Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier: mr2j5Kg2NmsESLyeUz6P1KttyqFQNqPh8p3vzeAC+PI=
Subject key identifier: 78:0A:66:BB:1A:6E:59:00:47:6A:57:B4:D1:01:BF:6A:E9:D3:BD:41
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 0197CA954C430AD0948532B3C06CD4FC92ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number: 099B
Signing time: Wed 02 Jul 2025 10:01:11 +0000
Manifest this update: Wed 02 Jul 2025 10:01:11 +0000
Manifest next update: Thu 03 Jul 2025 10:01:11 +0000
Files and hashes: 1: PjUaY1pzv5i9v0-_ltmeXMvn_E8.roa (hash: 5l/O42PBuCxXNh+SRi17b1mrEEDB7Yq2rN5qBu2/Ncg=)
2: PttuSfjxa79MH7rLTOnjgReDQvw.roa (hash: AT0RYNQBGnwCZ5SCURqKkKKbeaLJOuOT7slKjRXHVFY=)
3: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=)
4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: olOepe8bmvQybt8cVAB38X8IWES6N+lKUQzYb4zDH7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:4c:43:0a:d0:94:85:32:b3:c0:6c:d4:fc:92:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Jul 2 10:01:11 2025 GMT
Not After : Jul 3 10:01:11 2025 GMT
Subject: CN=780a66bb1a6e5900476a57b4d101bf6ae9d3bd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:12:b2:a2:40:ea:9c:62:2c:a5:d9:de:b5:
6a:35:df:b6:17:e7:ec:7a:e1:9c:19:fc:a8:e3:48:
93:27:a7:a1:bf:bf:d3:b7:31:32:71:20:90:f0:06:
59:ca:2c:05:3a:ea:5a:71:55:c2:d9:89:13:79:28:
91:0c:c0:b1:8d:4d:1a:0b:80:5e:70:d7:52:4c:7e:
e3:b2:26:fd:51:04:88:ff:f9:0d:ee:30:dd:23:46:
c5:0c:f7:17:eb:a1:72:e8:dc:61:50:44:28:03:19:
a3:96:d4:e9:69:93:a6:a9:6e:34:b5:e6:f6:49:1a:
66:26:68:3d:b3:9f:23:20:07:28:51:3a:6b:5c:32:
23:15:c4:8e:72:de:d8:02:8a:d1:14:22:f0:f9:48:
b6:92:9c:fe:33:00:3a:d6:0f:1b:9a:af:d5:35:20:
9a:c2:8e:b9:05:24:d6:bd:6c:2a:bd:b2:cb:12:43:
79:7a:0a:5c:67:06:5c:3d:99:cf:0f:be:2c:67:38:
13:7c:ec:98:02:18:0d:94:f5:e8:a3:f5:72:35:75:
f6:09:b8:83:1d:3b:c0:79:b2:2c:50:a9:82:96:75:
18:69:3b:d0:44:fb:8a:dd:c1:22:17:46:49:0b:19:
2c:82:af:c1:aa:47:4b:53:f8:60:df:ec:18:4d:38:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0A:66:BB:1A:6E:59:00:47:6A:57:B4:D1:01:BF:6A:E9:D3:BD:41
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3a:11:21:32:dc:a4:4c:64:5c:8c:b7:88:97:0a:14:0c:10:
3a:05:00:36:19:7a:83:da:4f:a4:4f:7b:c8:ab:ca:fc:3d:8a:
10:86:85:e6:ae:92:42:a4:da:65:e6:e3:86:2f:9b:cf:08:d1:
e7:28:86:e6:4b:77:b9:8f:ac:76:61:f8:d2:09:5e:08:84:5c:
b2:d1:98:39:e6:87:e1:88:4a:9b:02:8f:08:c3:3b:db:ed:d2:
e9:3e:3f:59:94:ac:c6:7d:e6:9d:78:f4:8f:d7:b0:aa:ab:4d:
0f:ab:c1:72:b6:61:a3:13:b8:59:9a:9b:f2:b0:3e:78:27:26:
0a:8b:de:fc:06:15:19:77:04:5d:97:db:d6:a0:1b:78:ac:48:
c4:ee:a7:df:12:be:c3:f0:1a:ab:d9:29:93:a6:e6:c0:8b:a2:
21:e3:ba:7d:79:2f:d6:c1:31:36:52:73:be:fe:c3:23:fa:2d:
d2:39:a4:8d:73:a7:2c:ed:c1:e9:98:4e:c9:5f:90:c8:01:ea:
08:f2:c5:06:aa:e1:21:38:a5:7d:c9:10:a6:1f:ab:3f:4c:08:
05:67:61:29:30:5a:fd:c9:f6:8d:b0:75:6e:07:83:e5:2b:29:
61:b0:60:c3:8e:8e:77:ad:b8:0e:2b:64:b3:b5:bd:e8:af:c1:
06:45:e8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:04:43 2025 by rpki-client