Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier: Lt6xTA7WHIP1wRKv23lWqbKmVw0UdUNtd/asPKqys2U=
Subject key identifier: BE:D2:12:C9:87:FD:77:C4:F3:24:3F:52:D5:BD:6D:F5:2F:9E:95:E8
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 0198D4049E73456C46BD423E8548FBC8CEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number: 1652
Signing time: Fri 22 Aug 2025 23:02:09 +0000
Manifest this update: Fri 22 Aug 2025 23:02:09 +0000
Manifest next update: Sat 23 Aug 2025 23:02:09 +0000
Files and hashes: 1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=)
2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=)
3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: kmGj/DlQHuH8coB6YVDY33hTFb/jztMkP9qrfa/nqKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:9e:73:45:6c:46:bd:42:3e:85:48:fb:c8:ce:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Aug 22 23:02:09 2025 GMT
Not After : Aug 23 23:02:09 2025 GMT
Subject: CN=bed212c987fd77c4f3243f52d5bd6df52f9e95e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:a3:de:c2:9c:75:2c:7d:f0:7d:3e:bf:d3:
90:e0:fe:68:4b:f3:cc:fa:dc:13:49:0d:eb:78:11:
8e:42:c5:f4:12:2f:62:f7:66:9e:78:7d:02:c4:2f:
05:24:e3:63:d2:ce:86:b5:26:67:f8:36:53:b7:64:
75:c4:e8:1b:0f:6f:a4:9e:6c:8c:d1:6f:cb:c7:1d:
3e:27:86:cd:cf:9c:6c:38:7c:c2:cf:e8:3d:28:89:
b1:97:89:5c:33:d3:f8:ab:87:e5:8e:e7:33:d0:58:
29:b2:b4:83:8c:de:f5:d8:9a:78:34:1f:c5:81:f2:
af:1f:f6:66:9c:81:ef:52:64:33:f5:6a:d0:e8:41:
e2:cb:5d:33:e0:48:c7:18:f1:35:99:03:43:6e:2a:
7a:ce:bd:1e:4c:0e:9b:2b:35:4a:25:50:95:8d:b1:
f7:40:22:00:4a:53:b8:40:65:d1:8e:03:98:eb:33:
e8:ae:d2:03:e0:61:88:e7:dd:1b:d9:0b:a9:f5:ae:
65:de:23:18:d4:73:79:b5:91:cf:f9:16:4c:b4:51:
98:54:4b:d9:2a:ae:5d:5d:4e:c1:59:31:d9:0a:60:
ef:ef:68:24:5c:e6:8b:ca:ef:95:26:d3:77:bd:89:
73:b9:e0:9c:86:f0:41:c2:2c:62:34:cb:c4:43:bb:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D2:12:C9:87:FD:77:C4:F3:24:3F:52:D5:BD:6D:F5:2F:9E:95:E8
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b7:16:c0:68:5f:dd:9b:3a:c8:4e:5a:9b:22:40:73:62:7b:
f8:af:2b:20:06:45:f6:d7:52:1f:02:93:9c:1d:e5:12:5d:df:
3a:a2:86:e4:cc:ff:0a:dd:66:20:53:fa:21:05:95:83:b3:ba:
6a:24:17:2c:ef:b7:96:d2:f0:35:ee:7e:a4:5f:73:6f:c7:77:
91:d9:06:2d:3a:ad:78:11:eb:0f:26:56:ce:f7:40:f6:f0:e1:
de:d1:fa:68:0d:6a:11:24:81:f0:50:2e:31:d8:7e:50:c3:dc:
5a:2e:27:e0:13:b2:51:b3:ac:db:24:38:3e:06:3b:c2:2a:7c:
ed:d2:e3:c8:a0:5d:6f:39:66:21:db:6b:07:00:c9:b6:fe:15:
0e:57:50:34:93:88:05:8f:c0:35:6c:b5:a0:fa:b9:3c:35:d6:
9f:1f:bf:4e:57:09:89:9e:84:69:f6:77:e1:81:86:63:e2:ab:
b5:53:b0:d8:eb:5a:23:fa:b3:47:8c:70:4d:27:cd:c6:6b:06:
21:72:8f:7f:6d:1b:7c:22:70:59:5f:2e:3b:c4:90:48:0b:20:
09:e0:d4:58:7e:4f:82:ff:23:f4:bc:02:f1:b7:19:2c:89:b2:
2e:a2:c4:93:b1:33:ba:df:1a:ef:9b:0a:cd:08:82:a7:6d:27:
1f:66:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:16 2025 by rpki-client