Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: rRtuVUpsVFK2kr9dkDu1Hkju+UDxxDzX5Td8k5jgaBo=
Subject key identifier: FD:75:29:78:6A:DE:E3:40:B1:AB:0F:9D:D8:B1:62:F2:11:CD:9F:DF
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 0197B6D74FCA3518269C43AEC61E0316C63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 0425
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: zijUi6mUB554mk9L3iLQu936mU5d0itmfQL41LyQJ68=)
2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4f:ca:35:18:26:9c:43:ae:c6:1e:03:16:c6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=fd7529786adee340b1ab0f9dd8b162f211cd9fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:18:ec:b9:67:1d:80:d3:aa:54:67:55:30:
20:7c:42:a3:65:72:1f:55:1f:c7:29:8b:9d:60:3d:
3d:a2:60:34:0f:bb:f0:c1:a4:a5:79:80:7c:70:ee:
d0:ea:4e:8d:15:2f:e1:7f:47:2f:56:2d:67:df:4e:
b6:3c:8d:87:65:59:88:2e:72:8a:28:73:b7:2b:83:
3d:f1:b5:d7:20:40:d4:11:c6:c2:ed:8d:68:82:bc:
eb:fe:37:5e:8a:0d:38:a7:c9:ac:03:3a:9f:42:60:
15:12:00:2f:a9:5e:93:88:b0:45:30:3d:f4:76:e7:
fe:a9:41:95:2a:d3:b9:4a:4e:e6:48:64:ec:b0:a4:
c4:4d:34:f7:87:dc:e6:ec:d4:a9:65:4f:17:25:1b:
3a:66:4a:fb:43:4a:f0:87:bc:9b:fa:aa:b9:13:2e:
d0:3d:a6:f9:84:43:c2:48:d0:b7:26:e0:a1:1a:d4:
da:c8:d8:fa:a8:ac:54:34:c5:be:c0:20:78:ce:83:
ab:3c:b1:a6:95:5e:3f:36:5d:6c:ed:8c:76:53:62:
74:16:94:3d:48:b6:bf:b4:16:2b:fa:76:cb:c3:8f:
00:ad:44:cd:58:25:dd:ff:9f:4e:07:60:da:db:0a:
52:b2:14:d8:40:99:67:e9:fc:50:92:f9:4b:c8:6e:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:75:29:78:6A:DE:E3:40:B1:AB:0F:9D:D8:B1:62:F2:11:CD:9F:DF
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:02:44:3f:06:7e:6c:09:58:ba:cb:c9:63:b3:ca:ee:74:a8:
a0:85:fa:c8:0f:5b:74:c5:6c:d2:d6:db:b8:f4:b3:a6:67:2f:
9a:0b:35:3c:9f:be:b8:08:66:d0:86:11:c4:fa:29:41:1a:5c:
fc:7a:93:39:b2:eb:7e:75:c9:ec:66:7d:92:ca:c4:b4:40:2e:
5e:e2:22:2a:b7:56:50:6d:4b:52:bc:d5:76:24:d8:7b:c2:8c:
06:0b:40:34:37:a9:5f:a9:37:e4:a3:ac:d3:02:a0:30:9a:c9:
e2:8b:b5:ee:6b:51:48:aa:2c:a2:0f:bc:be:d1:a2:8d:5e:88:
6a:60:f6:d8:7b:b5:66:b6:28:53:31:aa:f9:81:c2:d4:eb:ec:
83:52:58:84:f6:65:82:c4:1a:44:ab:48:85:0a:29:98:09:af:
58:ef:2e:be:2c:ab:8f:24:f5:dc:60:51:26:00:a7:b2:31:1d:
80:7a:27:32:e3:54:b0:06:86:ec:50:a1:46:6b:cf:d7:44:37:
36:c6:cb:75:e0:af:a4:02:a0:2c:94:ad:10:56:6f:44:62:58:
02:df:04:83:49:4c:9c:62:d7:48:4f:3d:49:4f:b4:01:1c:3d:
b2:88:76:80:41:5d:4b:14:5a:8e:d8:72:14:ce:21:e9:fe:ea:
9c:a9:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:59 2025 by rpki-client