Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: vGpSu1EhK6gUFsVkiMdrmEThuWUwaXuTimP0rU/S2dA=
Subject key identifier: 8E:72:E3:E4:9C:5D:82:DE:59:07:89:F8:80:E7:F4:63:08:91:48:5B
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 0198D583B00466202F5D41B3A3749CDCE7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 153E
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: 8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa (hash: 6ZZJ4QGkpbcq3hIOVhgvm79JeONPbl5ojVu1zQKUgnU=)
2: LiZI8DHKt2cl3ZGAwMQs7hzSWLY.roa (hash: YZv7B4YQ18wMpKvjotc88oKaw7AFVr3K3Ln8F9meSnc=)
3: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: unNQKO5wYxryqn9c0qdzPF+P7MkCsPtVmiwWdYKQ5Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b0:04:66:20:2f:5d:41:b3:a3:74:9c:dc:e7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=8e72e3e49c5d82de590789f880e7f4630891485b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:9d:29:4c:e5:7a:f0:51:66:28:43:8b:14:
ad:d5:cf:91:66:a2:b8:04:bc:63:f9:71:ff:4a:53:
3f:07:b0:66:56:15:41:a2:5d:21:68:aa:3e:b0:68:
60:b4:e6:b3:f6:81:6e:26:72:6a:72:84:78:9a:82:
c4:02:96:33:12:ab:a8:cf:e9:92:47:98:0d:c5:34:
ea:45:ac:24:3b:77:09:27:b0:d0:b1:52:f8:73:59:
bd:3e:40:0f:2b:16:8b:07:e8:c1:47:8b:e9:6a:c4:
0a:31:3c:c9:8f:c7:93:06:97:5b:e1:3c:11:8c:85:
c5:81:25:a7:6c:8d:ea:23:2e:f2:65:6c:37:64:68:
e7:00:70:a5:c5:6b:6a:6a:43:4b:f6:8f:39:dc:d4:
dd:0e:0b:79:f6:47:57:67:f8:da:ae:98:68:18:06:
56:12:1e:8c:2b:9e:4b:62:97:41:d5:f0:d6:64:d4:
07:7c:c3:dc:ca:33:e1:3c:2f:c3:a5:43:31:60:9b:
25:d1:a8:6d:f0:62:17:75:02:02:7a:29:96:ba:48:
ce:11:9a:3c:a7:02:ef:39:e7:23:fe:b5:77:84:b9:
0b:c1:7c:c2:7b:13:da:8f:ec:15:43:22:eb:72:76:
ec:b1:10:c2:8b:23:58:65:2f:cf:35:80:a8:72:85:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:E3:E4:9C:5D:82:DE:59:07:89:F8:80:E7:F4:63:08:91:48:5B
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c2:20:e3:fa:69:6d:78:fd:8f:59:d7:0e:a8:74:24:ed:a7:
b5:d2:2a:92:2a:d7:02:96:63:68:07:a5:d6:3e:e8:81:15:fc:
5c:51:0e:17:dc:1e:6c:52:1f:f4:ab:05:01:de:9c:d5:32:b3:
d4:2a:f4:61:57:dd:00:95:35:b1:5e:d0:f7:25:34:86:f3:a7:
ea:6d:6a:d0:5f:a9:d6:97:89:74:4f:02:09:8e:f0:72:9a:b7:
ee:27:ce:6c:fd:1d:69:6f:7f:0f:de:9b:31:5b:a3:e9:e8:41:
93:f7:f3:dc:6d:24:f1:58:5b:b9:03:0d:88:a3:74:fd:69:81:
29:21:23:bf:d4:6f:f5:63:a1:02:84:85:39:8d:40:51:f2:83:
58:0d:80:6a:6c:a6:6e:c4:6d:c5:f2:0e:18:d7:7d:d9:d8:8b:
f1:cf:11:ac:3a:bf:c3:75:63:89:b0:43:f7:70:cf:45:04:69:
c0:2d:1f:70:93:54:00:0b:11:9e:ce:94:3e:69:69:91:d4:5e:
df:a8:e1:a0:57:54:42:aa:76:cc:3d:fc:55:2d:d4:21:ad:98:
15:b5:4f:08:a4:7d:ca:b2:77:54:2a:1a:a2:c7:fa:a2:3f:a4:
43:d3:28:66:c0:dc:30:43:4e:da:50:65:69:e3:ff:91:03:26:
a3:45:1a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:18 2025 by rpki-client