Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: toKuF7n2WDG5pELJ0/Ue2L57qwLZPYpBBFRX95HNsTc=
Subject key identifier: BE:06:1A:6A:EA:C7:A0:3F:22:8A:D0:CA:11:5C:E1:EC:47:7E:8A:78
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 0198D404B3ACFDF8BFA33225EC96A533509E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 0EE4
Signing time: Fri 22 Aug 2025 23:02:14 +0000
Manifest this update: Fri 22 Aug 2025 23:02:14 +0000
Manifest next update: Sat 23 Aug 2025 23:02:14 +0000
Files and hashes: 1: FGRnxc9C3d9faJa4e9X6S4cHjFA.roa (hash: d5SgFAeT21YMWMJqdCASd/9NKR53dDrqmG/NUaV6X8s=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: H1jlaSYGTL+Z/pMI+HPWhwTDQT4ou5Gtu8owYv6hIu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b3:ac:fd:f8:bf:a3:32:25:ec:96:a5:33:50:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Aug 22 23:02:14 2025 GMT
Not After : Aug 23 23:02:14 2025 GMT
Subject: CN=be061a6aeac7a03f228ad0ca115ce1ec477e8a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:21:20:b9:ce:b4:84:24:f4:87:29:7d:74:
ab:45:e3:18:22:bd:83:18:fb:c0:04:8f:f4:1b:c4:
00:3e:ba:da:b6:c3:74:f5:e3:20:6f:0f:84:10:3b:
7f:55:94:52:14:f5:27:bc:e7:c1:4b:6f:54:0d:c7:
1d:16:32:6f:2d:e4:63:e8:ca:ea:d7:eb:54:ba:43:
9e:6a:f4:22:4b:8c:71:b2:d7:04:a6:c8:56:16:30:
b4:99:f5:a6:3d:f9:65:24:97:d9:73:a8:3e:9f:8e:
bc:8c:c2:ea:71:a7:9e:75:f1:5d:99:42:54:cf:38:
70:8d:56:c4:70:90:a7:29:a5:95:cf:00:56:11:bc:
2e:10:47:32:66:ea:28:08:35:ee:ae:8f:ea:fd:cc:
94:e0:38:52:73:31:64:f4:50:eb:61:fe:02:76:b7:
14:76:84:05:40:f7:46:b4:6d:1b:4d:1b:07:63:24:
00:6e:15:67:e1:65:82:89:66:6d:8e:e8:d1:17:c4:
54:75:c6:54:aa:9f:20:83:3a:86:39:06:3b:ea:88:
21:ad:7c:43:02:8c:17:2f:b3:4c:1d:18:75:8e:5c:
05:5b:98:06:b8:e0:2f:d2:c2:42:78:4c:e2:0a:9b:
4b:dc:1b:fb:e8:6b:27:ca:ca:df:fa:84:17:76:48:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:06:1A:6A:EA:C7:A0:3F:22:8A:D0:CA:11:5C:E1:EC:47:7E:8A:78
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:be:a1:cc:1b:66:88:ce:00:07:e4:6e:5a:68:e8:4a:54:cc:
95:ff:b6:c7:01:7b:45:d6:75:ac:a7:28:88:57:16:18:26:70:
43:68:78:ae:df:b4:bb:1b:52:54:40:c8:11:3a:9c:22:4a:aa:
f1:59:55:74:92:32:a7:8f:42:4e:e8:85:0d:8f:50:b8:cd:63:
40:0f:ae:a6:13:4a:8c:96:30:68:df:db:7c:1f:19:91:3a:6a:
b7:4c:fe:1f:54:92:b5:96:6b:2c:41:1a:e1:fd:65:ee:b7:23:
fb:15:a5:c9:ff:ca:36:8e:68:91:ad:54:8b:fb:cb:43:6b:86:
0b:52:94:46:21:bc:05:d0:34:db:3a:3a:5b:18:a3:85:fd:af:
0e:a3:b5:ac:cb:0d:27:93:fc:f4:1b:68:fa:1c:31:a6:d1:7c:
d9:f3:ea:b1:86:ca:69:76:46:f6:bf:6f:e3:d3:19:ff:69:44:
5a:01:8e:d7:4d:08:20:1d:49:8f:3b:60:6f:bc:2d:26:8a:37:
d7:7a:4c:65:63:3d:0c:34:bd:3e:33:40:cd:07:06:b7:e5:9d:
34:d2:32:17:ae:9a:6e:d2:1c:5e:29:4f:ed:15:36:9a:5a:cf:
fb:50:8a:a4:65:6c:22:81:5e:b2:b1:35:20:5d:82:72:0c:92:
b8:b7:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:41 2025 by rpki-client