Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: 7g1GinLzOA5DEM5twBtXc8AJPuITMLzuFaSw0zcip7Y=
Subject key identifier: 35:1D:60:18:AF:6E:24:40:0C:17:88:5E:25:F3:48:31:42:A3:2F:A0
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 0198D4A7B42E8321EBCEE3F316F681A1064C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 02:00:16 +0000
Manifest this update: Sat 23 Aug 2025 02:00:16 +0000
Manifest next update: Sun 24 Aug 2025 02:00:16 +0000
Files and hashes: 1: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=)
2: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: f9HuuNAhCpodeEUDyjJ3FtVnuqCLEdMUpy5yuW6o2jA=)
3: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b4:2e:83:21:eb:ce:e3:f3:16:f6:81:a1:06:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Aug 23 02:00:16 2025 GMT
Not After : Aug 24 02:00:16 2025 GMT
Subject: CN=351d6018af6e24400c17885e25f3483142a32fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:51:52:6b:07:91:2d:f3:9d:6a:bd:b0:4a:
3d:c0:0b:ae:2b:25:90:de:c8:2a:35:98:cd:ea:ac:
f0:fb:e5:98:2e:15:b2:83:83:69:35:f9:0d:d7:8d:
ff:26:b3:bf:01:69:97:9e:d7:20:3b:bc:fc:bb:2a:
01:77:ad:06:26:39:90:b2:ad:f9:87:61:08:91:fd:
64:47:29:60:4b:e1:43:6f:1c:03:51:39:6a:db:13:
7f:7f:d4:ed:8e:1a:50:7d:6b:1f:65:8f:63:49:1c:
6b:59:71:20:07:9e:74:fc:b8:0c:11:ca:c5:f8:b6:
2a:c4:ed:80:99:d5:23:7a:6b:fb:25:2c:22:8b:4a:
8f:12:ce:8b:55:4d:92:e5:19:4d:5e:55:d0:a7:06:
15:44:bf:2c:49:c5:18:21:10:ec:16:f0:0a:cf:43:
46:ec:5d:0a:87:14:ff:45:64:7e:67:2a:25:3a:71:
c8:7c:c7:1a:15:e5:18:44:0c:32:66:2c:7d:6a:1a:
6c:b0:be:1d:80:42:41:5b:e0:c8:09:c7:b3:ac:37:
62:8e:1d:85:c1:30:40:1c:a1:a4:9a:dd:57:f3:6d:
ee:ec:77:7e:0c:5a:23:e1:6c:99:e5:fe:de:ad:5e:
b7:d9:e9:cf:69:83:d1:e2:f8:86:69:a8:75:33:fc:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1D:60:18:AF:6E:24:40:0C:17:88:5E:25:F3:48:31:42:A3:2F:A0
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bc:ad:80:61:50:f7:54:bd:c2:e6:de:88:83:5d:84:94:d1:
c6:1f:76:ba:d4:7e:a1:62:26:68:e6:e9:8d:7e:13:9d:82:04:
53:c8:10:71:79:33:55:7d:b0:66:6a:fe:84:0b:4d:25:f8:3f:
c7:d5:61:45:8e:f8:8a:36:0f:9f:74:2c:b7:c4:bf:c0:c6:0f:
f3:5a:11:a0:ed:ba:a6:ca:7f:22:b2:7d:34:b3:05:59:59:71:
e5:d8:6a:f2:4c:92:37:3e:49:14:1f:8a:2a:48:ae:ac:36:b0:
ef:b9:e6:9a:1d:5e:54:fb:b7:30:f8:48:58:03:2c:3d:c2:13:
21:35:60:4d:8a:fd:2b:85:87:14:1c:50:2b:20:dc:fd:ac:c6:
52:26:27:35:a8:db:d7:3b:7d:7e:f5:73:0b:4c:46:6d:ee:0e:
33:cb:b6:5c:42:7a:6d:3a:fd:1d:0d:a5:66:4c:fa:29:94:ed:
00:3f:fb:d0:81:b8:60:b1:f1:61:50:82:7e:d4:1d:49:08:e9:
3c:48:00:8b:e2:bb:9a:c6:67:16:bc:ef:b4:2b:55:db:5a:2d:
8f:97:9c:75:75:b0:93:d9:3a:c5:40:38:8d:60:ee:2a:1a:54:
c2:d8:7d:24:c7:29:42:7b:26:64:c3:15:c7:36:a6:0b:5f:2f:
7f:70:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:54:58 2025 by rpki-client