Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: Bn3U94e8FMKmvylexvasS9R76r/fgdLX6UOaZBmxXfE=
Subject key identifier: 57:7C:1C:9E:B4:52:A6:70:07:CC:97:21:32:4A:6D:6A:D5:1D:1F:E2
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 0197C15B8F5E0A9B8DB4FE9C7E4C500C6277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 117A
Signing time: Mon 30 Jun 2025 15:01:32 +0000
Manifest this update: Mon 30 Jun 2025 15:01:32 +0000
Manifest next update: Tue 01 Jul 2025 15:01:32 +0000
Files and hashes: 1: epViL3MVi9bWXcuzA24cAMVu98I.roa (hash: SrcEH3xgjkVSJRtnVeoxwKETukrMGUr8rXBzqe4u9C8=)
2: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: b4GlVNHTZqL/HqnxNADuk/GQMyw8cvNMLsv9nP7U+QQ=)
3: t21KiufosQo5FokIl-zuM5q85cQ.roa (hash: ORk8mRTrURZ5LhEnK810DaoqajLoQtqn9GMcGAQKm3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:8f:5e:0a:9b:8d:b4:fe:9c:7e:4c:50:0c:62:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Jun 30 15:01:32 2025 GMT
Not After : Jul 1 15:01:32 2025 GMT
Subject: CN=577c1c9eb452a67007cc9721324a6d6ad51d1fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:06:89:7c:7f:bc:44:c3:21:ea:ff:e1:44:
bd:3e:36:5f:93:e6:08:f3:c3:21:9d:10:24:6f:6e:
a5:87:d4:64:8a:8b:fa:7c:f0:bd:c0:b9:d1:f0:ed:
16:56:f3:35:97:c3:4f:fd:6f:31:ca:fe:c5:ff:5c:
b7:46:09:be:9d:79:a8:11:82:49:85:f5:47:a8:65:
ef:be:c2:01:b3:4b:58:d9:41:b8:fe:2c:82:f7:b0:
94:01:1a:6f:3b:8c:28:cd:30:ed:7e:ed:79:db:f9:
f8:70:93:ad:a5:b6:97:5f:50:62:bb:c8:e4:47:97:
06:c1:23:b9:54:7b:22:f7:12:16:cd:c3:0d:0e:96:
48:fd:2e:0b:7b:36:40:bf:68:28:8b:9f:06:f3:0a:
39:9f:13:16:6b:d1:53:a0:d8:81:eb:ab:55:e3:ae:
3f:6c:1b:fc:8b:46:3f:01:90:82:19:8d:da:54:34:
38:64:5d:b1:8e:75:86:fb:79:e4:77:27:b1:99:ee:
fd:ca:a6:31:6c:17:06:00:09:51:d6:cc:5c:ec:5b:
df:cf:40:c9:bc:07:71:c2:e6:00:9a:49:6e:60:8d:
af:fe:a5:68:8c:13:e3:cd:e9:7f:1e:e5:36:1f:68:
d1:63:e1:35:43:b0:4b:96:30:0a:18:28:1a:16:84:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7C:1C:9E:B4:52:A6:70:07:CC:97:21:32:4A:6D:6A:D5:1D:1F:E2
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2f:47:78:16:87:00:e0:52:68:95:6a:4d:6d:a8:24:1b:1c:
df:7b:57:91:cd:a6:7c:3e:49:d9:11:23:75:d7:d9:dc:82:c3:
ed:6a:de:13:b2:1c:f0:9c:94:17:f9:c5:e8:69:d6:ae:ad:75:
ef:7e:15:55:15:34:c0:15:59:a0:6c:d1:1a:a2:ed:03:dc:33:
74:4f:39:fa:3f:be:cd:90:78:24:b8:d7:d5:7e:18:ef:55:8a:
2f:0d:81:e2:d7:e0:ab:11:ea:3f:76:88:2c:7b:c6:fd:e7:9f:
c3:47:b1:d4:87:35:28:4a:f8:4c:24:74:dd:41:c2:bc:1e:3f:
8c:4a:86:4f:8e:ff:8c:ba:89:8d:d2:5a:e7:06:06:77:5d:e2:
28:6c:b6:45:e4:fa:8f:90:62:98:f2:b2:a4:7d:9a:d9:28:7d:
4d:6c:90:73:c5:ee:d7:08:0c:37:3f:0f:c4:37:ca:94:dd:9d:
27:ac:eb:e7:18:4d:8a:cc:2b:de:ac:0d:9e:bb:f3:1e:56:1f:
d3:32:c5:c7:17:9a:f1:c2:62:73:9f:ba:31:ba:76:05:4d:38:
e4:4b:b0:75:bf:a3:9a:c2:27:8b:dc:33:22:a1:46:78:6d:5d:
a2:e8:94:53:41:ba:02:4c:b7:3c:01:77:92:d2:35:f4:90:23:
b4:33:75:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:27:31 2025 by rpki-client