Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier: acbdEK78b+fy8g0nst6QIGY2mByDLipmGYzSppRZagA=
Subject key identifier: FE:6A:29:1C:7D:AF:06:48:EC:25:D8:39:31:45:7C:E3:DD:A8:6D:86
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer: /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial: 0198D583AD7545F9F66BF7627A53BCCC5A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: SxgKNPaYJVhAK36SOSTuyxJmYzI.roa (hash: iBEUhnRScZ+rajzC9bqU9rcXbnYIQMvrpQOY+tW8FQc=)
2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: kKbXCn/2CHInG+xfKrKuvtmPOEYODiF/oW51j68Y9HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ad:75:45:f9:f6:6b:f7:62:7a:53:bc:cc:5a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=fe6a291c7daf0648ec25d83931457ce3dda86d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1f:2a:44:55:fe:7d:cd:01:7e:5c:07:62:97:
20:81:84:2c:96:3b:91:b3:07:43:58:04:0a:da:cd:
07:ed:4f:06:67:83:0c:1c:ff:cc:ae:1f:f0:60:ed:
13:9f:da:f7:f1:56:e1:1b:69:c1:51:b8:53:ca:1f:
d2:a5:cf:57:c5:61:15:cc:18:e6:00:9a:9f:1c:2a:
e7:29:fb:cd:2b:c7:be:b5:f8:ca:f6:d4:9a:6d:62:
91:9d:50:a0:c5:24:6a:98:10:9f:f9:78:5f:eb:15:
b7:b1:dd:1f:20:cd:dc:8d:30:69:1a:1f:ca:75:76:
89:ab:b5:79:b2:b6:d0:48:d1:b7:8f:e2:6b:ca:82:
62:60:66:e9:0f:9d:0d:fb:f6:ea:41:d7:fa:6f:86:
e8:e4:7b:c4:1a:82:f9:4e:a9:c5:05:bf:3f:71:aa:
a0:ff:be:5c:d2:4f:bc:1a:6f:d8:23:2f:63:25:77:
86:39:bb:69:3e:15:95:92:84:5f:54:e0:e3:0e:ba:
14:c5:fd:08:d4:56:06:3e:7a:41:25:7e:e9:09:30:
66:87:42:b5:bd:0a:21:af:9b:fe:24:a7:a5:39:32:
40:50:57:13:a2:2c:0e:b4:e8:f6:4d:2a:24:ed:1d:
26:5b:86:a7:a3:7b:aa:ed:8d:51:75:ca:89:1b:23:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6A:29:1C:7D:AF:06:48:EC:25:D8:39:31:45:7C:E3:DD:A8:6D:86
X509v3 Authority Key Identifier:
keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:8f:e5:76:27:a6:e6:f0:33:2e:a8:ab:ec:60:e3:a8:45:e8:
f1:36:8f:de:03:d8:52:dd:9f:26:f0:2a:ee:63:5f:db:51:db:
b6:15:12:b1:d8:ab:d7:ef:bd:00:6e:a1:69:d3:57:dc:bf:06:
b7:a4:32:a7:fa:d4:03:89:ed:9f:1f:2a:d2:71:40:f5:5c:d0:
9d:e3:32:be:2b:0b:47:f2:aa:84:8d:d7:af:9a:54:4f:2d:ca:
35:b5:25:00:bb:6c:7c:25:d2:0f:82:f8:24:9a:d1:da:6e:e8:
75:7a:ff:43:4e:42:ac:92:7d:f5:7f:d7:2f:1f:93:94:f7:19:
08:de:78:91:5b:57:89:a1:71:1f:bd:12:41:54:f1:59:68:0f:
b1:62:df:a4:65:e9:e0:a4:47:86:fd:09:cb:28:75:4e:25:ba:
10:6d:ce:90:91:39:1a:6a:41:43:ac:60:88:a2:6f:af:fd:fe:
49:b1:e2:ff:ab:0d:6e:71:9f:fa:df:86:eb:1c:b9:77:85:f8:
98:a0:d7:b4:8e:da:4f:c8:6f:be:bd:7b:7d:c3:39:f8:f6:21:
17:ce:6f:c2:d5:46:52:67:1a:31:af:3f:f4:25:c9:76:3f:e8:
30:c3:94:51:58:3c:e3:73:7c:9f:47:28:bf:8c:3c:43:5d:f2:
aa:ad:32:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:08 2025 by rpki-client