Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: 5xipHO38oD8rXrKolbDQjUBc/Ic+rUU+OJKit3gM1Ig=
Subject key identifier: 58:F2:F3:D0:A1:EE:22:E2:5C:1B:4B:6F:73:DF:53:88:7E:13:9A:F2
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 0198D4A83BE49625249E4C33F760F89BF777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 0B08
Signing time: Sat 23 Aug 2025 02:00:51 +0000
Manifest this update: Sat 23 Aug 2025 02:00:51 +0000
Manifest next update: Sun 24 Aug 2025 02:00:51 +0000
Files and hashes: 1: BrYhHrEUiC6KPPt0z5zIenofLis.roa (hash: DE5/RvrYo8fEFuVG34PaeU1d6iLiNdb+LH6pRfnNAg0=)
2: M2qfiHxlvyqX5khJIeCk4BAzw-M.roa (hash: 2wSt8AsR9BQPYP7f67EqXqK56sykUCRKKl1aHVsfKpw=)
3: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: /OpPj1V7d7AEA84Qg12SP/GhiG5Qymh44y1jVKnMQBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:3b:e4:96:25:24:9e:4c:33:f7:60:f8:9b:f7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Aug 23 02:00:51 2025 GMT
Not After : Aug 24 02:00:51 2025 GMT
Subject: CN=58f2f3d0a1ee22e25c1b4b6f73df53887e139af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:cd:89:8f:c2:3b:a0:6a:6d:b7:77:17:cd:
6b:88:35:39:2d:d3:18:96:bd:b7:5a:fd:9a:3b:97:
de:6d:47:84:aa:66:00:cf:b7:e3:3e:4b:f9:a6:cc:
37:94:6f:95:89:c6:ef:72:15:20:e0:1e:ff:c1:c3:
7b:0c:53:5b:c2:f0:03:b3:03:46:b9:89:df:0a:69:
ab:24:ad:f7:a1:87:31:bf:72:c3:1b:45:f7:b7:e4:
11:ba:42:05:f5:84:1c:c7:85:11:42:0a:67:b0:a3:
58:86:81:d9:75:55:80:f8:d7:05:e3:ea:48:d3:8b:
05:64:21:d0:97:f0:e0:33:4b:18:24:d6:55:ca:ee:
97:ee:e4:87:93:dc:41:c0:59:9a:b1:e2:d1:e1:d3:
e1:17:bf:09:1d:ce:5b:e0:09:c0:12:dd:a6:73:39:
58:f1:61:cd:28:e0:12:0f:0b:43:09:12:a9:58:97:
25:d4:d4:5b:0f:39:6c:73:61:92:6f:76:03:d7:eb:
5b:12:cc:b4:ab:3c:47:cc:40:2c:0d:bc:78:a5:e3:
4a:e1:28:a5:3b:07:7d:1d:d3:c5:65:ee:82:74:66:
e9:42:0b:8f:de:cb:cc:7f:70:5d:31:86:fd:3a:ba:
d9:7a:13:3c:0f:1e:fe:dc:02:e0:85:f0:e9:c9:d5:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F2:F3:D0:A1:EE:22:E2:5C:1B:4B:6F:73:DF:53:88:7E:13:9A:F2
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:68:f8:f6:e7:d0:fb:ee:34:d6:1f:29:42:0a:93:19:fd:8f:
2f:fc:4b:bb:3c:9e:bc:24:c3:dc:92:5a:ec:f7:e2:29:95:cb:
62:4a:b5:fe:5b:cb:af:20:ed:39:d5:b5:6a:c6:21:0f:6a:6a:
ec:c8:56:65:50:ad:30:df:75:ba:ca:9a:94:31:1a:f9:1a:09:
33:de:8d:6c:a7:55:57:21:50:1f:32:b4:34:77:fb:c5:be:51:
72:bf:55:bd:27:94:b8:98:e3:f4:36:29:c5:ab:e2:70:83:5a:
1f:e3:41:97:91:84:39:92:32:27:b4:bf:50:e9:a6:b9:43:52:
d6:49:6e:35:f9:e8:fe:be:90:5d:1d:96:0f:ca:fa:85:06:1b:
bd:22:16:8c:3d:72:15:f9:69:d4:60:12:f9:b9:80:13:24:22:
fb:ed:11:8f:48:46:38:ee:c9:66:94:b3:86:d2:6f:e1:c5:01:
d7:8f:63:20:55:74:54:c4:5a:bf:9b:63:15:dc:ca:68:ae:12:
7d:ee:a5:70:e1:14:b5:a1:f4:59:a4:37:c1:f2:e1:fb:a1:4e:
94:2b:f6:3d:d9:01:54:16:99:75:fd:69:55:54:ac:36:f1:9b:
87:db:ec:a3:b2:21:1a:13:3e:ea:03:a7:4d:96:4e:c3:e7:5c:
67:6b:2f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:35 2025 by rpki-client