Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: XwbUHyOgDn1/a3EUGDCHwo48KQVwmBqB5kXXs2Qd0Ag=
Subject key identifier: 66:9A:DE:21:A8:08:DF:A5:0F:02:5B:3B:3F:AE:C1:D0:E0:5F:70:6C
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 0198D472B111E9EE13244E9C7B31EB09F7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 05E7
Signing time: Sat 23 Aug 2025 01:02:22 +0000
Manifest this update: Sat 23 Aug 2025 01:02:22 +0000
Manifest next update: Sun 24 Aug 2025 01:02:22 +0000
Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: mlqVmbzAvKwv9cwvHaeGBK3Gsb8wKHLNrgmkGac4O7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b1:11:e9:ee:13:24:4e:9c:7b:31:eb:09:f7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Aug 23 01:02:22 2025 GMT
Not After : Aug 24 01:02:22 2025 GMT
Subject: CN=669ade21a808dfa50f025b3b3faec1d0e05f706c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:22:83:34:6c:c2:8c:37:35:d3:4c:2b:fe:
cb:2f:53:76:e4:1e:e8:e4:e4:f6:38:2a:c9:2f:59:
1b:9f:aa:80:9e:29:fd:f4:48:9b:6a:a5:64:79:4e:
c3:51:9c:bd:41:2a:11:02:ed:fc:f8:ad:91:5b:ca:
ad:bf:ce:eb:b7:78:2b:da:12:f1:41:14:81:da:12:
1e:1c:eb:57:a8:d5:05:0b:74:f1:5a:d7:3d:d1:0c:
5c:63:46:0c:1e:f1:98:03:11:31:80:64:d7:bc:7c:
86:3b:de:92:af:9b:5a:94:c6:b6:2c:61:36:09:64:
b7:8e:ff:d6:f0:54:f2:ae:47:08:d9:16:f2:90:ed:
23:e6:ea:05:2d:3d:44:d1:05:99:5c:a8:6f:08:fe:
30:d8:d9:d9:9f:01:af:58:35:d6:02:da:30:62:bb:
22:ba:cf:c5:32:40:61:14:1f:91:da:27:b7:2d:ae:
73:57:cd:85:3d:57:8f:d4:f1:66:f5:22:ca:74:7a:
d2:62:88:ff:d8:9c:94:95:66:fa:04:f2:8f:fc:13:
47:02:d8:2a:00:ca:47:24:16:38:7e:15:b4:cf:bc:
a7:0e:fa:6d:87:c2:79:a5:51:4b:f3:ae:13:8a:46:
23:95:5d:a2:ec:0f:9d:a2:95:7c:0c:64:90:64:c6:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9A:DE:21:A8:08:DF:A5:0F:02:5B:3B:3F:AE:C1:D0:E0:5F:70:6C
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:63:c2:36:71:da:f9:29:33:f0:6c:0c:b2:33:45:d7:be:50:
f4:44:62:d4:96:26:e7:70:35:59:75:33:84:5a:90:89:32:85:
80:39:2d:4d:ee:bf:e9:7a:60:37:1d:48:e8:33:ff:5a:22:f7:
e3:6c:41:ac:ec:8d:24:1d:8b:a8:3e:64:03:23:41:f4:11:cd:
2d:8f:b8:2c:7c:f8:8d:9e:a6:ca:5f:72:8c:f9:31:2d:3c:7c:
5e:37:aa:9e:42:f7:15:72:b6:46:d9:6f:0e:c9:39:6e:f5:a8:
47:ce:61:24:af:72:f4:e2:04:dd:10:aa:20:f1:fb:ad:f9:20:
a6:4e:5c:f5:51:3e:96:44:40:ef:c1:44:25:11:7c:87:02:54:
da:0c:18:0f:cd:71:f7:08:bd:c5:41:a4:35:08:d9:5a:29:88:
87:19:5c:65:65:ac:ea:ea:ca:a4:72:b0:89:6b:f8:6e:6d:0a:
00:08:04:ec:6d:78:d3:9b:b2:d5:fd:f6:1e:97:b0:c9:55:b5:
b4:85:7c:c3:c7:58:0f:62:66:4d:ec:43:84:75:f8:20:06:f6:
68:5f:1e:df:56:c4:ba:b6:ed:c4:fc:2e:fd:93:34:70:6f:15:
bc:66:df:f3:0c:86:af:2d:4f:86:7a:5d:ce:b5:fb:90:80:00:
cb:a2:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:14 2025 by rpki-client