Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: DN4Tyi0kXTOb6vXTT9oYEnIZWms19+hnlpYxhGxcleE=
Subject key identifier: 69:0D:BA:B7:32:15:4B:2E:D1:7A:1A:93:DD:B8:23:56:AA:4C:FC:CE
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 0198D4E001C83563C73A0D741A5900267135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 026E
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: 2kVnv7+32k9cFma3SRT0cH6o3pFTtoi6xbBvE0SRB5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:01:c8:35:63:c7:3a:0d:74:1a:59:00:26:71:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=690dbab732154b2ed17a1a93ddb82356aa4cfcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:91:7f:98:55:44:50:37:d6:a1:7e:00:6c:
f5:2e:a2:df:34:06:7c:7f:ba:ad:4f:52:53:eb:03:
1f:47:db:4e:e6:cb:28:54:a3:ef:7b:45:3b:44:99:
76:31:60:0c:be:40:9c:45:ab:e3:89:37:2d:70:b8:
22:09:5c:ac:18:1d:c5:2d:34:96:40:bd:34:22:16:
a5:95:0c:a1:2c:95:43:3c:e0:bf:93:33:1b:3b:1e:
4a:d9:70:b3:77:07:80:3e:26:42:79:78:53:69:2f:
78:fa:09:84:3e:6a:33:e2:66:aa:06:f5:75:3d:bd:
1c:d4:ca:56:a8:19:19:77:55:54:72:48:05:f1:4e:
67:25:77:dc:d7:5f:9c:a5:06:d3:c7:43:d8:4e:53:
05:bd:57:2a:a8:f1:f7:40:c0:a8:df:d6:dc:83:0f:
64:40:14:72:3f:44:4c:0a:e5:ea:b5:86:71:30:32:
4e:98:4f:f5:1a:8b:1c:fe:0c:d7:06:3d:66:b0:3a:
54:49:2f:76:d1:30:ef:61:e2:4e:c5:a2:71:f2:0f:
16:80:02:02:25:8c:68:a6:a6:70:6e:1b:0a:a5:66:
d6:0b:15:33:d4:e3:aa:74:c2:8f:96:6d:83:e9:65:
37:61:bf:a1:d7:60:70:2e:aa:3f:fd:41:dc:e4:8e:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0D:BA:B7:32:15:4B:2E:D1:7A:1A:93:DD:B8:23:56:AA:4C:FC:CE
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a2:3a:f2:5c:5a:cd:86:02:73:f1:e6:4d:bf:e6:45:8a:56:
b3:13:22:03:bc:0a:d3:2f:8b:3d:d0:f3:af:27:6d:02:77:ee:
0c:ff:92:d6:d6:e9:45:1a:7f:a8:2e:07:95:3b:ae:48:8e:e2:
90:6d:e9:9f:3f:eb:31:b4:67:9d:6d:86:d4:c4:86:75:72:f1:
51:36:c7:ce:f0:97:4a:d3:60:40:b1:a1:de:16:b2:50:75:b7:
92:e0:83:31:bf:c0:48:46:a6:3f:55:77:c2:2f:74:1a:a0:78:
d4:a8:00:0c:38:79:6f:ff:3d:0e:6c:59:75:27:74:cf:24:26:
e1:35:31:73:8d:8d:dc:02:7d:55:ae:2e:8c:a7:3a:e3:60:37:
d4:95:99:fd:be:76:f2:07:d8:db:56:07:66:df:71:52:f3:78:
88:af:47:18:0c:5d:6b:e8:06:12:7b:31:b8:94:a2:5c:15:dc:
56:61:46:fd:8a:42:90:38:a1:1d:62:c1:a3:fc:43:79:1c:14:
fb:48:6e:46:54:a9:60:fb:04:21:3f:0b:c6:32:e3:f7:aa:a5:
2b:f3:2e:08:e3:20:49:05:67:a6:a2:92:88:b7:17:3d:64:2a:
17:7e:41:5d:59:26:83:9f:dd:3a:95:dc:5d:e9:70:00:64:67:
66:a0:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:49 2025 by rpki-client