Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: ihUnfr2ikVFIPW8ylAZ0wsT/n6lhmJPmY47ip+IfrWQ=
Subject key identifier: 2F:5B:94:5A:8B:4B:70:50:4E:3B:00:6D:A0:68:06:DF:A6:15:A4:ED
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 0198D5BBA7E47E086E39AE73486130F2FB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=)
2: 76T3wUVzKrccOze-NEOdu7-TKxc.roa (hash: 0jI/L5T33OWVMZBqU9OicvpSu2R8kTlL46/YK1PJ/4A=)
3: DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa (hash: kpTlHHw5FsxD4697vv8Q+YHIpuXKVuz/l4Fu6lFpvJY=)
4: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: uqy5rsq8sYqp+IyppC+aC5JKDscpnU5c64nprbGJp8c=)
5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=)
6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=)
7: f_cRzhAwjQsRWIpABQIN6zrQUL4.roa (hash: zcaLl6mU3qlNMRBKmml1zlcCseGH1tjLvTej/h7Zeow=)
8: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=)
9: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a7:e4:7e:08:6e:39:ae:73:48:61:30:f2:fb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=2f5b945a8b4b70504e3b006da06806dfa615a4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:84:15:31:2d:de:ca:ea:a7:e1:e6:fa:68:
ae:94:ce:fb:c9:d6:17:a3:55:b1:4d:2f:68:f3:ec:
06:0a:16:97:80:b2:15:b8:f3:db:4e:82:88:21:4d:
68:48:c6:0a:51:c4:21:52:2d:38:d3:f0:27:02:38:
0c:37:e0:ad:6f:41:38:2a:fb:27:2a:9e:7c:2a:9e:
b9:30:41:d3:04:32:10:50:37:c8:e8:9a:90:10:d2:
91:c7:2d:f7:4c:a8:bf:c9:ed:6d:06:5a:c8:42:e7:
1c:50:56:76:ac:36:d8:18:1c:3e:c8:9f:2a:35:87:
3c:b5:40:10:44:19:65:d6:e6:cb:78:4a:54:c2:20:
03:9d:5c:01:cd:a1:8e:fd:9b:7f:4b:ff:c9:25:dd:
83:09:d0:7c:8d:69:ee:60:8f:30:86:44:61:46:9e:
d2:d3:12:b1:ec:03:58:e9:51:08:53:0f:71:fa:ab:
a1:39:f9:9e:ad:b7:79:7c:06:e9:8d:25:c1:3f:a5:
67:b1:9b:83:6e:1c:94:8e:75:cd:37:5f:a7:86:a0:
71:27:cb:4d:ee:4b:83:3c:6e:5d:4f:1d:d8:47:9e:
83:da:2c:ce:e8:93:33:29:a1:67:78:e5:09:06:68:
92:ce:7a:a1:9a:eb:53:91:de:97:f8:7f:ea:11:4c:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5B:94:5A:8B:4B:70:50:4E:3B:00:6D:A0:68:06:DF:A6:15:A4:ED
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:7d:46:0e:e8:b6:fd:b6:a3:14:9d:64:32:a2:0a:a7:dd:9f:
66:57:7d:c3:13:b1:1b:b3:76:b6:cd:95:0e:59:8b:e3:c9:3c:
2b:ac:37:31:9d:dd:8f:fb:ea:34:90:66:67:da:53:55:04:50:
c6:98:f0:8b:ca:9c:37:0c:ad:39:08:3c:27:55:9f:41:00:c9:
c3:db:de:8b:e9:f2:5f:23:b4:cc:37:a2:16:f1:39:79:46:25:
c2:04:92:d5:ef:95:ae:d4:61:ed:40:b8:3c:dd:45:ba:f8:c7:
f4:3e:1e:5e:f3:d7:6f:5a:55:f4:82:db:e5:47:05:57:7f:08:
79:0a:39:e8:b2:3b:a6:9b:bf:2b:2e:e4:b3:f5:d9:a7:6a:ee:
05:79:12:04:d6:f1:59:3f:fa:d4:f0:db:dd:d3:28:80:d8:9b:
bb:d8:52:54:25:c2:0e:f6:89:a6:df:62:f0:f4:25:df:96:d7:
d7:ef:5c:0f:79:04:35:3f:4d:a1:28:a1:43:fd:b9:2c:de:1c:
31:e9:45:78:38:fe:a0:b3:5d:f1:bd:ed:a9:df:72:55:d8:fa:
e8:2f:31:5b:88:68:36:63:14:d1:11:05:da:c4:4b:b1:80:7d:
9e:98:e7:9b:83:7b:aa:81:8b:71:1d:41:43:bc:4f:36:e7:de:
3a:44:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:09 2025 by rpki-client