Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: RkNMyKTANyLnqLPhZuqo1ry/zj6709JCiQ6cVn2aAAM=
Subject key identifier: 03:D0:58:F0:06:09:0E:35:48:49:7F:A2:C8:FF:71:90:C1:65:7E:A8
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 0198D4733FE1251BD82B9569543D45DA0340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:02:59 +0000
Manifest this update: Sat 23 Aug 2025 01:02:59 +0000
Manifest next update: Sun 24 Aug 2025 01:02:59 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: YTPUrV5eUpsQsdEsqi0ByH1NMGDK6ZOQwaANkLHBWT8=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3f:e1:25:1b:d8:2b:95:69:54:3d:45:da:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Aug 23 01:02:59 2025 GMT
Not After : Aug 24 01:02:59 2025 GMT
Subject: CN=03d058f006090e3548497fa2c8ff7190c1657ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:72:3b:01:e1:22:fd:31:26:a5:bb:3b:8d:
4a:4b:b4:50:00:c8:21:f6:b6:33:18:ea:b6:a3:07:
e6:99:0a:1d:52:ab:8b:ee:26:72:d5:40:b7:1a:47:
ef:81:df:a4:77:23:55:23:b9:d8:49:b5:12:6f:90:
30:71:11:bb:d1:85:80:82:e7:cf:75:38:6e:95:22:
98:a4:74:5d:a5:bd:64:6c:a2:9d:40:9d:ea:ea:dc:
97:dc:eb:61:58:03:80:6b:0a:21:a9:d0:b7:de:0e:
3f:6b:a4:64:7f:8c:a4:fa:90:b1:33:9b:07:29:8a:
24:7a:1c:16:74:19:15:cd:f6:d8:8a:0a:9c:b1:ef:
19:bd:7a:8e:4d:09:20:17:54:81:fc:53:71:c9:52:
b7:73:ab:fd:1f:30:5d:62:b9:c3:16:44:8b:ba:0e:
e9:d2:ba:35:62:fc:2d:29:65:f5:62:b3:53:51:1a:
6a:dc:4e:20:ea:27:f1:7c:90:b3:ee:30:9c:e1:b5:
cf:fb:3d:58:61:13:9b:7e:76:59:12:53:60:66:39:
64:da:cd:e7:d0:34:19:45:d7:ec:d6:98:3e:9d:df:
bc:3d:a6:d9:3e:6e:e6:ff:2d:3b:02:5f:7b:62:2b:
c1:5b:84:f0:27:1f:84:6e:3c:a3:4b:ab:9c:89:38:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:58:F0:06:09:0E:35:48:49:7F:A2:C8:FF:71:90:C1:65:7E:A8
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:34:c8:1b:41:f3:00:65:33:cd:75:17:34:b8:42:8f:2d:44:
cb:e8:f5:74:54:b7:7e:5b:4d:14:7f:66:fe:30:f7:56:6d:80:
de:38:b7:30:2b:a1:89:08:a7:cd:69:98:9c:e0:f6:14:08:50:
6d:de:c1:94:9a:db:a4:0b:27:6e:0f:4c:ca:d5:db:60:2a:7a:
d1:23:34:4c:cb:27:72:b1:7f:c4:c8:d9:61:64:a2:69:b4:17:
4c:d5:37:0d:0b:da:bd:39:5e:3a:e0:6b:c1:f8:20:7e:0e:89:
06:dd:bb:ab:f8:45:60:41:5b:55:ea:96:ab:50:8c:1e:57:9a:
4e:c5:51:f4:eb:c6:2d:d7:2e:be:97:de:a9:e3:33:9c:6e:7f:
c3:ad:54:3c:65:a6:22:f9:62:0b:a6:df:38:2e:b5:5c:a3:41:
84:b8:af:4c:61:cd:b7:91:91:9e:64:f4:34:4c:90:86:e4:0b:
f8:b1:02:f5:f7:c4:50:a5:8c:d7:57:af:a4:96:9a:d4:df:82:
0e:2d:f7:5e:79:02:54:57:b2:b5:7a:c3:fb:46:a6:a7:8b:27:
5c:e4:6f:37:de:45:4b:69:d9:b0:b7:3b:68:15:c3:3c:c3:fa:
03:b2:29:45:05:d0:7e:2a:c6:13:9a:53:a9:c9:18:66:8a:37:
f9:cf:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:49 2025 by rpki-client