Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File: ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier: 041SW8iUX1lNSLQBCWwgApAC8BtmT6lJg3CS963kbZ4=
Subject key identifier: 9B:2B:77:60:20:6E:F4:F7:F9:9B:DC:81:4E:CE:6F:96:AF:9E:07:2D
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer: /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial: 0198D54E7ED1B561B2281C1A1B1DF6275209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number: 0953
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: cMAjr+hgE5NWxCEa7wiQpiBauUYzPaodhOqQtQbZ730=)
2: yh39pVm08WyKzque3ySW6KQ3mm4.roa (hash: aDD+CJaY1WYlwKiV6sPZZhcyKFKZy1s5Oj5KyeAwphE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7e:d1:b5:61:b2:28:1c:1a:1b:1d:f6:27:52:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=9b2b7760206ef4f7f99bdc814ece6f96af9e072d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:46:72:3d:bd:8d:d7:24:42:ca:fe:9e:01:
3d:f8:19:cb:8b:c8:7a:ac:11:14:ee:e9:53:f1:7f:
eb:15:7f:50:21:a2:62:5b:da:76:9b:37:5b:f1:c8:
dd:2e:12:e2:fb:14:47:eb:ea:14:ae:22:10:cd:39:
f5:c5:e9:9e:c8:0c:70:b4:46:ce:f3:05:ae:02:91:
ca:6e:6c:07:ca:58:9b:da:51:7a:23:fe:fe:eb:34:
7f:61:8d:b0:8a:80:e9:0e:89:11:0a:65:1f:05:13:
30:af:5a:89:4a:23:9e:f8:bf:85:bb:6d:d6:25:76:
da:51:12:1a:41:84:ce:03:7f:60:66:52:91:ad:32:
4e:3a:ea:40:fb:73:9d:b4:fb:62:98:0f:b9:c3:80:
35:97:72:51:47:1d:7d:70:97:87:54:c6:1e:4b:5b:
86:89:54:e5:72:e0:3b:2f:5b:dd:c7:b1:2c:09:1b:
89:e6:e4:8e:9a:25:6f:f1:33:9a:f0:73:35:18:3f:
89:dd:1d:c5:ed:cc:d4:06:7a:b1:d3:84:22:e6:65:
f0:f8:3e:f1:f1:cc:0c:c8:82:35:fd:5a:7d:24:38:
a2:a1:03:24:0c:9a:2f:9a:89:38:4a:0f:be:a3:ad:
14:50:34:59:e1:7c:ec:0b:5f:56:a6:b5:d1:68:e3:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:77:60:20:6E:F4:F7:F9:9B:DC:81:4E:CE:6F:96:AF:9E:07:2D
X509v3 Authority Key Identifier:
keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8e:ad:b6:2f:6b:9a:63:6f:5e:bd:40:3e:f1:9f:77:d5:d9:
0a:b1:86:02:20:93:6f:dd:5d:bf:a9:1b:f0:b9:fb:d4:62:4f:
47:19:ad:82:5d:20:ac:e1:30:d8:32:cd:25:f4:65:60:47:3e:
e0:54:95:5d:31:f8:bb:dd:bf:63:1e:83:58:90:6a:92:c5:0f:
41:fa:ef:90:a9:9d:2a:83:e8:8f:dc:5f:28:97:6b:36:5d:24:
ac:5e:4b:6c:db:dd:4e:e0:0c:a0:9b:eb:8d:ef:d8:bd:56:27:
75:9f:80:0d:8b:ac:a6:08:56:ad:b9:cc:50:38:c6:94:77:86:
48:22:3f:9d:5b:7b:28:60:98:b2:f9:29:da:b9:ec:af:9d:aa:
28:95:aa:65:c4:ae:65:8b:73:03:6f:9d:48:2f:b2:5d:ee:2f:
8b:e1:12:fb:8e:15:67:d3:88:16:8b:ff:90:88:cb:4a:8c:b8:
41:8b:53:94:53:cb:d9:a1:96:27:f2:1f:be:9d:b4:c6:cb:5b:
5a:57:fe:2d:27:1f:a5:78:88:a6:a4:02:c8:3c:20:88:a9:45:
a9:e9:a3:91:98:b2:8a:93:77:d1:46:63:49:a9:32:94:71:d8:
a4:ba:c2:40:31:1b:91:0e:36:94:65:b1:18:f7:4e:bd:9d:7a:
43:6d:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:10 2025 by rpki-client