Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: jN3CxBrPd/JywxHJHx+vXbGR4UeBE4wx7IkBHK6ZCQQ=
Subject key identifier: 59:EB:AD:3F:85:A0:7C:51:27:2B:DF:D3:7E:4B:DB:82:BE:FB:7B:D8
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 0197B7EA3656CB2FE0D2F02BE211430AF926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 0D91
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: LxU6tlx0NvY-QjdCp11SSrIBGxQ.roa (hash: 4y0W42qWUeJANjUJDiVjV2lnQQegZOOleaVcw17TyRw=)
2: o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa (hash: avmrJ2rsXtwjFy7tu4gv+fivfWYGTorP5jQUfY03fLE=)
3: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: afjuD5AbGNhPeGFqhvIhfI3Ik0Cu191h0EAxTj5jflU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:36:56:cb:2f:e0:d2:f0:2b:e2:11:43:0a:f9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=59ebad3f85a07c51272bdfd37e4bdb82befb7bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:f0:fd:6c:ff:4a:9f:f8:16:27:e3:a7:b8:
50:76:6c:16:c5:2b:5b:19:c2:51:61:3c:d4:86:96:
e5:eb:3c:1a:6f:56:ef:ea:c3:f3:40:e1:29:3e:25:
66:1d:31:49:31:05:c1:d7:7e:46:56:d0:25:fb:2d:
a0:c7:40:a7:db:b5:d8:93:a6:84:fe:68:63:d3:0a:
39:a7:a5:6b:52:ae:bd:22:b7:29:d9:98:8d:9d:9e:
85:c1:eb:2a:2f:2a:0c:2a:f4:87:4b:96:ba:ea:9a:
ea:39:9b:39:b2:38:ca:87:88:70:4d:c9:30:8e:a8:
77:a5:41:e4:54:49:27:57:df:94:2d:4a:6b:a4:bf:
65:4f:44:6b:99:b6:73:72:28:f4:4d:9e:5d:c2:e2:
23:73:be:21:5b:bc:89:7d:bd:81:9a:fc:18:91:2c:
e4:73:ec:dd:a9:22:96:63:02:c4:a5:f9:d0:64:91:
65:bf:56:d3:02:42:ce:a6:8d:59:97:5f:e3:c8:90:
1a:52:fc:bb:57:f5:80:b3:30:bf:c8:14:88:83:73:
7b:72:51:2c:98:04:f7:0e:93:bd:bb:0a:4d:10:bc:
50:78:4f:d5:d9:cc:de:eb:2f:cb:9c:d9:3f:8b:1f:
6d:d4:d3:7a:70:bc:27:e2:c7:e7:73:ba:29:66:8b:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EB:AD:3F:85:A0:7C:51:27:2B:DF:D3:7E:4B:DB:82:BE:FB:7B:D8
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:87:3b:e9:57:8b:37:62:7e:89:72:5d:c3:6b:1f:79:40:d0:
53:7c:5c:46:a0:59:7e:e4:98:e9:4d:6a:05:9a:05:86:7f:ae:
23:1d:a0:21:6f:b7:42:c0:be:f3:42:bc:9f:7e:53:af:2e:5a:
20:04:21:78:ce:08:09:07:59:33:30:f8:88:24:52:fa:4a:88:
e5:09:dc:6b:2f:9c:ac:ff:8d:80:9d:08:50:76:5d:5e:42:e0:
d8:fa:bf:0c:1a:c4:f6:10:fc:82:77:9d:68:28:0f:e9:3c:b9:
7b:9f:3d:ad:2f:da:97:96:ce:87:18:0a:3c:ae:f0:ea:28:3c:
02:54:58:7a:e8:80:52:3d:f1:47:28:0e:00:94:b0:ef:1a:96:
b6:d2:d9:4f:5a:a9:56:15:5f:70:74:a2:8d:5b:09:a8:52:7f:
e1:5d:df:ec:16:12:5f:bf:30:e4:8f:96:f6:86:e4:3a:a9:a1:
fe:e4:ba:61:90:95:be:47:c5:99:38:c9:60:1b:92:ed:e8:22:
a6:87:27:18:8b:87:02:e1:d6:a6:fa:83:58:20:c1:9c:b6:63:
f7:8b:f8:06:cb:03:cb:01:b0:38:ce:23:c3:72:8f:11:95:cd:
3b:39:4b:69:2d:98:91:4a:d1:76:ad:ec:e9:da:59:28:2c:a0:
c6:16:1d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:34 2025 by rpki-client