Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: 92icHjg0K0po5iq4op8nqXqi2HLhWub3ngDLGaAYYsM=
Subject key identifier: 96:0D:6C:6C:14:03:E9:DB:71:DF:70:E9:CC:D3:51:B2:E5:A6:5B:CE
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 0198D660BAC7FAD5B29030DAD2D63F7831B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 0E27
Signing time: Sat 23 Aug 2025 10:01:59 +0000
Manifest this update: Sat 23 Aug 2025 10:01:59 +0000
Manifest next update: Sun 24 Aug 2025 10:01:59 +0000
Files and hashes: 1: MKMxfWvmz2LhPfN0AO6kIjx4_i4.roa (hash: RBO8o15DgznSyTBOVtLWyg+YfWl1Xfsv3AO7LGd0yBE=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: sFBoK5qrM1CRXdKVP8zG71rE60Iu/tP+v/wa9QA7Ykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ba:c7:fa:d5:b2:90:30:da:d2:d6:3f:78:31:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Aug 23 10:01:59 2025 GMT
Not After : Aug 24 10:01:59 2025 GMT
Subject: CN=960d6c6c1403e9db71df70e9ccd351b2e5a65bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:31:d4:88:e7:2a:40:96:bb:87:65:8f:3b:
bf:7c:e3:73:ba:f2:ef:01:9a:aa:8d:1a:2f:63:23:
5a:c6:0b:a7:e1:35:9a:a6:03:af:bd:e6:3b:ca:70:
cf:66:30:3b:c6:d8:68:62:1f:5a:ad:c5:36:1a:8c:
e8:5c:7b:94:1c:5d:cc:fd:b4:9d:24:0a:3e:5f:71:
42:2c:13:f6:8e:a1:70:6d:40:74:da:fa:27:7d:fd:
0e:dd:4c:07:f6:73:c0:a4:cb:e7:60:9e:d7:f3:a3:
6e:23:45:bf:32:d9:13:7c:7c:5e:4e:cd:53:b9:85:
d5:fd:bb:54:bb:dc:a2:7a:e3:09:6f:a3:49:72:7f:
f2:83:23:80:bc:76:9f:b8:1b:f7:63:2b:48:f0:93:
d3:c4:e6:5a:44:24:92:5b:32:b8:cd:22:ae:20:91:
55:f1:26:86:d6:b1:fe:22:8f:90:27:5c:f5:c6:60:
85:52:13:2c:7b:7b:a5:46:9d:75:20:81:54:96:80:
12:e9:4d:6e:bb:d1:d4:da:64:43:a8:2f:62:cb:70:
43:7f:82:2e:c7:84:f6:f4:78:9d:34:31:d9:83:a7:
da:40:f9:57:18:2e:1c:99:54:c8:5d:0b:32:b5:1a:
bf:ec:9d:44:3a:8c:48:72:82:48:3a:ae:90:6d:d3:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:6C:6C:14:03:E9:DB:71:DF:70:E9:CC:D3:51:B2:E5:A6:5B:CE
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:93:bd:4d:a3:b3:bc:c5:27:6f:0a:ff:a4:3c:48:79:76:78:
8e:d8:8f:3f:45:0f:14:00:d4:27:78:5a:2a:60:e3:c9:a1:22:
35:fe:dc:c6:6b:02:a9:74:ed:ff:d9:56:ca:a9:04:80:f7:62:
5b:5a:b2:6c:d1:b1:6a:18:40:61:7c:8b:e1:f9:a8:f0:60:77:
f7:e3:54:d7:03:f7:df:4a:7a:c3:07:fc:0d:b6:f0:d1:67:10:
7d:3a:fa:00:5c:07:5e:ee:47:79:43:e4:25:93:c1:b8:ad:fd:
d5:f1:25:20:e0:38:39:22:df:a9:fc:d6:80:bf:b0:ce:e6:6f:
0c:3b:5e:6d:47:e5:c9:d3:ed:20:e1:d3:7f:e2:e3:01:89:ea:
b7:27:c1:fd:3c:27:8c:10:ae:20:e2:47:d4:3e:20:75:02:ec:
4e:8c:37:31:a1:10:52:74:ad:27:77:7f:3a:e2:cf:2f:c7:31:
cb:a9:91:31:d5:a2:57:f4:3c:f7:ba:68:93:48:07:1f:10:73:
3d:7a:5a:32:2e:92:ba:5d:01:90:64:85:83:26:21:77:28:42:
c2:39:64:b6:b2:35:35:fd:01:39:c1:d9:81:cb:e7:bb:b9:3e:
0a:63:eb:f6:56:02:91:f5:bc:89:98:9c:b6:82:e8:ef:74:f0:
18:92:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:23 2025 by rpki-client