Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: 7EFE/isuHQy1y2NtoLk7oQiw+KMdD3czy5XSBRlZEMs=
Subject key identifier: 51:19:00:47:2C:2E:F1:F5:8C:22:67:35:A8:CE:BA:94:E4:BB:50:1B
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 0197B70E9FBEBBCDBDA5337E573B84A517A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 04FA
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: IXb7pTKpZVzNuIu0aqyT2ENAGDKsDKzGnDw8bBJqbik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9f:be:bb:cd:bd:a5:33:7e:57:3b:84:a5:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=511900472c2ef1f58c226735a8ceba94e4bb501b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:7b:e9:d9:3e:09:18:90:e1:fb:7d:ae:e4:
b6:72:ea:cf:fb:db:14:3b:2c:74:67:7d:2b:64:8a:
57:d3:6e:3c:a9:9b:5c:9b:f0:7f:62:a4:8a:77:72:
80:85:f8:d7:ff:2e:7f:5c:57:66:a3:db:08:9f:28:
ba:f8:b5:7a:97:5b:6b:fc:f2:d4:f3:ff:71:ff:57:
68:79:53:c2:38:cf:59:84:b8:7a:c4:d5:2b:c3:65:
c9:94:41:3f:96:ec:cd:8b:39:81:3d:6b:51:4f:6d:
40:9f:37:6e:71:93:43:59:16:b1:39:16:54:7a:82:
e4:63:1e:d5:34:94:00:88:29:28:e6:13:7c:65:ba:
63:1d:08:be:a1:b8:89:52:54:c3:90:f1:e5:dc:30:
ce:e8:43:c3:19:e9:5a:59:a1:4c:17:cb:21:bc:ae:
ae:6e:29:66:ca:ea:33:b6:16:4c:b3:b7:27:00:c9:
42:77:bb:ab:5e:fc:cc:00:05:a2:49:dc:22:ff:36:
64:d8:3e:c9:1c:a2:a1:53:82:ed:e5:7a:2f:c1:12:
8d:b4:07:e2:96:1d:1a:88:38:9b:cc:ce:65:35:06:
67:57:9b:40:58:c8:f5:78:6a:f8:d7:93:89:a7:a2:
ab:cf:d7:a9:77:b5:12:2a:2f:65:2c:ac:1f:4e:0a:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:19:00:47:2C:2E:F1:F5:8C:22:67:35:A8:CE:BA:94:E4:BB:50:1B
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:92:88:10:dc:4e:71:69:cd:f3:c3:01:c1:c8:ed:2b:03:44:
61:ae:df:51:c8:2c:a9:93:5a:a4:60:5a:d0:6c:d6:e2:10:57:
9a:56:ee:7f:c8:f5:15:5e:7f:b1:40:05:33:f3:6a:63:c7:a5:
4d:e7:02:14:40:3c:e5:7a:58:cc:ad:32:82:e4:90:1e:e2:b8:
b8:24:b6:4a:02:6b:a6:94:35:be:70:54:a8:58:33:82:13:ad:
63:31:87:b4:ce:7a:f6:93:47:04:1e:88:9b:ee:4c:9e:d6:ff:
eb:ab:ec:0c:eb:12:3d:05:6f:ae:c2:43:1a:aa:2d:e4:9c:80:
6e:2e:ff:a0:b3:3c:e3:98:2b:d0:d9:3d:46:72:44:44:7a:bc:
53:b4:a3:75:16:2a:de:85:9b:1c:b2:d6:7d:ce:4d:0f:69:e6:
f9:a6:fd:ca:e3:d2:41:49:e2:77:7d:5c:db:9a:46:df:cc:cc:
cd:0d:54:52:ef:54:71:41:b7:28:88:e3:fa:7f:4e:7b:48:bd:
4c:36:16:e3:88:cc:63:d8:13:c5:2d:e9:bd:54:3e:e7:d8:b1:
a7:bc:bb:69:75:a5:df:b4:d8:56:16:7a:53:36:ca:ec:ce:df:
a0:96:e4:82:58:21:e5:c0:84:f0:20:39:8a:a1:a1:a4:3c:52:
b5:98:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:55 2025 by rpki-client