Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: V6hr7xJRb/kV56s2N/Lub//99Sa7+4cEGb/RRkFryVY=
Subject key identifier: 87:08:9A:D2:55:97:8F:F7:FC:58:64:BF:46:90:42:34:03:28:E1:45
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 0198D583C2A4F16DA086C174EB89D61515F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 138A
Signing time: Sat 23 Aug 2025 06:00:38 +0000
Manifest this update: Sat 23 Aug 2025 06:00:38 +0000
Manifest next update: Sun 24 Aug 2025 06:00:38 +0000
Files and hashes: 1: 1qXoS3ZyJIxcOWhfODj10DLjQ_U.roa (hash: GFEaUvVwjsTkY2CZy9se0kItacxeC4v59hUMVKrNWa8=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: MRwHdGXuUfV0dvQ3H9rFy80MLiC35y/RCLZgUUdSAiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c2:a4:f1:6d:a0:86:c1:74:eb:89:d6:15:15:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Aug 23 06:00:38 2025 GMT
Not After : Aug 24 06:00:38 2025 GMT
Subject: CN=87089ad255978ff7fc5864bf469042340328e145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:5d:fd:2a:6e:29:42:d2:7b:6d:1d:ec:cc:
00:fd:a1:66:ac:f6:de:2c:51:46:4d:b9:13:a7:0c:
33:ba:16:44:68:ad:df:c0:f9:e7:83:aa:8f:f1:79:
9f:44:1e:90:2c:f0:0b:08:8c:89:61:39:b0:56:b5:
2a:88:fa:0b:12:11:56:84:53:23:74:4e:c8:9b:94:
9b:d0:15:30:c4:bf:3b:93:08:e3:72:4f:f5:bf:60:
80:5e:8c:21:47:74:da:96:9e:09:da:29:75:ce:c1:
8a:a3:4a:00:81:bc:0b:be:0a:65:af:eb:8c:63:ab:
74:c4:cb:bd:3b:32:2a:ba:6c:8c:43:75:83:30:1f:
3e:60:f8:32:f9:a3:a3:fc:94:89:31:f7:0e:26:b9:
98:a0:62:81:13:9e:c0:cb:aa:bc:66:ae:1b:32:28:
21:bb:03:da:b9:5d:de:f6:3a:cf:ec:4f:f5:89:00:
e9:95:0f:48:f8:d7:e1:ea:ce:09:f1:5f:2f:75:26:
97:7b:91:a9:06:46:8d:4c:86:b0:69:d6:89:b5:98:
b9:a6:6c:bb:0d:61:64:7c:28:ae:a9:59:f8:77:f3:
ec:ca:d8:6f:8a:f9:70:38:01:63:dd:ae:04:83:2d:
f8:02:bb:91:9b:c9:62:0c:b3:02:05:c1:2b:7a:37:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:08:9A:D2:55:97:8F:F7:FC:58:64:BF:46:90:42:34:03:28:E1:45
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:74:5a:e7:91:1f:bd:41:32:d5:72:a3:ac:22:49:9a:a8:60:
64:f3:f0:29:f1:a3:5e:36:13:c9:ee:33:b7:27:3f:c3:b9:17:
95:49:af:33:24:67:11:5f:d0:1d:de:35:a6:38:b1:bb:44:dc:
87:94:fe:bc:a5:8c:ee:43:8a:ba:e9:e2:c6:0e:fb:e5:dd:79:
d8:eb:f1:b7:5f:11:bf:20:8c:88:5c:d5:cb:cc:e5:11:50:07:
e3:85:6d:5b:50:65:69:1c:a8:6f:a7:c5:cc:7d:24:0b:2c:e2:
38:fc:c9:a5:03:4a:04:f0:15:4e:5b:0c:29:b4:3a:ff:29:e9:
fe:c1:08:4b:3a:8c:1e:42:a1:01:7b:ca:5e:b3:fa:c6:b6:71:
0f:26:bd:89:1f:e2:8a:b8:8a:42:c6:92:f3:fd:11:7b:af:ee:
38:b1:a6:de:a6:76:0a:2c:12:19:c3:ab:5b:26:81:ec:5d:7c:
50:ff:da:8d:10:88:95:4f:c1:e7:1e:ea:e4:c0:c3:fe:40:a2:
a9:9b:51:f7:88:ff:2c:01:3d:76:35:82:1a:34:de:33:53:f0:
ad:cc:db:6e:13:01:25:44:ca:32:56:fc:f3:e6:24:9c:c3:85:
b5:2d:1d:ba:e1:a6:25:ff:8f:6a:54:f7:77:43:40:2c:76:29:
a4:c9:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:59 2025 by rpki-client