Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: cH5EXwuvGIInfjeJO/RG/jYFxIzjtjOZkRQIn1BHV30=
Subject key identifier: 95:7A:70:0B:D8:83:50:18:1D:35:9D:BE:EF:A4:28:E6:4C:5B:2F:E3
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 0198D5BC17AA4249A6A60487F32AA8AC5609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 0588
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: UxDhbbGiLqhG0cjqvQTDDPyodT8.roa (hash: /jH4fHuxOiDmcdoWH8bkN08eFhE6HPAkApmfAQgC6ts=)
2: iV5FZuMGLlixAMw0jkwzk7P8BYc.roa (hash: C9ucIF2yO9TSTl7qwXNqjkxkNJQX9XDq0UvZWNrPjQU=)
3: inOwk0rr2hBBrYALexzKTS-HXaE.roa (hash: BGYPbxUWdEW8PUtIUA1rv4TAk1J/uLjxsHUKD6zhw0w=)
4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: SrNOPunBsQbQhIhjoAunrBFWDbLpug8cfaMMwLHSy80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:17:aa:42:49:a6:a6:04:87:f3:2a:a8:ac:56:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=957a700bd88350181d359dbeefa428e64c5b2fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:1c:22:2d:80:36:ad:53:6d:7c:2d:6b:31:
ac:96:c6:07:83:1d:dd:89:c2:59:c0:87:78:d2:df:
ac:2e:ef:8e:26:f7:08:3c:9e:2e:b8:f4:f0:a1:77:
42:1b:17:84:97:bd:69:44:e2:fd:21:3a:99:9c:e1:
68:d7:c0:67:4d:94:ed:3f:21:09:25:2b:ed:7a:13:
97:90:0b:18:a1:f5:ae:ff:f5:a6:57:3e:b6:b0:30:
44:72:cd:d3:b9:67:0b:5a:2b:88:15:0b:22:24:a4:
9b:88:8c:aa:b2:90:93:70:c4:b9:9b:f5:9a:a1:69:
82:87:e3:ad:4c:72:81:9d:2a:62:64:28:64:71:da:
88:4a:8e:f7:27:01:11:f5:3a:d0:aa:5e:f3:e7:f8:
6d:a3:8b:7c:53:fc:8f:71:0c:6a:b2:8c:69:9b:da:
c2:a7:2a:45:cd:ff:9c:1c:15:69:93:a6:22:8e:fe:
02:62:20:7e:e3:ba:3f:8e:b1:54:33:04:69:b0:36:
fe:5e:f7:b5:ee:67:c1:38:48:5d:dd:4a:8d:ec:bd:
d9:5c:6d:e7:6f:b2:2c:b6:f8:95:f7:f8:77:c1:8b:
ab:a0:ab:36:07:27:9e:81:de:3d:8f:a2:8f:ab:94:
af:99:78:96:f1:63:4f:dc:af:cc:ed:a8:b1:6c:5a:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7A:70:0B:D8:83:50:18:1D:35:9D:BE:EF:A4:28:E6:4C:5B:2F:E3
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:35:89:db:e6:78:26:b3:15:2c:05:61:ff:e8:e5:34:3e:90:
f2:62:36:b3:f6:68:ff:11:3b:3f:5e:ca:22:ff:65:59:33:da:
a3:d7:40:47:bf:ff:ab:e5:3b:28:5a:10:89:8e:07:6c:79:85:
00:f8:db:dc:63:77:cb:12:78:a1:8f:1b:f4:e4:ba:dc:16:44:
68:30:be:13:ff:6e:17:d2:45:25:2a:a9:99:af:13:06:99:2e:
52:2c:73:10:22:f8:60:25:72:60:a3:a0:26:a7:e3:72:52:c8:
e9:71:13:e1:4b:1c:ee:c5:9b:3e:59:56:40:b3:f6:49:11:19:
e2:29:35:da:a7:27:01:db:12:c5:14:f0:f5:28:5e:b0:46:3b:
5e:20:9b:a7:7f:2b:b0:20:19:c3:54:a8:0e:c4:a1:aa:28:a1:
72:60:c4:86:94:ee:a7:37:19:21:c2:da:95:7d:fa:ab:d5:a8:
db:c8:e8:50:f6:77:d6:6b:3e:19:70:4a:3f:24:29:43:4e:dc:
ee:7c:0a:40:a4:cf:1e:e3:eb:22:5e:bc:67:03:76:2d:21:ee:
84:75:a3:31:dc:f2:bb:36:de:44:e5:5f:ac:6d:59:9c:21:a9:
3c:b8:11:fc:82:9a:a9:e4:1f:8a:32:4c:11:21:9b:06:71:b3:
b3:ff:86:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:49 2025 by rpki-client