Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: ZbV0khzBdQtTxApleGXE6Qa324R7tUUdY7QZX0f3Iy0=
Subject key identifier: EC:EB:20:B0:4F:DC:57:91:32:47:3A:39:2F:C8:F9:6E:99:84:FA:F9
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 0198D4A7B4C43EBB385C0A1C611288D2BB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=)
2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: 9QhXCK35fR3GPuboDcUhMf243e9DTSp/jnnZS6wQ72Y=)
4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b4:c4:3e:bb:38:5c:0a:1c:61:12:88:d2:bb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=eceb20b04fdc579132473a392fc8f96e9984faf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:f7:5f:e9:29:b2:0b:3a:d7:c8:25:a3:ff:
64:6b:ce:12:5c:ca:6f:97:56:ef:eb:c1:bf:72:2a:
47:11:3b:22:0b:44:87:b7:a8:3d:f5:29:6c:94:e3:
6a:df:fa:de:e7:f8:0a:37:7c:04:51:3b:df:94:52:
1a:c0:9f:c8:9d:d6:20:43:15:f1:e6:86:c7:09:06:
ae:ba:62:1a:83:b5:89:f4:32:9b:ed:53:7c:58:23:
c1:97:e1:a3:06:b6:52:61:aa:1a:50:1d:63:16:29:
68:23:89:e5:5a:b6:1d:f3:af:83:0a:24:7e:ac:f4:
27:9a:88:a1:b6:d6:7a:7e:d4:97:f4:d5:a1:9f:bb:
d8:5a:1f:56:c6:7b:10:61:8e:f9:df:bd:5e:4d:d0:
47:8b:7d:23:2f:37:f8:1b:cd:93:b9:45:f1:a5:5f:
a0:97:bd:28:ff:f2:51:f0:16:e1:92:62:d4:e2:f3:
6d:42:ec:47:6c:61:0c:03:b9:24:6a:41:f9:7a:5c:
3e:f6:b4:8f:a0:18:43:56:17:8e:ae:48:2b:96:87:
21:d8:2b:00:9b:ba:be:11:42:bf:81:01:95:5f:bb:
5d:42:2a:83:9c:1a:ba:f9:49:36:3b:fd:c8:a2:ce:
22:8a:06:7f:b9:22:e4:16:71:60:3d:9b:96:62:ae:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:20:B0:4F:DC:57:91:32:47:3A:39:2F:C8:F9:6E:99:84:FA:F9
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:85:5e:42:4b:b5:65:5a:f8:06:38:50:74:ba:1f:7b:35:a0:
89:0d:b6:23:9c:41:f3:cf:ff:61:2f:b2:2d:5d:dd:5f:c9:b4:
20:a1:e5:f9:98:aa:00:e5:53:ea:3c:84:92:bf:46:b1:83:3c:
bc:d9:49:e2:28:d7:ce:93:d6:a0:17:42:d4:d4:15:93:6b:7a:
4e:e7:e8:52:ee:e2:58:46:1b:72:5a:5e:93:f1:53:22:ee:b0:
46:ff:8b:d1:26:25:e9:39:40:61:11:1a:13:16:5d:37:a0:65:
cf:45:ba:d1:72:d2:12:65:29:13:1d:42:51:ee:70:c0:cf:14:
1d:ea:e0:ab:d4:ba:fb:30:4a:a6:c9:6c:f2:11:2c:90:65:fd:
ac:37:a8:c3:35:91:b6:d6:83:7d:82:18:2f:39:52:c9:77:76:
21:d1:f1:0a:07:71:cc:9d:eb:1e:c0:74:cd:18:45:f4:5e:70:
e7:7c:50:02:99:eb:9c:20:3d:bc:14:28:25:0c:fe:e4:19:e8:
53:2a:39:fd:a7:2d:00:7a:a5:29:2e:ce:bf:03:c5:f3:2c:fc:
e2:2b:35:97:98:ae:6f:4f:ec:e6:46:31:c4:31:ab:e0:c3:21:
ea:43:f7:c8:4a:b5:bf:2d:8b:f9:af:21:c5:bc:20:60:87:3c:
27:00:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:57:36 2025 by rpki-client