Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: gV31BPsDbeMYRO1+dtm4fsFdYywipnIc0CVx9Xdz09Y=
Subject key identifier: 58:A5:5F:D4:9B:A8:D3:FE:DC:1F:8E:FD:CB:B4:F8:9C:A3:30:61:6C
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 0197CA275A2186D6B6E12F4D4BA614981C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 08:01:05 +0000
Manifest this update: Wed 02 Jul 2025 08:01:05 +0000
Manifest next update: Thu 03 Jul 2025 08:01:05 +0000
Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=)
2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: J/cvlrTIb+dNyGzd132K0JfTWsa5DT5z/hOq5zX/jQs=)
4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:5a:21:86:d6:b6:e1:2f:4d:4b:a6:14:98:1c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Jul 2 08:01:05 2025 GMT
Not After : Jul 3 08:01:05 2025 GMT
Subject: CN=58a55fd49ba8d3fedc1f8efdcbb4f89ca330616c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:73:2b:96:5f:da:0b:f4:d6:b3:9b:1a:ba:
9a:62:e6:6a:8a:14:14:f6:bb:57:dd:20:ae:7e:fb:
d6:78:72:61:55:b1:e2:ca:c9:c5:9d:1e:a3:8a:37:
2c:0b:24:87:0e:4b:51:00:12:75:c0:a0:3b:fc:8f:
e8:c5:b2:78:ed:f0:94:d7:a2:8f:bf:b3:22:a6:6c:
65:ec:39:92:a7:33:c8:f3:23:6d:79:73:07:89:21:
13:b0:f9:09:76:56:ac:c3:3e:2c:40:a6:f0:30:cc:
e9:af:dc:01:79:12:53:6c:53:34:09:a0:b1:4e:0f:
fa:aa:1f:87:e8:58:b4:1f:52:f1:b3:76:89:a1:2f:
0e:15:26:0f:e2:e1:9f:3b:3c:36:97:8f:24:88:b4:
39:13:93:26:30:25:b4:68:d1:f0:ca:e5:91:24:83:
0e:e6:00:86:46:ee:ac:9b:2c:3b:6e:ca:6b:db:ed:
41:ef:ce:0a:ad:36:5d:05:37:f6:12:d4:b1:86:c7:
56:70:cc:34:2c:61:fd:a8:51:84:3b:31:e0:07:91:
e2:0e:18:33:e6:60:49:2a:3c:14:d3:de:0e:3b:a2:
7e:95:d1:d4:5b:e9:50:33:06:84:9b:f5:4b:34:4d:
17:f4:fe:91:e2:66:b8:f9:0b:93:da:3c:f2:88:46:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A5:5F:D4:9B:A8:D3:FE:DC:1F:8E:FD:CB:B4:F8:9C:A3:30:61:6C
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a3:fc:7a:ca:1c:af:17:94:73:d2:ba:49:92:cb:07:27:45:
f0:6b:25:b6:9c:d6:b7:f0:e5:a6:b6:19:b9:16:be:ec:31:6e:
d7:5a:f0:cb:49:1f:5b:af:b7:70:c6:91:3b:1f:14:db:91:fd:
92:39:f1:f3:dc:39:dd:4a:d2:e1:f1:ac:e0:f5:69:c0:d8:a3:
d6:a2:d7:fe:c0:d6:a4:2d:1f:68:5b:fb:f5:90:0c:e9:6b:d1:
2c:6e:5a:3c:57:1c:1e:b5:35:0a:36:aa:07:99:7b:ef:73:ff:
81:ca:f6:74:d9:5c:98:b5:ba:e4:d1:61:4e:46:ec:87:e7:94:
0c:88:ea:eb:b5:72:bf:10:5c:b1:15:f4:89:bd:1c:df:2d:72:
66:c9:7a:d2:76:64:25:5d:5f:46:42:26:af:3d:11:45:0d:e3:
50:2f:24:56:0d:be:05:d6:f6:10:84:19:a3:61:25:30:86:ea:
61:76:93:0a:cb:d2:93:15:37:e2:89:5c:62:2c:84:a7:8c:75:
7d:1e:cc:b2:4d:f0:f0:1f:1e:8e:15:11:b6:ac:a7:ae:c6:b6:
b8:ca:79:50:bb:7a:8f:fe:ae:ff:e2:0c:f6:43:a5:42:9f:0e:
2f:77:5f:1e:e4:a6:03:f5:75:b4:15:98:32:07:5c:89:e1:06:
44:77:54:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:16:05 2025 by rpki-client