Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: AYDCHnnDqJ4pH3sGGOW+SegeM8WlCd+BaEGcrcojfJg=
Subject key identifier: 20:D0:40:39:70:DB:0C:2F:6B:AD:33:B5:2B:26:D0:45:84:73:0E:1A
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 0198D4A807392179A23ABF161EEC9D53B7E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 04EB
Signing time: Sat 23 Aug 2025 02:00:38 +0000
Manifest this update: Sat 23 Aug 2025 02:00:38 +0000
Manifest next update: Sun 24 Aug 2025 02:00:38 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: gK+RsB+N1c/QbXmAXf8G7AyDFaD4GewAKxJEbUa9G1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:07:39:21:79:a2:3a:bf:16:1e:ec:9d:53:b7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Aug 23 02:00:38 2025 GMT
Not After : Aug 24 02:00:38 2025 GMT
Subject: CN=20d0403970db0c2f6bad33b52b26d04584730e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6c:14:d4:0c:a7:30:f5:74:f7:df:1f:4b:96:
8d:c2:b2:48:2b:f0:92:a8:74:be:6d:26:3d:bf:5e:
4c:3a:75:6b:9b:86:c3:64:30:02:fb:44:5e:44:92:
9b:2e:88:6e:af:af:a9:ca:86:4e:ad:ed:57:0a:a8:
d5:ca:4c:2b:23:f2:e8:b5:1a:51:71:69:9b:ed:91:
97:85:0d:5e:6f:f8:78:fb:6e:69:6b:2c:de:fc:d6:
bb:d1:9b:36:00:50:2a:a4:a3:35:42:92:d5:0f:6e:
f0:b4:d9:5b:26:fc:82:a1:14:90:19:e0:38:97:c1:
d5:c2:64:9f:d3:26:ca:13:65:28:5d:57:66:fe:82:
ff:ad:1d:5a:74:1b:05:01:4d:7f:52:e9:27:6e:58:
d4:8a:57:d6:1a:fc:c0:70:fd:91:83:9d:f4:76:51:
f8:75:3e:ca:19:24:ba:d9:3c:57:2f:50:51:0a:4b:
ee:5d:2f:b8:ab:58:d4:81:43:b8:30:03:6f:c1:79:
43:06:d9:30:a7:81:08:fa:2b:c6:6a:a5:01:98:aa:
d2:88:59:33:c3:81:ef:c6:c1:d3:f5:59:c6:6b:19:
2e:42:6e:6d:21:6b:aa:6d:63:3a:50:29:d0:37:8a:
b4:5e:6b:00:65:e3:3f:f3:95:3c:7a:d8:70:fe:df:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:40:39:70:DB:0C:2F:6B:AD:33:B5:2B:26:D0:45:84:73:0E:1A
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:99:6f:b3:e6:20:ab:49:62:0e:69:dc:ec:2a:4e:d6:a0:86:
69:5a:79:8d:33:7b:b8:fd:45:54:9f:3f:fe:8a:dd:79:ad:4d:
59:c9:05:ce:73:df:1e:58:64:b1:72:65:b4:45:d1:5e:a8:19:
bb:ab:47:22:6b:72:50:3a:e8:44:56:65:60:33:fb:8e:f9:f7:
91:e9:2b:cd:7e:2e:31:25:da:d9:1f:86:d1:d9:ae:05:21:96:
b3:73:25:c5:e3:c5:39:9a:be:a2:07:14:3f:fb:e4:64:80:ea:
8b:74:7f:ba:3e:cc:b1:8a:36:a5:3e:67:0c:41:ca:fe:57:05:
d3:43:b1:03:29:3a:5d:9f:9f:e0:59:e8:5c:34:82:ff:96:90:
2d:6a:51:c2:a8:97:fe:c5:4e:03:2e:42:d1:9c:22:d1:06:e7:
53:be:e8:dd:81:cc:36:fc:79:30:a4:9a:5d:f0:f4:43:23:7c:
2c:6c:a4:c9:72:a1:0d:c3:a9:ea:4d:47:a6:f5:cb:71:30:61:
93:55:1a:73:a4:c3:39:bb:1c:8a:fe:1e:a9:06:b8:15:eb:92:
7f:9d:d0:fc:b7:2b:9d:5a:66:5b:34:ed:9a:e9:e4:bc:58:00:
34:89:12:d0:9b:a2:73:e8:6f:a8:19:52:bb:d2:4e:c9:06:f9:
50:80:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:00 2025 by rpki-client