Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: 2Ysek7iznLQ2/zuJ5AHyD+tz43WdzD2vd6yyLSNCHho=
Subject key identifier: C1:35:3F:71:8B:7C:47:97:B8:4E:F0:3F:A3:59:DB:8D:E6:F1:25:74
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 0198D4E080C74AB28DF7E4C1B9D673F8540A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0B8F
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=)
2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: 1ebAf2yYi/iTaVcVF54pTA6JWJ6bnlsKy6y6OqfB3TI=)
3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:80:c7:4a:b2:8d:f7:e4:c1:b9:d6:73:f8:54:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=c1353f718b7c4797b84ef03fa359db8de6f12574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:97:73:fb:d7:55:a7:9b:db:1e:5c:0e:c9:84:
de:df:78:37:35:e4:48:81:08:d0:4f:4e:b2:0d:b7:
c2:4b:3b:e2:cc:15:53:8a:42:cb:3c:23:b9:3e:f5:
ba:56:7c:ab:8b:18:69:9c:e1:70:f0:ed:44:fd:e4:
9f:23:9b:d3:36:6e:1d:17:c4:b9:2b:a9:a1:0b:fb:
20:15:14:ce:9e:5c:ee:83:0e:d4:b4:bd:8f:53:74:
3b:fe:b4:1a:56:08:a3:8f:b2:af:95:72:eb:f0:33:
50:25:75:81:9a:49:69:67:d9:8a:ac:90:6f:d8:2e:
a4:b0:28:93:0f:31:93:44:22:1e:21:c7:2d:fa:87:
91:b0:ef:f2:75:e3:e6:1d:ff:fc:19:4b:15:71:c8:
22:55:81:c7:14:7b:e2:f4:b0:c0:c1:2e:af:e1:3c:
aa:bd:02:3d:da:42:d8:60:11:e1:07:c2:5e:9d:51:
9b:4e:03:6d:bd:7c:82:c7:a7:29:30:82:34:d2:68:
0c:57:ea:bc:43:b8:42:f2:d3:d3:c6:c5:1f:d8:9b:
f5:c2:ed:4d:f9:cf:9e:57:1a:f8:28:4e:40:bb:36:
f2:7c:25:fa:73:8b:df:43:fd:d1:a7:69:19:ee:00:
d6:f5:b6:28:cd:00:8b:ce:7c:a8:d9:1d:40:fc:c3:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:35:3F:71:8B:7C:47:97:B8:4E:F0:3F:A3:59:DB:8D:E6:F1:25:74
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:bb:2a:0a:a0:71:48:53:8a:0b:fc:42:c1:02:35:5b:a2:e3:
eb:32:4d:a9:30:49:a8:88:a1:31:3a:f4:74:92:6d:25:e4:26:
7b:78:51:9d:9f:93:4f:1b:c4:9b:20:3b:97:9c:48:f2:59:72:
f3:87:a9:20:05:29:7f:ca:3f:2c:6c:0d:2f:ea:d2:9c:e3:73:
61:f7:8b:34:b3:c8:a5:91:97:6e:79:4b:09:13:44:a9:79:c0:
01:3a:cd:9b:18:b6:b4:cd:40:d9:d5:05:17:6f:06:41:99:d5:
af:1b:4c:01:a0:a9:65:fd:3b:75:59:a8:f5:99:19:db:9c:a1:
14:c4:6d:d1:57:8f:36:a4:4c:6b:0d:61:42:77:35:2e:08:10:
e4:a0:77:e3:c4:b0:34:87:7a:26:96:af:b5:6c:af:87:cd:0e:
75:60:7e:93:fb:e0:3f:6a:75:4a:85:32:5d:a4:4e:e1:42:5d:
06:be:b0:1e:33:1e:ae:73:3a:97:77:f1:50:88:a5:d2:50:9f:
d9:2e:26:0c:17:57:24:58:a6:ec:7d:2e:6d:da:85:be:a3:be:
c5:c0:64:fe:44:90:55:b4:96:c6:9b:e7:ae:5e:81:93:dc:cf:
64:04:ba:f9:f2:4a:f4:fe:ba:33:ff:3b:10:62:01:f2:44:94:
08:16:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:38 2025 by rpki-client