Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: CijHsudgZV+p+MAzOAxXXh7LRR/0I3BLdEmymygacfA=
Subject key identifier: FD:88:12:0C:81:71:69:38:B3:45:B2:44:A5:CA:A2:02:67:88:AA:9D
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 0197B70E739DE2B1EC03A620A21E8F93363A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0E21
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: LCK7H30Oq/kL/EBfBFBed741LHLdgS5LH7RyaOXl+E0=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:73:9d:e2:b1:ec:03:a6:20:a2:1e:8f:93:36:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=fd88120c81716938b345b244a5caa2026788aa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:59:2e:3a:46:3e:81:45:ad:6a:a8:af:57:
b2:de:29:42:86:6a:4e:27:e3:03:c7:88:12:79:a3:
bc:3f:9f:d7:5e:0f:53:00:de:ee:78:5b:19:4c:a5:
64:1a:70:f9:69:33:7c:70:6a:76:76:80:13:35:50:
d6:c1:ad:12:10:ac:53:35:71:a8:87:f1:b5:98:30:
26:72:05:5e:64:15:54:33:a7:ea:86:ed:e5:8b:73:
3f:34:c8:c5:43:c4:04:fd:0e:9c:83:da:a3:99:75:
78:33:eb:13:a9:a3:8b:d8:db:52:b9:77:7b:8a:01:
d4:00:0f:44:f2:da:46:7d:b7:c5:28:7c:08:1f:72:
b1:4a:a6:c2:a8:f3:c9:02:3d:fe:14:74:81:77:91:
b0:35:c7:98:3e:59:8c:cf:18:03:6c:f1:4d:16:63:
c6:68:7b:dd:31:90:6f:56:30:b6:92:22:0b:e9:55:
e9:28:ab:40:a5:99:b8:44:ae:cf:71:23:49:97:d4:
5c:f5:7a:8b:38:60:90:0d:5c:46:7d:18:3a:6c:a0:
53:13:ce:08:1f:54:89:de:d2:81:c6:a1:45:d3:f8:
b5:f8:2e:79:0e:2e:2f:ab:93:dd:d3:2d:95:5a:97:
34:d4:1c:48:90:8d:db:35:28:a6:d0:c3:fc:78:22:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:88:12:0C:81:71:69:38:B3:45:B2:44:A5:CA:A2:02:67:88:AA:9D
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:69:dc:75:95:20:3d:60:96:0c:0f:6d:5c:e5:29:19:eb:fa:
c9:c8:c4:9c:8b:c7:2c:93:fa:fb:98:52:4e:30:e3:4b:a0:c3:
fb:19:0b:b3:32:14:ee:5b:44:ac:9c:b2:6f:6a:e0:7e:f6:6b:
05:f7:9f:dd:90:9a:76:f5:a1:7e:19:bd:e2:a5:3a:8e:46:12:
de:11:37:10:6d:67:2f:67:f2:ab:4e:65:eb:ab:86:5f:f7:92:
9d:05:96:73:d2:30:1e:79:c5:7a:3e:eb:31:65:ec:42:21:b0:
33:fb:ba:c9:0d:0a:47:ae:76:9e:d4:3d:01:1d:2f:fb:a5:68:
95:7e:4d:17:a5:51:4a:dc:1e:78:bb:80:1c:f3:3a:4a:55:98:
31:0c:bf:77:4e:40:38:37:23:94:77:96:e9:be:56:56:43:e0:
77:8a:7a:4e:a7:b4:fb:b3:1e:d2:8f:f4:4f:a0:9e:7c:47:a3:
a8:72:a2:57:c8:fe:d5:c9:93:23:04:c0:1c:d2:cf:a8:88:5c:
11:58:a9:c6:13:15:c3:05:9e:28:bb:47:1a:8f:8a:c9:69:1e:
57:83:ab:1d:55:bf:d6:ca:79:76:96:f1:da:18:1e:b6:69:f5:
d5:f4:a2:dc:fd:48:b5:ca:bd:d7:7e:82:53:c4:84:ad:d7:89:
16:48:b0:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DnOd4rHsA6Ygoh6PkzY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1
ZDBhNTEwHhcNMjUwNjI4MTUwMTA3WhcNMjUwNjI5MTUwMTA3WjAzMTEwLwYDVQQD
EyhmZDg4MTIwYzgxNzE2OTM4YjM0NWIyNDRhNWNhYTIwMjY3ODhhYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1FZLjpGPoFFrWqor1ey3ilChmpO
J+MDx4gSeaO8P5/XXg9TAN7ueFsZTKVkGnD5aTN8cGp2doATNVDWwa0SEKxTNXGo
h/G1mDAmcgVeZBVUM6fqhu3li3M/NMjFQ8QE/Q6cg9qjmXV4M+sTqaOL2NtSuXd7
igHUAA9E8tpGfbfFKHwIH3KxSqbCqPPJAj3+FHSBd5GwNceYPlmMzxgDbPFNFmPG
aHvdMZBvVjC2kiIL6VXpKKtApZm4RK7PcSNJl9Rc9XqLOGCQDVxGfRg6bKBTE84I
H1SJ3tKBxqFF0/i1+C55Di4vq5Pd0y2VWpc01BxIkI3bNSim0MP8eCJV1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2IEgyBcWk4s0WyRKXKogJniKqdMB8GA1UdIwQY
MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt
Mjc5OTA2ZWI1Yzg1LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1
LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWncdZUg
PWCWDA9tXOUpGev6ycjEnIvHLJP6+5hSTjDjS6DD+xkLszIU7ltErJyyb2rgfvZr
Bfef3ZCadvWhfhm94qU6jkYS3hE3EG1nL2fyq05l66uGX/eSnQWWc9IwHnnFej7r
MWXsQiGwM/u6yQ0KR652ntQ9AR0v+6VolX5NF6VRStweeLuAHPM6SlWYMQy/d05A
ODcjlHeW6b5WVkPgd4p6Tqe0+7Me0o/0T6CefEejqHKiV8j+1cmTIwTAHNLPqIhc
EVipxhMVwwWeKLtHGo+KyWkeV4OrHVW/1sp5dpbx2hgetmn11fSi3P1Itcq9136C
U8SErdeJFkiwQA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:56 2025 by rpki-client