Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: yQhdVU/7wXAFaz6R6Cb9tCFf1GXqhKmSGJGNW6/m60Y=
Subject key identifier: AB:0D:54:15:82:15:E2:CA:4B:8D:54:71:C0:57:B8:A5:C0:1D:0E:B4
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 0198D7059E1A0A34F77D29343670F8C7E04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 02CC
Signing time: Sat 23 Aug 2025 13:02:06 +0000
Manifest this update: Sat 23 Aug 2025 13:02:06 +0000
Manifest next update: Sun 24 Aug 2025 13:02:06 +0000
Files and hashes: 1: EbZtq2coMU270JnZ4a-zaYQT_0Q.roa (hash: yU3RaYJSG7d5Cg9VqCAtXvTzjDsa0Gi9QQwBd19SnQo=)
2: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: 5zUfJiI+7VaZhufDo3oCFXkCP4J+gYlT5TUD7TUEvTo=)
3: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
4: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9e:1a:0a:34:f7:7d:29:34:36:70:f8:c7:e0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Aug 23 13:02:06 2025 GMT
Not After : Aug 24 13:02:06 2025 GMT
Subject: CN=ab0d54158215e2ca4b8d5471c057b8a5c01d0eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:28:6b:c0:c4:7e:62:eb:0a:1d:81:c5:53:
27:0a:e5:19:c4:c1:14:8d:eb:00:39:2c:ae:7f:f1:
74:62:e7:1e:d0:a1:64:a7:c7:c6:56:3a:52:3f:55:
f7:f2:e8:d3:d6:c9:e3:99:b9:25:24:1b:7e:53:1c:
1b:01:19:c0:f5:12:2f:9c:76:33:48:0b:d3:49:b0:
aa:e9:08:86:b8:4d:6a:c6:da:5c:38:26:a2:16:22:
5e:ee:de:db:3d:88:5e:68:ad:83:53:5b:2e:2a:5d:
38:4b:c3:5c:31:da:8c:fe:d8:35:a7:45:59:fd:f5:
0a:10:34:21:e1:8d:40:a7:97:77:f7:61:75:2f:b5:
84:a4:7c:06:ab:ad:6c:20:25:ef:2c:54:16:fe:aa:
e0:d1:cc:db:89:ed:63:3e:5d:e4:a2:2a:c0:ee:e8:
af:65:5a:46:03:1e:4b:de:a8:48:b0:a1:a4:e0:bb:
e8:99:14:59:0a:22:df:7c:78:4c:a9:9e:76:9c:88:
b5:a7:d3:ec:38:41:6d:55:31:a4:b0:49:1d:95:41:
0f:62:32:3a:cf:d4:c4:f5:8e:b3:1f:4e:59:7f:87:
a7:c8:08:6b:71:d1:fa:b7:39:da:c8:15:4a:9a:b9:
94:40:c9:a1:3c:27:c0:f2:31:52:09:4a:90:16:8c:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0D:54:15:82:15:E2:CA:4B:8D:54:71:C0:57:B8:A5:C0:1D:0E:B4
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ab:9a:f6:b8:ba:d3:e8:53:05:c1:6f:15:d8:8c:bd:97:02:
2d:62:40:a9:bf:da:0e:3f:47:8f:f4:1d:1e:b0:90:70:94:66:
be:68:cd:14:da:8b:e6:a7:63:a1:d4:c6:d0:04:77:6f:75:b8:
07:12:8e:aa:3e:69:9d:7d:a8:e5:ed:32:da:61:df:4d:01:54:
af:4e:14:53:4a:74:86:91:97:c2:1e:4a:47:85:91:15:60:ae:
e8:6f:d7:05:72:c9:1c:c8:83:14:26:ee:ed:9b:e0:70:9b:2f:
26:75:16:18:20:e0:37:9d:e2:60:22:c6:27:74:05:13:56:87:
c3:f9:6c:c8:49:36:dd:d1:12:24:8d:b5:88:25:a6:ba:e0:0b:
97:54:76:9d:fa:b5:c7:86:b9:94:f8:91:80:ab:28:a2:f1:4e:
f1:7c:2a:0d:0a:1b:72:99:77:0f:70:a8:03:d1:77:91:53:6d:
06:f0:6f:0a:0e:32:27:f4:dd:7e:5d:86:d5:07:7b:3f:c9:b6:
60:f7:b1:db:9a:df:23:cb:ba:b4:20:d7:77:17:55:7d:7d:a4:
6b:81:d2:9f:62:1c:1c:a9:1b:c3:8e:69:cc:ef:be:ca:f3:f2:
1a:9d:38:8b:5b:0d:97:d6:57:cf:2e:cf:41:b9:17:1f:d9:2a:
77:68:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:31 2025 by rpki-client