Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: Y+LjMHWFQevqF906OFlVsOq9z6d4lHw3BEsnB25mBw8=
Subject key identifier: 03:4D:73:FD:59:BA:CC:69:08:0E:32:38:AE:15:DE:67:F3:C0:D8:4E
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 0198D7A94686769F25ABB3D5D49D11B03FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1662
Signing time: Sat 23 Aug 2025 16:00:51 +0000
Manifest this update: Sat 23 Aug 2025 16:00:51 +0000
Manifest next update: Sun 24 Aug 2025 16:00:51 +0000
Files and hashes: 1: K3iEvVMv5L7A8rAEeU5HVBi7LhE.roa (hash: EkwL2Kur19TmNA6m2yAps4NwnDYDcypMzzrfUdVMCj8=)
2: _sju8wm48N68sRMK2WrJFDzm8eM.roa (hash: wi4jIUl5fpczu4ZQGXUrAmPmxuLJ1XGfhTmddVK48kE=)
3: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: ICJKKZLNqf85z113fJL2SNfeS0EmvrgMdJXbL2kRWIw=)
4: ys6iILu3_I7CA1cINOiWNhnSJmM.roa (hash: qRVpWIwOKss/jcrKi+UW7mCwGaJx3pwZSGEHXYR+fPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:46:86:76:9f:25:ab:b3:d5:d4:9d:11:b0:3f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Aug 23 16:00:51 2025 GMT
Not After : Aug 24 16:00:51 2025 GMT
Subject: CN=034d73fd59bacc69080e3238ae15de67f3c0d84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:ca:0c:cc:61:11:50:2e:54:1e:c0:e4:89:
be:07:da:04:39:40:56:9f:03:9c:32:f8:61:af:c9:
c3:cb:52:29:8d:3e:33:c4:8e:bb:f4:1e:88:68:a0:
ab:c0:07:bb:b7:43:bc:5f:0a:72:02:9f:f1:32:83:
04:87:78:7d:5b:1e:e6:44:87:d7:c6:5c:0d:32:24:
cd:25:b4:51:dc:4f:27:98:4d:da:83:b7:4e:02:e6:
06:eb:d8:bf:16:31:9e:ca:73:bb:e3:9f:ef:b0:85:
ac:ca:05:74:45:45:40:bf:e8:88:b6:4a:f9:94:0b:
b2:42:29:5d:45:d0:6f:83:a1:01:14:93:11:4a:3d:
77:3f:19:6d:bd:3c:11:8d:9f:67:f8:aa:3d:bb:f5:
94:56:37:20:81:bf:19:bf:ca:c5:dc:0d:27:9c:a9:
7a:f7:c7:b9:b0:6a:59:5f:5d:6d:59:41:2b:32:be:
f6:39:77:9a:b0:b5:41:cb:bd:fe:ab:c5:3d:d3:30:
c6:82:25:bb:99:8f:c6:5d:ca:e0:7b:49:e5:01:c5:
37:17:3a:b1:d6:00:e1:9b:43:48:b6:d9:09:87:1c:
b3:cd:ed:9e:68:f7:4f:a4:e3:89:9c:90:40:e0:61:
0c:4f:c5:53:b7:96:5d:1a:35:9e:d3:82:df:62:9b:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4D:73:FD:59:BA:CC:69:08:0E:32:38:AE:15:DE:67:F3:C0:D8:4E
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a2:91:dd:26:f3:71:81:f1:eb:88:26:e5:ae:5d:cb:50:70:
e6:83:78:94:6c:80:cb:6e:a6:c0:93:97:f9:df:45:87:68:35:
72:fa:e9:aa:31:89:4d:51:40:b1:a8:1b:6f:42:71:92:78:0f:
f1:0d:41:05:1d:74:2c:2e:45:eb:84:a0:07:69:84:c6:b8:f9:
34:77:c5:96:f7:d2:0a:ea:cb:e9:58:bd:74:90:3c:94:0a:a1:
3c:cd:80:1c:64:34:b2:00:05:dc:e0:e7:5c:75:0a:fe:89:1d:
68:22:4f:5c:db:9b:52:38:d1:93:42:fc:70:60:5b:cc:b5:7f:
1e:b2:b0:d8:cd:a8:5b:45:5a:92:c8:c5:44:15:a9:9c:2b:ae:
77:46:de:23:cd:26:8f:40:80:2c:e5:51:a0:2d:96:81:d1:05:
f7:96:16:3e:e3:bd:10:4a:fe:e8:eb:a6:16:94:2c:df:1d:5d:
c6:74:31:de:2f:c8:ea:94:81:a1:ee:9d:3a:d3:3b:e0:76:9d:
b1:73:c4:ca:76:2a:0c:64:ea:45:67:65:24:c9:63:5c:dc:51:
38:31:56:69:67:9f:1f:9a:14:4a:97:36:72:bc:a1:2a:0d:6d:
3a:9f:3e:33:00:42:d2:e1:bb:5a:c9:23:1d:0c:3a:44:7a:4b:
67:67:20:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:23:03 2025 by rpki-client