Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: AYEMU1lfLslUq97WBXN8VclPsgFlUUIvOZlCUtcNJKY=
Subject key identifier: 92:9C:61:71:CF:10:7F:BC:43:02:0A:5C:EC:F9:25:06:5F:A2:A4:DA
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 0197B88F0E8704B8363DDB749717D26B5D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 0C4C
Signing time: Sat 28 Jun 2025 22:01:12 +0000
Manifest this update: Sat 28 Jun 2025 22:01:12 +0000
Manifest next update: Sun 29 Jun 2025 22:01:12 +0000
Files and hashes: 1: Gn-kDrXRDHHv43q56kRDHjj8q1w.roa (hash: Tu0d5Ny8jllovtj2b3OGyqwDSE7dzSUuYk4aE5120L8=)
2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: ebzstAOeQiBEYes/XzC2YR2g94T1rxilIGjp7VZahig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:0e:87:04:b8:36:3d:db:74:97:17:d2:6b:5d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Jun 28 22:01:12 2025 GMT
Not After : Jun 29 22:01:12 2025 GMT
Subject: CN=929c6171cf107fbc43020a5cecf925065fa2a4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:ff:96:56:3a:3b:28:4e:2b:ed:41:a4:e2:
bd:32:03:52:22:51:e6:43:06:1c:c6:08:f7:07:8b:
62:a0:ea:f5:92:04:3a:d9:3b:8d:01:89:96:16:73:
69:ee:af:de:5b:92:25:46:ff:34:3c:44:98:d9:f6:
e0:be:59:51:4a:1e:d5:33:8e:f3:06:99:56:d6:06:
6e:53:74:bd:09:37:2d:25:d3:14:e9:c0:46:d0:c1:
5c:66:24:ab:1c:bb:3e:3e:6a:90:c0:a8:04:df:e6:
9a:60:13:7e:31:b8:b5:f8:72:0b:2f:19:27:2b:46:
4c:b1:d9:3c:da:bc:f8:df:ad:0a:bc:8c:6d:c3:c9:
6b:b0:a9:b9:23:2a:c0:b9:51:19:77:66:12:88:07:
66:34:f4:88:93:79:61:f9:4c:d9:e0:17:d5:f2:f9:
b9:ce:a5:e3:56:00:7e:95:fa:b9:9b:74:2a:d8:88:
c9:52:ea:66:9e:12:d9:7c:b5:b9:bc:39:b2:97:10:
14:3a:8a:2f:5f:92:e4:c4:f7:87:76:dc:b6:e0:b9:
3b:ab:69:bd:77:7e:56:2f:26:b3:09:b0:24:16:16:
b8:b4:3c:cf:f5:6d:a0:4b:a8:4c:ce:ea:02:da:d2:
c1:57:f8:cf:65:9e:95:b0:97:cf:fa:98:41:dc:43:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:61:71:CF:10:7F:BC:43:02:0A:5C:EC:F9:25:06:5F:A2:A4:DA
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c3:95:94:0a:d1:50:89:08:8d:e4:ee:ee:31:f8:c1:2b:ff:
43:9d:b7:d3:17:98:49:a2:d1:4b:92:18:d8:5f:e2:c0:bd:47:
e0:3f:91:1e:c6:ba:23:12:53:67:e8:90:bc:8a:23:ee:db:cf:
2d:19:ee:ce:cc:ba:cc:a8:72:d9:f4:26:b2:88:34:7c:56:6c:
ae:26:44:ed:dc:b9:9a:c9:c0:cb:d3:31:04:aa:1f:b9:09:81:
82:80:4a:65:42:b3:de:79:8a:af:67:b7:de:c9:ac:ae:29:ff:
5a:6b:92:8a:45:d9:23:f4:6e:8e:7e:86:44:2d:07:10:54:d0:
e6:a3:65:39:a4:a3:b1:7c:d2:99:c8:83:e7:d5:e3:26:a8:d0:
8a:04:27:69:27:2d:a7:8f:ff:39:03:56:91:80:d4:6b:aa:89:
cd:eb:68:16:77:ad:47:97:48:e0:e0:2f:cc:87:b8:66:c8:1b:
18:1c:58:ba:ef:5b:0c:20:fb:e0:10:41:20:fa:77:bd:d3:9b:
a3:4a:8b:55:22:cc:e1:5a:fb:3a:73:a1:73:54:c3:1a:72:cf:
14:59:57:20:cb:5a:84:c7:fa:a5:e5:65:dd:5e:61:ed:a4:36:
28:51:ea:e2:47:0d:db:79:d4:35:40:33:7c:49:dc:5f:49:15:
d0:6b:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:02 2025 by rpki-client