Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier: DWZFxSVkrs1UoMDCarKBUpHL56qvUfaxjIH3zrrdOWI=
Subject key identifier: D7:39:5D:01:73:31:C7:C8:AC:75:E5:D1:A4:3F:5C:F6:73:10:11:78
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 0198D660CBD041942DA9E5DE004551D576E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (hash: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=)
2: GelQ-wpEtVaOdgayfz6S6TVZ0zQ.roa (hash: /97Q6YMRjpTXM1yiFxK+BKHm6SI3QfLA+ZDxZJQchX4=)
3: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (hash: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=)
4: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: r6A4WfxDjH3VST03mztvplFXGClKBTMRPUSeZbngybg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cb:d0:41:94:2d:a9:e5:de:00:45:51:d5:76:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=d7395d017331c7c8ac75e5d1a43f5cf673101178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:84:0a:72:42:b5:b8:0c:de:98:42:d7:6d:
b6:7c:b5:f8:30:ca:9a:98:1f:d4:0b:c0:0d:41:16:
93:aa:9c:ef:25:43:40:aa:c7:0a:24:b8:6a:78:f4:
6a:32:c3:8a:d5:b0:2e:0f:8e:cb:14:28:ec:4b:3d:
40:85:f6:cf:fc:53:45:d0:ea:0d:bb:59:e3:9d:90:
5f:90:53:2a:62:32:10:c5:19:dd:e5:bb:ce:8c:62:
5a:3d:8a:48:d8:3f:dc:fb:67:f5:4b:8e:66:68:4a:
67:4c:5e:3d:9d:fe:dd:04:9e:7f:15:d1:67:0d:9b:
e5:85:a0:0a:cb:04:2b:04:77:3f:a1:20:fd:89:f6:
14:e1:d4:57:b7:e8:59:32:35:7b:99:44:0b:9b:dd:
b4:a6:38:56:08:03:b2:f8:a4:87:97:ea:fc:9a:8f:
09:e4:97:39:9b:46:20:ee:28:bc:f7:c3:92:de:41:
9c:38:d2:d4:b0:6e:99:cc:40:8d:f0:a1:cd:22:47:
32:3f:4d:1c:0a:76:23:f8:51:1d:ff:60:a1:fc:8d:
a5:4c:4a:ea:0b:15:9b:a0:fe:31:13:02:28:cf:14:
f1:b3:3b:e7:b2:30:0e:b4:6f:47:f4:73:be:e4:33:
ab:24:69:33:ec:b1:a0:9a:37:45:9c:0c:20:73:34:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:39:5D:01:73:31:C7:C8:AC:75:E5:D1:A4:3F:5C:F6:73:10:11:78
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0f:53:7a:57:19:13:3f:bb:29:b9:0d:ee:33:62:46:6d:e0:
b6:c5:a2:f7:5c:ed:24:87:a3:44:4e:05:21:23:52:b3:06:8f:
89:a0:d8:6d:66:dc:5a:21:69:b1:8a:5e:76:1d:c3:fd:81:85:
68:65:55:8c:c0:2b:24:a5:4d:67:68:91:95:ae:e1:22:5f:15:
b5:77:47:e5:4d:d3:3f:78:92:b9:97:24:6b:93:7c:c7:cd:8e:
11:82:cd:32:21:3a:05:4f:bf:9d:09:96:23:fd:d9:a3:b0:f0:
47:1a:63:f8:61:9f:d3:32:9b:83:6a:3b:db:c6:de:f0:e5:f1:
b2:47:65:a9:b0:1c:ae:d9:63:81:96:4d:ad:8d:a8:87:2e:d4:
fc:b4:7c:30:fa:84:f0:2a:92:70:4e:69:7c:f6:dd:4c:15:51:
5e:fa:94:3b:b5:6d:09:67:8b:19:9c:a0:a7:1f:d6:8b:b8:2d:
fb:9d:e4:df:22:ef:2d:d3:79:e0:12:76:28:ef:a0:2e:e7:5f:
86:48:86:36:32:8b:b6:fa:d6:a4:f1:8e:a0:11:8f:ed:30:56:
63:aa:10:a1:5f:a0:17:8b:31:59:e9:66:d0:df:6e:25:69:85:
e3:53:8a:5f:53:9b:51:02:cd:08:ce:9e:d0:3a:cd:f2:ad:d9:
f0:26:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:33 2025 by rpki-client