Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier: +6gcy4Q9xX2C+aKE85b/rtY+3jW6kYIJky+xOdw5WZE=
Subject key identifier: CA:38:D1:7F:5A:28:FB:D4:DF:8C:52:CE:01:7D:C0:4E:DF:BC:FC:9F
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 0198D6614C5CA89D51111AEBEF90BBE53A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:37 +0000
Manifest this update: Sat 23 Aug 2025 10:02:37 +0000
Manifest next update: Sun 24 Aug 2025 10:02:37 +0000
Files and hashes: 1: VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa (hash: E6B6Bl1mDcetd5EsaNvc0boHcTeWIhqXRqGoFPj9kUc=)
2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: qrg307nKN93xKMvyUpkSZMrG+M9waMgwlnxTNt3HBbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:4c:5c:a8:9d:51:11:1a:eb:ef:90:bb:e5:3a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Aug 23 10:02:37 2025 GMT
Not After : Aug 24 10:02:37 2025 GMT
Subject: CN=ca38d17f5a28fbd4df8c52ce017dc04edfbcfc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:e1:d4:b6:1e:1c:56:f6:ca:93:2a:56:cc:
8e:85:dd:b1:3b:f2:52:54:cf:fd:0f:de:cf:42:a0:
21:bc:ce:6a:4d:de:e2:47:20:3a:8f:36:a4:10:c5:
63:6e:67:f7:80:12:d0:40:61:33:d0:0e:a5:57:93:
0b:f3:27:fd:01:98:c9:96:60:95:d2:e2:06:c5:7b:
8e:02:b2:74:98:3c:b0:2b:11:51:3c:57:3c:03:e7:
bf:3e:c7:ec:29:3b:e5:65:d4:79:76:c4:0b:8f:0e:
93:5a:7f:a5:9a:18:95:6d:70:09:0c:a6:02:be:19:
b0:ab:d2:75:7d:59:9b:62:55:c2:cb:54:37:b1:e1:
6f:8f:27:90:79:d2:a7:51:97:e4:dc:24:b6:4e:23:
c5:74:65:d2:c8:75:67:01:bb:58:00:1e:7c:ec:44:
be:50:3d:c4:ee:16:0e:46:04:c7:6b:05:55:23:e7:
6b:73:a1:cd:a7:f2:10:c6:cd:be:42:c7:3c:88:aa:
29:ac:96:14:9a:7a:52:8b:e9:37:4d:f7:b4:9f:56:
7c:02:fb:d7:95:bd:ea:96:a1:3d:f7:8b:75:c6:de:
fb:f1:f0:30:61:cd:b1:d3:2e:99:cf:db:82:6c:e4:
c2:06:e4:4d:ba:11:cd:aa:54:e3:70:b5:0f:9d:81:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:38:D1:7F:5A:28:FB:D4:DF:8C:52:CE:01:7D:C0:4E:DF:BC:FC:9F
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0e:6b:ff:6e:3f:39:b4:ab:64:36:e5:2c:1d:6d:f5:7a:af:
8d:7d:84:c2:b3:84:32:99:cc:ab:c0:79:dd:37:ca:83:e1:84:
dc:22:6a:b5:d0:a0:2f:4d:c4:4a:7d:38:94:3d:48:9f:98:07:
e8:79:6c:14:24:21:59:68:ad:71:b1:bb:2a:26:2d:6e:d9:d4:
97:b8:02:6f:76:65:a1:65:cd:57:9e:32:41:77:39:77:d7:ce:
81:f7:9e:f3:76:3a:e4:98:07:91:47:f6:88:34:e9:f0:7d:1d:
90:65:94:66:87:a1:0a:bf:9f:21:dc:a6:0f:6d:c2:61:e2:95:
dd:38:3a:24:76:99:c5:8f:2b:7d:83:33:73:ef:94:2c:25:3d:
f0:18:ac:37:aa:ba:27:c5:5a:b7:d5:d9:36:af:2b:c5:8d:b2:
eb:2c:25:5b:35:6f:67:43:b8:6f:56:43:09:d6:86:27:ef:2d:
41:bc:c4:01:c5:36:b9:e0:ea:53:96:ae:8c:ea:aa:90:ef:d1:
63:6e:15:d8:c4:c3:72:9c:a9:67:6b:d9:ab:93:1b:e1:14:59:
f1:53:67:17:a6:c9:73:cf:cf:a0:6d:93:35:88:f4:96:73:f6:
6c:e1:0e:71:0b:f5:20:58:fa:94:50:d1:41:80:1f:36:8e:79:
d1:e1:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:30 2025 by rpki-client