Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: d5okLnI5odX8+YSOKN1p2C2wwxtFdnpCLqHCQ++8KCU=
Subject key identifier: 78:9F:F6:A5:C3:BA:2D:DD:34:6F:C7:33:E9:E2:5D:52:EC:19:3C:FC
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 0198D5F1AECB13E446647494E874EEA43883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 15A2
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: asi4U6NxiTvmNxdzII2Ib6x2KDDva3/z09tXz8ntm+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ae:cb:13:e4:46:64:74:94:e8:74:ee:a4:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=789ff6a5c3ba2ddd346fc733e9e25d52ec193cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:16:82:a6:f4:ee:93:a2:96:99:5f:d3:1b:
e5:d5:f7:75:fe:51:8a:4b:a9:14:0f:17:d8:8f:5a:
0f:f6:21:ea:fc:53:a4:63:50:48:8c:6b:a3:25:47:
42:15:74:1e:dc:da:37:27:f1:97:a8:d3:00:71:d6:
67:50:96:f3:de:37:ff:aa:5e:c6:12:06:39:13:84:
e0:d7:93:e1:d6:a8:ea:15:b2:7c:c3:9d:79:bc:2e:
9b:dd:21:f3:75:5f:6f:e1:24:fd:5a:04:d7:66:6f:
95:a9:54:e1:06:25:f6:5b:8d:83:e2:2c:f9:88:a4:
ed:de:d9:99:d4:25:0c:61:14:f0:4c:8e:39:27:48:
d3:0f:35:fd:31:a0:42:0d:93:c2:82:c2:1a:79:47:
dd:37:19:4c:26:2d:c0:75:9e:d6:bf:95:55:43:38:
58:98:17:e1:fa:6c:be:dc:04:e5:73:d2:cd:9b:bd:
d8:a1:46:51:a3:fa:d9:53:14:06:fc:21:74:76:a9:
58:8b:70:f9:93:f2:dd:9e:92:5a:d2:98:c5:12:22:
30:0b:93:3c:60:9e:d3:dc:69:20:d7:6c:35:f7:ea:
be:bf:c1:b0:11:4d:d4:d8:b8:15:ba:17:ab:62:84:
b4:9d:d0:bf:18:7f:5a:0b:41:a3:c4:f9:49:88:b3:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:F6:A5:C3:BA:2D:DD:34:6F:C7:33:E9:E2:5D:52:EC:19:3C:FC
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f1:17:66:11:6d:d9:27:46:24:93:9b:2d:d0:bc:13:ea:6a:
bd:f3:9b:eb:e2:1f:e1:86:79:fe:65:43:af:8a:6b:a9:c3:ea:
f9:fd:91:e7:10:f8:84:36:f4:83:a1:ed:e3:21:a5:17:7f:0d:
5b:a3:ed:23:cc:06:88:4c:f7:b4:e6:c3:d8:a1:1a:e2:82:89:
76:d8:a7:f5:97:07:cf:cf:b5:9e:05:ff:aa:c6:4e:23:f5:66:
3e:99:18:87:1a:ec:a8:91:a3:87:8f:fe:05:ff:03:6b:3e:28:
2f:38:95:cc:01:31:ec:2e:a2:37:76:60:32:2b:79:e9:db:65:
32:25:1f:af:b7:99:d2:88:c1:58:12:5e:e8:51:84:ab:2d:d0:
27:62:a9:83:b1:f9:c5:64:5d:f7:2f:50:91:5a:dd:5e:32:e4:
e8:db:73:9e:b3:54:b5:a1:d2:83:23:62:c3:72:96:1a:ae:f8:
ff:e9:db:7a:ad:a3:7e:95:69:f6:aa:57:80:ca:fa:a6:f2:2b:
ce:8f:12:53:60:4b:55:c5:3e:e8:c1:fb:e6:49:95:8f:cc:05:
eb:0c:a8:f4:3d:89:f9:d3:06:2d:c6:e0:e3:95:84:91:0a:82:
0c:e0:eb:0a:a3:7e:bc:84:53:86:7c:35:98:3e:08:c5:88:d2:
9b:b9:f0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:01 2025 by rpki-client