Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File: o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier: lDaPXYqyjaVSSAVWfDlp/ZwAJ47qtSWn/lp3sJ7frlw=
Subject key identifier: 21:15:EA:B7:34:37:35:87:AC:84:07:F5:F1:4A:49:84:97:75:D0:BC
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial: 0198D4741DF7F731160EBA45B679A69CF14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number: 123E
Signing time: Sat 23 Aug 2025 01:03:56 +0000
Manifest this update: Sat 23 Aug 2025 01:03:56 +0000
Manifest next update: Sun 24 Aug 2025 01:03:56 +0000
Files and hashes: 1: CbvTUoVTI9OkiUvPHuJ57q9cBSY.roa (hash: M2lLf2osrJPDAkfEBP++DLdBvZ2RZq2vDWq4YQYtA7g=)
2: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: 6e/6pi2VNfT44CSJMVIkSEFJXviQ5hfZNp7Ok1KyxX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:1d:f7:f7:31:16:0e:ba:45:b6:79:a6:9c:f1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Validity
Not Before: Aug 23 01:03:56 2025 GMT
Not After : Aug 24 01:03:56 2025 GMT
Subject: CN=2115eab734373587ac8407f5f14a49849775d0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:3f:59:be:db:c2:b8:a1:b6:ce:8b:f5:0f:
cd:a1:5b:79:60:9e:2e:18:d6:a0:3b:4f:af:75:e9:
cc:2a:e6:cb:12:4d:72:d9:09:a4:74:93:04:d0:12:
f2:72:28:29:77:f6:e4:cf:97:99:39:69:81:83:5c:
59:6f:59:26:62:32:ad:ce:cf:d4:5a:68:90:84:d1:
c5:96:4b:8a:0e:48:45:9e:e1:46:93:9b:4f:f6:1b:
da:da:b5:b3:d5:d1:93:29:c8:c3:74:52:e2:3e:aa:
9d:8c:8b:7b:49:b6:a4:67:92:21:84:be:21:3a:2d:
16:7f:10:46:f7:c6:e0:f6:cd:49:4c:f3:e1:5a:35:
a8:16:77:92:4f:aa:65:3f:be:2e:2d:54:d8:55:4a:
19:b9:0f:75:6a:b3:b1:37:c1:08:c5:48:7e:e0:3f:
56:a5:91:dd:6e:c6:3e:72:ac:25:50:99:13:b7:30:
ff:d4:11:e5:bd:9a:d1:ed:da:1f:04:b4:90:20:4b:
f6:32:c5:6a:fd:b1:55:65:86:9a:ad:b6:20:d3:2c:
f8:12:c4:a9:d1:a1:5b:71:da:8b:64:d6:d7:f1:ad:
83:68:9f:a8:09:00:93:92:4f:0a:51:82:5c:bb:c6:
6c:3d:c6:c2:15:c7:75:ef:de:c5:25:77:31:4e:da:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:15:EA:B7:34:37:35:87:AC:84:07:F5:F1:4A:49:84:97:75:D0:BC
X509v3 Authority Key Identifier:
keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bf:ad:e6:41:0f:2d:86:17:dc:b0:87:c9:40:f9:5f:a9:06:
e4:43:c7:6a:3a:be:09:b4:e5:c9:f4:03:04:b0:3e:dc:7e:bf:
88:88:9b:31:e2:19:65:99:03:a2:7c:ea:53:5f:2f:1a:f4:e0:
d8:cc:de:e4:ea:5e:9e:50:1e:fc:44:48:d4:75:3c:67:34:84:
74:e2:16:59:dd:f0:75:98:3b:95:18:b1:db:f8:22:7e:43:f2:
d8:38:c1:2c:1a:13:0f:53:18:aa:6d:b5:11:13:22:52:39:88:
48:80:d0:1a:a7:25:0b:11:8a:8b:8f:46:ac:23:98:3b:8b:4a:
2b:aa:36:48:37:9c:c8:fc:7f:17:04:08:ef:f2:14:72:3e:40:
7d:31:6a:65:44:a8:4b:1b:cf:a7:b3:81:19:07:4d:62:72:b7:
9f:56:8e:75:a2:a2:37:62:ec:df:17:5d:d9:4a:76:f7:bb:38:
a5:73:be:c1:9c:be:11:fe:7c:1e:65:3a:be:a5:dc:1a:cb:01:
73:59:ef:4c:28:c4:c1:a6:5b:cb:46:4c:dc:99:36:65:d1:5e:
75:12:cf:16:8c:a1:33:46:71:cc:8c:26:03:d4:3b:e7:71:d7:
13:d3:32:ad:63:13:b6:c7:39:96:2b:cb:c4:7b:da:c1:19:a3:
a9:8f:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:40 2025 by rpki-client