XlwlTOr3fAGl4u3pexiEWOyuIeoTxqTTJ1V4qZ94U=)
2: U35k_6mHZDW7ja-KdEmuh0b9HC8.roa (hash: /YyzICWvOSy7AUnfxntu8KYaBOI2O+xiSNMqk4LtmgY=)
3: ipGUG_FnLVv5_qna9Q8OOQESFEo.roa (hash: bBouB+XiilYfz2SXBgYGlCjeKLkIpw0oZUoVzWF6Um0=)
4: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: Y56Xvdl1HmmcjlAfzoykqOMca/LT7wtFBSuvxBkN89M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:10:a0:86:f5:5e:68:ed:35:04:ed:26:51:5a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
Validity
Not Before: Jun 28 20:01:04 2025 GMT
Not After : Jun 29 20:01:04 2025 GMT
Subject: CN=dbc51fd9483227e5d595937ded97fc431a2fde93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:e0:4e:00:1e:55:72:1e:51:aa:d3:73:d9:
c0:b2:97:6f:eb:56:7e:c3:7b:46:a7:52:08:24:78:
bc:0f:a4:37:ec:a2:d8:f3:3d:9d:41:7e:08:bf:af:
6e:14:cf:51:30:79:6b:8a:2b:aa:37:2e:88:b4:0c:
f8:cb:21:21:88:92:a8:33:9c:13:84:5d:d2:58:7d:
ec:73:fd:f1:bc:76:fb:80:07:80:f2:14:15:e1:e3:
b9:19:fc:5e:76:3c:91:74:b7:9a:bc:b5:40:a9:21:
22:c8:35:20:07:67:53:c6:7a:40:c4:56:c5:82:29:
ec:9f:11:b7:ca:d1:76:69:00:3b:99:bf:09:5d:52:
27:7a:36:41:37:90:17:8f:d4:00:9c:6f:78:34:d1:
f0:61:70:e4:bd:cc:6d:ae:70:d9:12:61:ee:ea:35:
af:42:9c:21:4a:10:5b:b3:89:b3:17:34:97:c7:fe:
01:58:4a:e0:69:89:b6:58:b6:bf:27:31:c8:b6:b2:
29:45:4f:6a:60:65:46:ec:c4:84:87:8a:ce:7a:a5:
75:8a:a6:bd:e9:80:cf:e4:9b:70:f7:72:44:83:52:
e6:9a:3b:ef:fd:ff:fc:35:a7:71:01:ed:77:30:4c:
1d:91:d3:d9:b4:fc:60:9c:45:5a:4f:1c:9d:70:bf:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C5:1F:D9:48:32:27:E5:D5:95:93:7D:ED:97:FC:43:1A:2F:DE:93
X509v3 Authority Key Identifier:
keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b2:7d:70:d7:e4:25:a8:e5:96:b0:ca:b2:d2:46:9e:4d:3e:
2c:50:32:96:71:74:d3:90:52:44:b5:0c:de:2a:68:a1:fc:4e:
69:26:be:15:42:55:4b:dc:69:7b:12:4d:c3:57:bb:26:3f:6e:
12:b1:53:2d:7d:83:59:b3:05:0d:f5:31:f4:65:22:d6:84:b6:
9d:6b:7b:b7:0c:39:0a:4d:a6:74:24:31:6c:02:4a:18:9c:d4:
e3:54:43:44:a6:d0:20:7a:d1:f2:44:13:64:6f:2a:0c:d0:1b:
0b:1e:f5:46:7b:24:25:da:a2:2e:4e:29:a9:11:64:83:8e:ab:
cc:7e:bf:ed:35:ce:56:b9:5a:5e:7d:da:93:e0:3f:f1:90:9d:
53:82:ed:ae:66:a1:3a:15:41:8e:34:e1:7c:e9:79:bc:5a:2a:
a7:0e:a2:75:0d:b5:e4:4f:6c:b4:9d:7d:aa:19:e2:dc:87:0d:
b8:9b:68:03:a4:f7:67:30:40:ea:0b:8e:16:f9:a4:d1:48:f4:
39:d8:38:ae:87:9f:24:e1:d3:e1:78:a5:d8:9e:61:8c:6f:78:
e1:d1:bc:9f:23:c0:2f:4a:cc:8f:3a:63:17:44:7c:a6:4d:ed:
e5:f5:d0:57:80:f7:c3:c6:b3:c8:e8:1c:62:16:87:09:83:76:
dd:3c:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:35:42 2025 by rpki-client