Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: f74LKksYw/J5JHdVoF+uK8fdqWx9/6ly93tFZxvitdU=
Subject key identifier: 83:22:89:9B:B8:BD:27:1B:F5:B1:41:61:98:42:BA:8F:DF:AD:74:48
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 0197B7EA5F850637A6A5ED0D092EE84E6A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0606
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: 6J4DZaGK1OKHg8p8efZkAPUk3eCLE1I/H+imX0oLzgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5f:85:06:37:a6:a5:ed:0d:09:2e:e8:4e:6a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=8322899bb8bd271bf5b141619842ba8fdfad7448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:19:fc:42:f3:f5:1a:86:19:4a:32:09:9f:92:
19:c5:76:97:5d:51:22:4c:86:a8:fe:ae:79:28:1c:
0a:dd:db:75:f9:d9:fe:8b:a3:87:79:d9:c9:31:4e:
68:14:6e:83:f0:f0:af:9c:de:78:c7:ac:65:36:cd:
7d:a6:ea:1b:bc:66:6b:d8:cc:93:df:a2:60:f9:7d:
c9:2c:87:60:78:dc:e4:63:20:12:71:70:2a:d1:54:
16:2c:2d:02:88:be:64:33:cb:fd:b4:25:08:64:23:
b0:3b:bb:a5:0b:ba:3f:69:e7:69:5d:df:85:76:9e:
33:3f:c1:09:da:ca:80:8c:fc:40:a6:66:4b:95:a5:
e0:4c:bf:4c:e8:55:ad:a1:3e:9e:3f:d1:05:a4:8a:
82:ba:5e:b2:70:68:ef:6b:68:f6:5e:79:2e:44:98:
8a:97:e6:b0:9f:2c:d4:ea:f4:96:f5:ce:15:bd:58:
4b:97:c2:34:86:01:09:88:22:af:c6:c4:e8:e7:cf:
76:3b:92:67:7b:75:dd:5a:f9:f8:6b:69:51:2b:d6:
e7:be:40:03:fe:ed:dc:cd:1a:5f:95:fc:05:d0:4f:
91:18:fd:ce:66:9e:a7:cf:c0:60:5d:3d:f9:16:4d:
82:b6:a2:8a:87:ab:6d:0d:83:91:b6:8b:9e:28:38:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:22:89:9B:B8:BD:27:1B:F5:B1:41:61:98:42:BA:8F:DF:AD:74:48
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e5:e3:2d:cd:dd:22:63:4b:cd:c8:e4:fd:b5:57:58:9d:8f:
38:d2:08:df:0c:5c:bf:2b:31:28:d5:0f:43:a4:60:80:4b:2f:
9d:74:7b:ea:21:f2:34:de:2e:cf:49:5c:ff:b8:0e:86:76:35:
80:2c:a0:c4:58:70:6e:30:c3:9a:e1:18:9f:56:24:64:30:0d:
fe:c1:6b:b4:ee:8b:79:a5:00:5b:de:4d:6f:a4:8c:1d:fb:93:
70:50:ab:a1:a7:b5:b6:11:8f:5f:da:38:98:ad:57:05:b6:42:
57:2d:f4:6b:c3:c5:b8:34:b0:15:ab:97:06:b8:59:69:f7:8a:
18:1f:b6:ab:58:e3:96:83:8d:a7:33:74:20:8a:82:d0:2a:ee:
15:5a:18:d5:43:c5:00:ce:db:57:c0:dc:06:b3:e9:32:47:de:
b6:f9:3c:99:c6:bd:34:a9:53:33:e9:a1:b6:83:03:03:dc:2c:
5d:4c:b2:00:59:a0:3f:02:a1:c2:7d:4e:8a:dc:c4:9e:5c:b3:
f0:5a:c7:42:3d:84:cf:71:91:5f:c7:20:bd:c8:d5:77:7b:2a:
61:81:77:76:0c:15:e4:35:29:2b:08:e8:e2:54:66:8e:44:12:
b0:c2:93:46:51:6f:0c:5c:49:43:e0:48:c3:7b:27:5e:f3:f3:
c4:09:61:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:54:01 2025 by rpki-client