Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier: ojWFr86YbVI7vwl0SHA3zwYII2i+iTeQVa6Qt7qdAUo=
Subject key identifier: 5E:31:11:BA:1F:C8:EB:F3:49:70:73:C5:F1:82:DA:86:C9:6A:F9:7C
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 0198D54DF7398A142B34C5FD9D1B8C129220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: xUJdy/Qf8I+NPVVBmE9DOkoWgYv2PmhRxVT7TXSVVgQ=)
4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f7:39:8a:14:2b:34:c5:fd:9d:1b:8c:12:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=5e3111ba1fc8ebf3497073c5f182da86c96af97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:92:9a:60:22:73:b3:da:de:e0:2b:54:cb:
49:8f:38:2d:bc:f2:a3:68:ec:6e:8a:fd:61:8d:73:
df:af:51:e6:45:2b:f5:98:e7:44:b9:39:73:c7:be:
9e:60:6d:07:a4:a2:28:04:ca:bf:ef:80:01:9d:6f:
c5:7b:5b:9b:6e:38:f5:ce:fe:b3:13:1c:bb:9f:22:
07:a3:da:ab:ff:16:d2:01:5a:5f:5b:42:a9:2e:eb:
0e:0b:99:38:6d:f5:e1:22:9a:10:87:dd:51:61:69:
f2:e7:46:27:50:db:4b:f8:f6:2f:ae:6c:9e:10:c7:
7d:76:ee:84:77:60:47:bd:12:c3:e5:d6:15:54:58:
41:ac:1c:7b:08:58:3f:76:b7:de:5f:64:c3:44:72:
ec:08:09:b0:c8:86:ce:d0:fd:47:85:53:82:b1:42:
98:8d:0c:f3:fa:fd:ef:ca:d4:a2:81:f0:b8:ff:44:
17:d3:c8:ab:94:5f:ef:a2:67:bc:4f:0b:cb:38:9b:
cb:d0:e3:95:89:7a:41:b5:9d:0c:d0:83:98:fb:66:
d3:06:40:33:cc:0a:58:2f:a2:c0:4e:07:79:29:39:
20:af:d9:fc:f7:a9:ed:3f:09:5a:88:1f:78:68:49:
b5:81:6a:e7:96:83:b7:43:ac:5e:46:67:9f:2a:bd:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:31:11:BA:1F:C8:EB:F3:49:70:73:C5:F1:82:DA:86:C9:6A:F9:7C
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:39:93:99:6d:5a:3a:81:ae:61:4b:3e:69:54:4d:b9:50:de:
e3:bb:83:0c:0b:95:26:af:4e:1b:1e:bf:16:4d:3a:7c:a5:58:
c1:a7:f7:f2:77:b8:7e:20:bc:f1:4f:51:45:15:16:81:a2:77:
36:2b:40:ac:6a:f9:5e:7f:ac:7a:75:3b:76:14:84:24:45:6c:
be:95:4e:9c:66:09:e0:f6:de:df:52:0f:86:2d:d9:05:6b:35:
5f:25:51:a7:ab:71:d6:cb:3c:45:57:36:e9:ec:b5:c0:14:a1:
ca:0c:ed:51:30:fa:ea:38:a3:18:e0:42:11:22:9d:f9:1b:db:
86:0d:24:5d:79:f6:b0:57:49:ee:62:a5:1b:c5:6e:16:35:24:
b9:f2:ae:f4:ad:d2:d1:65:3f:fb:95:5d:10:3b:2a:1c:f1:73:
0d:aa:d1:77:79:d0:a5:8c:e6:70:ca:89:5e:77:19:d7:e5:80:
80:1b:4c:7e:b2:0b:86:cd:7d:d4:3e:9f:4f:59:61:c4:6f:e8:
a7:54:07:b5:83:cd:d1:00:ff:5c:ea:8e:57:ed:e1:3e:db:7e:
2b:8d:8f:b7:7b:b8:f4:3f:15:8e:fe:63:00:56:c7:1a:6e:44:
8f:30:36:2d:1f:89:33:41:70:f2:1f:ee:3f:b6:07:f9:07:07:
3a:dd:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:00 2025 by rpki-client