Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: 1FO1r3tzQ4U+Yb1xMiVOOCFa8BDZSdnCO5b/aL8cSOI=
Subject key identifier: 6C:2C:E3:E1:96:43:76:B1:6A:52:5B:81:B1:9D:D0:B4:B2:7D:37:79
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 0198D5BB8136F9DA727ED45ACFFB5B851971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 0E14
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: 0lerfjDbBomfVzh-fPpNdTuZC_w.roa (hash: K04vSVynMPGD818PT8TEi3joicn16R1AClxmk8kzM/M=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: 2Xa/ybd502EWiqzfmtVJw4QxwxkIbrefhImAmaHDpqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:81:36:f9:da:72:7e:d4:5a:cf:fb:5b:85:19:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=6c2ce3e1964376b16a525b81b19dd0b4b27d3779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:2e:10:fd:3e:2b:5d:f2:c0:59:3e:f1:09:
13:4c:3c:1e:c8:11:78:a4:b7:1c:58:77:ca:5e:fe:
15:ec:3f:47:33:cc:d7:3e:8b:e8:77:19:14:7d:95:
0e:39:21:8a:a9:3f:79:13:32:e1:27:45:73:3a:26:
29:40:00:04:37:b3:a8:09:d0:e5:48:d7:eb:da:e4:
e6:59:1f:20:7a:0c:32:f2:c9:c9:fb:b3:b0:5f:84:
84:26:10:3b:e8:bb:03:82:71:77:7e:0c:e3:7c:19:
66:6d:c3:65:97:e4:53:d4:74:f1:46:52:7c:bf:06:
cf:0b:03:aa:4f:74:26:b5:ed:0e:82:43:22:d8:ca:
a1:84:ca:60:c6:3d:a5:03:f6:5f:73:3d:24:25:97:
37:57:3c:c6:0b:ac:a7:ea:b7:18:83:57:ea:72:e3:
9f:2a:06:6a:42:a2:45:2d:c0:80:c4:6b:c6:25:72:
6f:8d:3c:d6:6f:a1:17:33:4b:7e:36:e3:49:d5:d0:
5a:cb:a5:3d:05:5f:14:e2:45:ab:98:84:85:bf:d2:
d2:1f:46:f4:39:2a:1a:0b:88:c7:a2:53:55:dd:b4:
3b:2d:bd:00:ad:1a:d6:85:8a:fc:c7:7f:38:71:8e:
ac:4c:da:65:58:c0:fe:ae:90:5b:a3:8c:ae:20:0d:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:E3:E1:96:43:76:B1:6A:52:5B:81:B1:9D:D0:B4:B2:7D:37:79
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:29:4e:79:18:d9:31:07:2c:68:c4:1f:43:1c:6f:08:79:22:
55:ce:e3:cd:a8:ae:a3:7e:c5:a6:1a:90:61:3b:6a:92:7f:3c:
f1:4c:93:ba:5c:62:2b:db:78:a0:9f:2f:be:c1:ca:37:0b:05:
d5:57:b3:74:7a:39:45:c5:f8:93:39:fb:8d:4c:b7:48:2e:30:
b7:ff:d0:f0:ea:aa:02:e3:3e:75:b4:b5:01:0f:0a:86:89:5c:
77:24:3c:b7:cd:c1:7a:7b:76:70:2c:44:e8:da:01:a6:af:eb:
a0:3d:90:ca:b0:d0:1d:f4:eb:2c:ee:9c:9f:5b:b4:1b:26:f2:
3d:1e:0b:46:d4:c7:c8:8b:9d:78:2c:7f:8b:93:2e:c6:dc:9a:
0c:6f:bf:7b:5c:fc:4d:ac:5f:de:8b:45:e2:da:a4:9e:8c:5c:
10:27:66:ee:ce:85:91:0f:79:6f:e1:0a:92:78:e3:d0:c3:a1:
05:46:c3:a3:21:4b:43:5b:2b:a7:14:e8:69:3f:2d:b0:59:f7:
2f:66:7e:b0:fb:6c:8e:c2:3d:e2:ee:c9:79:e0:d1:71:3c:23:
60:5e:e4:8f:fd:4f:0c:61:70:fc:d3:7d:ef:93:02:c9:28:e6:
cc:d3:9f:9c:52:61:c8:a0:10:b9:7d:67:59:b6:92:22:d1:fa:
4f:dc:e1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:06 2025 by rpki-client