Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: B+GJGfMs3IbQZgJ7vs/pgLJocNTEcV9liqTkiRjjyjY=
Subject key identifier: 23:DD:21:E7:2F:2E:1F:DC:56:F1:DF:3D:F4:E3:36:51:6A:63:A5:C8
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 0197B9A14840864DB9E645E031947C480A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 8F
Signing time: Sun 29 Jun 2025 03:00:44 +0000
Manifest this update: Sun 29 Jun 2025 03:00:44 +0000
Manifest next update: Mon 30 Jun 2025 03:00:44 +0000
Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: Z7UvTCyKnOWCQm0QRGJUD/lETn1fHPQOPLrORRbXLVY=)
3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:48:40:86:4d:b9:e6:45:e0:31:94:7c:48:0a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Jun 29 03:00:44 2025 GMT
Not After : Jun 30 03:00:44 2025 GMT
Subject: CN=23dd21e72f2e1fdc56f1df3df4e336516a63a5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:49:b8:15:4d:a5:70:c2:f8:91:9b:d7:17:
13:af:93:89:37:42:c7:1d:e4:63:2f:8b:d5:40:15:
97:a2:bc:1e:ba:2b:b3:e2:4c:de:6e:52:f5:ed:3e:
86:b7:04:53:c8:02:62:cb:15:c1:dd:9e:c1:05:f4:
af:8a:cc:6e:a9:09:57:a2:45:e7:ab:16:a9:de:e0:
e0:f9:70:13:8e:62:4d:ef:3a:f8:0e:04:63:fc:e5:
99:fa:2d:a3:60:c6:f0:2c:0e:b4:cc:c4:24:e9:ea:
b4:0e:f4:cd:bf:bc:19:3e:5d:76:df:42:f9:75:0b:
c3:23:12:b3:18:e1:fa:ca:e2:8e:3c:b4:d2:b3:0d:
cb:db:e6:b3:ac:82:77:ae:aa:0c:ba:ed:32:33:73:
9c:04:5e:50:8d:1a:d7:60:57:95:8d:08:68:10:f9:
99:92:de:d3:29:f8:10:fd:56:9b:04:10:a3:13:d1:
bf:d6:14:68:27:73:71:5c:12:bf:70:05:8c:17:5a:
87:a0:0c:b8:77:34:76:8c:de:5e:cd:d2:86:bc:11:
f3:02:cd:19:73:fc:76:43:ce:d9:38:5d:eb:ce:cc:
f4:42:d5:cf:7f:39:f8:00:c6:ca:e2:6f:03:5d:62:
f5:ff:de:a1:17:3f:56:f1:a3:e9:48:e1:16:b5:a7:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:21:E7:2F:2E:1F:DC:56:F1:DF:3D:F4:E3:36:51:6A:63:A5:C8
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dc:a7:05:5b:ac:45:b2:be:5b:ec:37:33:23:61:2f:0a:46:
3c:30:4e:33:25:51:9f:c9:34:85:77:fc:ec:70:20:eb:2c:49:
92:00:be:f5:a8:25:a4:db:ef:d3:54:52:da:20:54:c6:33:16:
bd:45:41:ea:f0:a6:6f:19:f4:d5:b7:77:de:8b:14:43:7e:ba:
54:ee:e2:78:a8:da:05:65:4a:df:4d:8b:29:28:5c:05:3b:3b:
e4:42:d7:5b:75:18:2e:2a:8e:b6:53:83:17:2e:7d:06:a6:20:
b8:d4:ac:5d:6c:52:1d:45:0c:7b:97:6c:b7:e1:b7:c2:d6:eb:
eb:6e:28:94:2f:39:85:60:de:d6:f2:50:94:55:9a:78:b2:e4:
c0:2f:91:64:af:4f:89:50:8c:e8:be:0f:86:b7:6b:5e:2f:87:
f1:46:4c:33:d1:62:18:04:e5:1a:6e:0d:9f:aa:22:07:79:41:
85:06:f3:e5:92:7c:b1:36:b0:eb:10:be:19:d6:28:16:8e:2e:
f6:e8:cc:c3:46:52:14:e5:b1:64:13:bf:71:b8:ef:21:40:cd:
cc:09:57:f9:e0:23:bd:9d:9d:90:61:92:11:a6:d8:c6:d8:5d:
f3:7a:ac:c5:bc:98:61:28:14:bf:28:0d:df:8a:71:6b:be:9d:
7d:ca:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:27:36 2025 by rpki-client