Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: PKjCps1iox/qdU+4FyhhgxX5GL8dS35pXuIxFakm4vM=
Subject key identifier: 4E:AB:7D:17:D0:5D:50:3F:0F:88:54:2B:76:FE:41:62:D4:5F:64:44
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 0197CA271FE9289C5B587D7A14EC79886D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 15C6
Signing time: Wed 02 Jul 2025 08:00:51 +0000
Manifest this update: Wed 02 Jul 2025 08:00:51 +0000
Manifest next update: Thu 03 Jul 2025 08:00:51 +0000
Files and hashes: 1: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=)
2: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: 3Ty6Z1tFnovnHYwId1ukwWMu9mWSbFneuvXPHcqXx5Y=)
3: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:1f:e9:28:9c:5b:58:7d:7a:14:ec:79:88:6d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jul 2 08:00:51 2025 GMT
Not After : Jul 3 08:00:51 2025 GMT
Subject: CN=4eab7d17d05d503f0f88542b76fe4162d45f6444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:1d:0d:12:91:2a:5c:89:9f:4c:2a:f1:b3:
cf:e3:96:b4:7f:1d:e9:e6:ad:1c:1c:d6:4c:c8:ca:
43:cd:2b:22:77:6d:43:ec:ac:75:c1:30:b6:32:b7:
a1:60:18:87:8c:3f:13:e7:be:f0:ce:b7:28:c3:f6:
22:76:2f:3b:77:3b:e6:7f:30:3c:84:38:d3:ca:fc:
59:45:18:91:fd:78:b6:82:f0:91:d0:e0:90:45:88:
d5:32:77:90:5f:fd:be:dd:00:a2:87:f1:62:32:c9:
ca:40:eb:42:7a:c5:db:f3:6e:30:90:c3:fa:fe:c2:
14:c4:83:30:df:95:46:4e:ae:12:69:ed:ed:65:de:
08:6e:9c:0e:dc:c6:00:85:e4:ef:5c:57:66:8f:bc:
65:ad:8a:76:6c:e6:59:e1:06:78:c0:09:f2:21:bf:
95:ea:ad:a0:89:73:cd:f5:02:a2:13:4b:2c:d1:1d:
6e:90:b9:f4:a4:e3:45:8f:ff:85:5b:49:6d:f5:b4:
61:66:5b:df:01:b3:49:4d:4c:66:29:f3:52:7d:fd:
84:ef:a0:a1:94:8f:90:05:86:5c:79:b8:3d:73:af:
7a:b8:e0:f0:2c:10:c2:fb:55:cd:db:69:f4:8b:bb:
f9:db:03:bd:a9:00:f5:69:2a:bc:08:62:b6:8f:86:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AB:7D:17:D0:5D:50:3F:0F:88:54:2B:76:FE:41:62:D4:5F:64:44
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:f9:87:d5:2b:d8:91:ae:d5:2c:87:04:6b:76:d0:75:af:
d0:97:f0:8a:f1:1f:d2:4d:08:27:61:ce:44:22:70:8a:55:05:
56:c7:b6:3a:25:df:0d:f4:8e:73:f3:3e:f5:ee:59:45:ca:e4:
3b:e8:99:50:96:60:96:0a:43:c6:d4:a1:56:75:63:7e:bb:3d:
a3:a3:28:e4:9a:e3:d1:ae:1f:46:83:9a:ed:04:ed:80:a8:21:
8b:f2:c8:09:bd:df:38:42:8e:0e:59:12:31:b3:ea:3a:1e:de:
7b:65:03:4e:a7:6a:3f:d7:36:30:49:c3:16:86:16:06:0b:cf:
a9:56:88:2a:a6:e6:79:e8:92:62:9a:74:22:fe:48:74:66:7f:
e7:58:ec:77:8d:25:61:ac:3b:f2:5c:7b:c1:ba:64:df:1b:dc:
dc:d2:f3:fc:ec:2f:e5:7e:34:a6:19:78:0a:ad:65:17:6c:ce:
93:76:51:ef:0a:73:34:6c:ac:f5:56:07:e2:a3:7d:f5:ac:d1:
5a:e1:57:f9:8d:99:99:8e:a7:4f:e8:6a:4c:90:1c:b1:c9:8e:
4b:30:8e:b7:97:d9:b6:3a:8c:2f:3c:be:81:4b:45:63:e1:d6:
ac:57:3e:40:4b:c7:ca:12:20:ba:b8:da:43:e3:ce:a2:f1:43:
f7:c7:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:15:43 2025 by rpki-client