Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier: St1ViF/eFMEJGCh1VXFEjD3K48KGHqePf4P8Iij3CmU=
Subject key identifier: 22:0B:BC:5F:73:39:84:5D:BA:DA:07:08:51:C1:E2:92:1C:BC:43:8F
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial: 0198D5F15C682B5C9FA0C8129C98E5C093D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number: 0722
Signing time: Sat 23 Aug 2025 08:00:21 +0000
Manifest this update: Sat 23 Aug 2025 08:00:21 +0000
Manifest next update: Sun 24 Aug 2025 08:00:21 +0000
Files and hashes: 1: hnLlF72Gey1RhDc5w20W5CDAULo.roa (hash: shW0FHDTxcWsn5y+FQlRP0Y7mcQwz41mLYft4nrAmSI=)
2: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: s8rlfQZPN8pFoNttd1S2KXTBq83fB9mLjvVrX2zHXLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5c:68:2b:5c:9f:a0:c8:12:9c:98:e5:c0:93:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Validity
Not Before: Aug 23 08:00:21 2025 GMT
Not After : Aug 24 08:00:21 2025 GMT
Subject: CN=220bbc5f7339845dbada070851c1e2921cbc438f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:82:d2:89:3e:1f:5d:0a:e4:79:bc:91:41:
9c:ee:1c:97:f0:9c:ea:62:57:46:4f:2f:0a:3a:4a:
e6:f2:1a:af:fd:e7:77:9a:30:8f:73:80:e8:38:97:
08:7a:05:df:a6:48:2c:76:87:f0:c3:3a:74:d4:65:
42:27:fb:b3:78:33:33:27:7a:90:a4:b8:f4:ff:54:
44:b0:b1:99:b9:dd:dc:27:0c:08:5a:f2:8c:2d:3f:
c8:4d:46:ce:be:74:a2:9d:5e:bb:94:96:a0:4d:e1:
15:de:f7:0e:da:3f:da:b5:b6:fe:65:96:8e:e2:ac:
20:70:46:c0:64:ba:21:d8:95:0b:fb:3f:67:a1:c1:
be:54:f5:67:af:a4:4b:58:dd:49:bf:5e:b5:71:e3:
35:b7:b5:60:ff:7b:f2:8c:ce:86:3d:b2:55:02:fd:
67:52:aa:dc:09:ae:ab:28:13:d8:9c:50:4f:cb:85:
e6:28:b7:85:3b:09:da:2f:2f:e8:85:85:5f:04:4d:
44:be:5d:ee:ca:45:97:43:0d:f7:68:98:0b:5a:0d:
16:33:97:5f:87:af:e7:ad:6f:33:b0:d5:17:27:f0:
09:ed:18:a3:f9:39:e9:eb:fe:a1:08:d8:20:be:36:
7b:69:58:f3:8b:df:12:b7:14:dd:d7:09:55:3e:62:
eb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:BC:5F:73:39:84:5D:BA:DA:07:08:51:C1:E2:92:1C:BC:43:8F
X509v3 Authority Key Identifier:
keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1b:69:77:7b:39:dd:0a:86:00:2a:a4:5e:88:2e:68:92:e0:
92:e5:8e:45:24:36:64:af:1f:f7:e8:4c:56:78:f8:a4:e1:aa:
9c:e7:5f:3e:bd:47:6a:6a:87:c9:f5:ed:62:1e:40:44:cf:0a:
ba:0b:ea:07:ad:b6:83:f3:1b:ae:f6:6d:63:2d:33:65:8c:a9:
9f:b3:97:bf:e5:c1:a9:5c:90:1e:28:69:33:dc:5f:5c:e2:07:
bc:fa:39:3e:06:18:0e:38:b6:3e:bb:31:90:29:86:ce:35:50:
68:b3:c1:a4:ae:89:31:5c:24:e8:79:6f:ba:4d:92:fd:6a:ae:
20:8b:41:bd:09:b0:eb:de:42:04:fb:9c:9b:8a:2f:3d:36:8a:
fa:bd:6b:da:7f:a4:83:ce:83:97:97:23:ad:ca:30:b0:b9:da:
0d:d9:38:b8:8a:b5:d0:06:61:99:91:50:61:64:91:3d:bd:08:
aa:50:01:1b:21:36:42:c7:9c:22:d3:5f:4f:5f:f8:73:9d:c9:
66:1a:f0:fc:0e:f2:c5:e9:79:d2:74:2c:75:38:f3:12:8b:f2:
cc:83:74:ef:76:12:7f:41:15:5b:df:22:8e:e2:21:fb:56:c2:
0b:1c:9b:41:a1:fd:af:fa:21:bb:3e:68:cd:d7:33:9d:ce:9e:
52:ce:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:22:56 2025 by rpki-client