Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: o6LJjPCSje7bOZoX93h3Uh24M+3e1Led/PHRA994PeM=
Subject key identifier: DA:2B:69:71:CF:02:89:6C:40:E9:C9:7C:11:1F:DA:E6:28:37:C0:46
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 0197C048F5B81D04F0A2AE87A4296EFB3F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 15B7
Signing time: Mon 30 Jun 2025 10:01:36 +0000
Manifest this update: Mon 30 Jun 2025 10:01:36 +0000
Manifest next update: Tue 01 Jul 2025 10:01:36 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: X5CcFroOVE9WpJAHByJGU0TVc087krwXPyCGPYWiPek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:f5:b8:1d:04:f0:a2:ae:87:a4:29:6e:fb:3f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: Jun 30 10:01:36 2025 GMT
Not After : Jul 1 10:01:36 2025 GMT
Subject: CN=da2b6971cf02896c40e9c97c111fdae62837c046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:f8:cd:8d:2a:24:8a:18:c7:07:ca:30:8d:
bf:3a:b5:0d:a9:12:f7:1e:66:d8:dd:fc:c2:1a:31:
b4:66:19:02:d7:11:bd:7c:59:5a:1a:ad:a6:6f:87:
f0:ef:99:2f:c9:a4:05:5b:3a:f8:48:ec:9b:22:3c:
c5:6b:ac:14:88:5c:e3:b0:23:f8:77:4e:5d:d5:e6:
cc:fd:28:eb:f0:13:e3:2f:b2:03:ad:25:52:b8:9b:
b0:55:12:01:13:61:52:57:d7:6f:f9:71:eb:6c:78:
86:dc:91:a1:a6:04:ad:07:6a:ab:62:1b:cf:a6:b9:
2b:2a:90:a5:b9:08:b3:36:d6:60:29:bd:72:ba:22:
77:f6:a0:e2:81:fa:d9:8b:44:65:3a:6e:3b:d6:dd:
00:e8:21:50:74:97:3a:a3:f6:41:c5:4e:7f:3d:b1:
77:47:08:48:d0:2b:6d:05:9e:54:da:c0:f9:a0:ad:
63:51:d7:8d:85:11:c6:21:3b:54:8f:ee:5e:cc:ca:
6e:a3:87:e4:04:3e:3e:4c:0c:d4:27:02:c0:49:73:
99:4d:be:31:37:cc:75:08:4f:b6:a8:f1:a2:63:09:
17:ad:4d:8a:24:76:b7:f9:5e:82:a0:99:f4:6c:90:
7d:e8:83:6c:5d:d1:65:68:3f:06:5c:b3:5b:25:1f:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2B:69:71:CF:02:89:6C:40:E9:C9:7C:11:1F:DA:E6:28:37:C0:46
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f2:f4:1a:4d:6d:4a:97:32:8c:cf:5a:71:1f:db:b3:eb:2f:
dd:78:6a:f2:d1:80:32:0c:cb:e0:d7:51:15:ec:68:a3:8e:8d:
17:2d:77:40:e9:91:c5:0f:14:cb:55:e6:91:ec:88:47:94:ff:
de:83:96:cf:b8:cc:bf:2b:b6:c3:a5:2f:6c:09:3e:51:b1:04:
65:08:b8:70:86:a8:5a:60:b7:05:d9:b5:61:63:d1:a5:ee:b1:
1e:c4:46:15:d6:34:53:e7:d7:4f:e8:f3:4e:cf:a4:2a:e6:3d:
7b:4e:98:3a:2f:b2:75:0c:af:18:5f:12:e2:a0:60:73:91:a2:
39:e7:6a:9b:17:1e:93:14:65:f1:43:99:15:9f:0f:fb:5e:ef:
7e:c0:ab:29:d9:25:da:f3:5c:2e:2c:11:fa:f2:26:1f:29:09:
e1:ba:3f:57:ae:7b:6c:e0:92:03:ef:55:01:59:1f:1b:b3:a6:
49:43:2d:ab:fc:07:a8:3d:70:87:0c:88:48:24:35:34:6f:a9:
95:61:36:7e:b6:b3:a4:c2:58:38:4f:69:91:bc:9b:ec:01:1e:
84:ad:a9:94:40:b6:37:96:94:24:19:e8:e5:f9:54:ca:67:8e:
ef:99:07:51:38:3f:21:ac:df:a0:5c:e2:8d:28:ea:39:28:a9:
1e:b2:ab:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfASPW4HQTwoq6HpClu+z8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTI0NDYyNjk3YTI3ZmU3YWI5NGI2YWNhOTA2NzkzMWQ5
MjEwMmYwHhcNMjUwNjMwMTAwMTM2WhcNMjUwNzAxMTAwMTM2WjAzMTEwLwYDVQQD
EyhkYTJiNjk3MWNmMDI4OTZjNDBlOWM5N2MxMTFmZGFlNjI4MzdjMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V74zY0qJIoYxwfKMI2/OrUNqRL3
HmbY3fzCGjG0ZhkC1xG9fFlaGq2mb4fw75kvyaQFWzr4SOybIjzFa6wUiFzjsCP4
d05d1ebM/Sjr8BPjL7IDrSVSuJuwVRIBE2FSV9dv+XHrbHiG3JGhpgStB2qrYhvP
prkrKpCluQizNtZgKb1yuiJ39qDigfrZi0RlOm471t0A6CFQdJc6o/ZBxU5/PbF3
RwhI0CttBZ5U2sD5oK1jUdeNhRHGITtUj+5ezMpuo4fkBD4+TAzUJwLASXOZTb4x
N8x1CE+2qPGiYwkXrU2KJHa3+V6CoJn0bJB96INsXdFlaD8GXLNbJR+xoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoraXHPAolsQOnJfBEf2uYoN8BGMB8GA1UdIwQY
MBaAFKFSRGJpeif+erlLasqQZ5MdkhAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYTc2ZmUtNjExOS00ZGUwLWJmNGIt
NGIxYWY0MTRmZDAwLzEvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYTc2ZmUtNjExOS00ZGUwLWJmNGItNGIxYWY0MTRmZDAw
LzEvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwPL0Gk1t
SpcyjM9acR/bs+sv3Xhq8tGAMgzL4NdRFexoo46NFy13QOmRxQ8Uy1XmkeyIR5T/
3oOWz7jMvyu2w6UvbAk+UbEEZQi4cIaoWmC3Bdm1YWPRpe6xHsRGFdY0U+fXT+jz
Ts+kKuY9e06YOi+ydQyvGF8S4qBgc5GiOedqmxcekxRl8UOZFZ8P+17vfsCrKdkl
2vNcLiwR+vImHykJ4bo/V657bOCSA+9VAVkfG7OmSUMtq/wHqD1whwyISCQ1NG+p
lWE2frazpMJYOE9pkbyb7AEehK2plEC2N5aUJBno5flUymeO75kHUTg/IazfoFzi
jSjqOSipHrKrzA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:05:47 2025 by rpki-client