Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier: zK6GyEsReIFy7IJmb5+rdxJtK162wP3c1ydQmMBn3kM=
Subject key identifier: 03:E5:2A:8C:1C:C3:B3:1B:97:23:10:90:AD:61:FD:89:22:0D:52:8F
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial: 0197BAB420E1E99124BB2F71A6A1EB47B6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number: 02C6
Signing time: Sun 29 Jun 2025 08:00:56 +0000
Manifest this update: Sun 29 Jun 2025 08:00:56 +0000
Manifest next update: Mon 30 Jun 2025 08:00:56 +0000
Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: 5rEA2/c/V5mrofkNg8PoHLx5dKNsmuj8VbYySSZwJ8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:20:e1:e9:91:24:bb:2f:71:a6:a1:eb:47:b6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
Validity
Not Before: Jun 29 08:00:56 2025 GMT
Not After : Jun 30 08:00:56 2025 GMT
Subject: CN=03e52a8c1cc3b31b97231090ad61fd89220d528f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:a1:c7:ad:dd:09:e7:2d:fa:7e:f9:ff:f0:
ad:a0:ac:54:21:eb:28:49:ff:fd:01:7c:4a:ca:e9:
e4:d0:3b:e1:2a:47:25:19:28:11:01:d8:9d:07:02:
69:a6:12:f5:18:52:33:53:28:5f:e7:18:b1:a7:57:
e8:27:21:d4:77:3b:48:a2:98:c3:a8:e0:11:76:57:
4a:2f:f7:02:f7:6f:f4:7d:c8:b5:49:1b:5e:fa:aa:
e2:57:2c:fd:f5:86:8b:5a:b2:30:53:82:fd:1e:af:
28:51:c3:d7:03:ab:ef:4c:0b:15:b3:d6:be:65:30:
f6:bc:bb:53:f6:eb:9f:2f:6d:d9:30:be:15:25:98:
2e:ef:c6:26:17:1f:21:d0:ba:93:00:db:3a:f2:b6:
84:1f:da:65:f5:d3:cd:ae:39:8f:ea:95:e9:03:21:
df:de:66:3d:35:a9:b2:4f:1c:88:a4:cc:01:d8:78:
05:cd:2e:13:4b:b7:ce:d9:2b:84:33:48:b9:ab:9e:
f7:7d:90:e0:38:8d:d0:53:8b:29:57:31:aa:cf:bf:
91:be:60:bb:30:1f:b6:36:98:64:45:f1:6d:a1:e4:
e7:55:28:c1:e0:0c:5e:df:e9:48:0b:ee:36:45:b4:
29:b0:64:19:00:b2:0d:7f:ef:86:ee:66:41:ea:9c:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E5:2A:8C:1C:C3:B3:1B:97:23:10:90:AD:61:FD:89:22:0D:52:8F
X509v3 Authority Key Identifier:
keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1e:6d:98:fa:64:9e:75:69:62:30:4c:cf:af:3f:ab:ac:3a:
2c:34:fb:90:05:da:a4:26:28:cb:b2:53:60:b4:16:bd:d2:a9:
56:a5:e4:63:55:ca:e5:0a:1e:61:87:31:c0:67:78:9d:4c:6c:
f5:5a:9f:46:13:70:8d:76:e4:59:8e:e5:e7:72:8f:be:99:bc:
c1:6a:41:f3:0d:5b:4a:e9:2e:f5:2f:b2:45:66:c1:b7:bc:94:
77:5f:e2:ac:da:1d:98:33:bd:b9:50:8c:59:4d:7a:ae:8f:5d:
23:51:fa:87:10:af:fb:d4:6c:a2:14:f7:7a:e5:88:5a:56:ea:
a4:6e:24:88:29:e8:33:4a:a7:9b:68:c4:ab:bc:16:32:74:06:
61:3f:25:0a:63:a0:ee:df:e5:d9:16:cd:b7:d4:b0:34:a7:93:
bb:d0:c7:5f:fd:c2:d5:46:9e:71:42:fd:10:62:25:d9:81:90:
70:5a:bb:fc:32:ac:96:11:78:41:1f:9f:76:ec:b5:7a:5e:da:
40:a7:73:c9:46:05:c2:25:9d:79:2d:1a:be:2a:05:9a:d0:03:
7e:d3:83:f5:3c:f1:73:f7:2e:ca:4a:2b:08:07:d0:bd:68:6d:
fe:93:f3:c3:6d:d2:bd:06:2e:b6:1b:f6:f9:7e:67:23:a6:1b:
c4:21:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:11 2025 by rpki-client