Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier: Ju0Z8fKUtzbCTeM3NgSankHp8/S0JNLT5AgJkffr52g=
Subject key identifier: EF:B5:4B:0F:41:D1:0A:99:33:DB:E3:04:08:BC:DC:43:0D:5B:0B:77
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 0198D660C0E0620A0BC1D8A9BAA65D154E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 10:02:01 +0000
Manifest this update: Sat 23 Aug 2025 10:02:01 +0000
Manifest next update: Sun 24 Aug 2025 10:02:01 +0000
Files and hashes: 1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=)
2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: u012AtuycF35V+MDlvipNltc/9OVJL/Ij9Qbh6RaOqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c0:e0:62:0a:0b:c1:d8:a9:ba:a6:5d:15:4e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Aug 23 10:02:01 2025 GMT
Not After : Aug 24 10:02:01 2025 GMT
Subject: CN=efb54b0f41d10a9933dbe30408bcdc430d5b0b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:60:7b:38:d5:2c:81:0d:aa:8e:3d:f0:30:
df:e2:bb:bb:6e:bd:68:5c:b7:a4:e3:47:36:8d:ea:
45:1c:44:b9:38:67:ec:aa:a8:0d:fc:a5:df:ab:1d:
ac:f2:49:2e:aa:82:44:52:4e:ab:a4:5a:50:83:49:
ba:f3:29:e6:30:fc:f6:02:7c:dd:53:a3:a6:47:9a:
f3:81:cf:b2:59:0b:5d:24:6b:f3:09:9a:a0:92:e7:
e5:81:1b:6e:a9:ef:0a:67:3d:df:d3:0c:ba:7e:e1:
38:d9:26:44:d9:fc:81:62:a4:c7:9c:a5:34:88:77:
6d:bd:b6:a8:0f:f9:c0:4d:db:8a:8e:b0:ff:6d:b7:
d4:99:93:4e:67:75:50:1f:1d:30:df:77:72:05:cf:
9c:eb:f0:5e:03:eb:7a:3a:e0:34:9e:96:25:fa:54:
af:07:a1:4d:58:34:21:19:cc:90:b2:37:f1:f6:4b:
53:c6:6c:a0:5d:6f:d4:65:40:93:37:0d:e3:16:9a:
ed:c7:4c:7f:79:0e:b7:a0:07:3d:a3:b4:d7:31:37:
54:f1:f7:f0:4f:ee:47:7f:d3:31:39:8b:ee:1b:db:
13:0b:9f:65:86:f5:4a:96:51:db:fd:9e:3e:0a:dd:
40:e5:22:1c:28:58:f1:25:8c:9f:22:3a:31:b8:3b:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B5:4B:0F:41:D1:0A:99:33:DB:E3:04:08:BC:DC:43:0D:5B:0B:77
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a5:8c:ba:ac:47:4c:59:a0:ef:59:a3:ee:f3:58:af:86:74:
72:90:c7:8f:71:bb:35:a1:40:57:0e:b8:c9:d5:1e:82:cc:3d:
57:eb:d9:0d:b8:93:af:ce:9d:df:c4:90:1c:70:7f:10:65:d2:
85:4f:a1:de:26:b0:e3:b8:92:f0:ae:b7:c2:cc:ec:df:71:d3:
98:9e:85:54:53:48:6e:29:68:55:27:88:2c:53:62:be:d6:28:
98:39:50:77:31:24:dd:45:4f:69:d9:c8:a2:bc:e4:4b:2f:13:
15:2e:1e:f1:a6:2f:42:6a:15:f5:e7:76:d8:98:4d:e9:6e:88:
fe:ed:4d:4c:fa:8b:8d:a9:40:aa:71:f0:d6:2d:17:8b:d7:8e:
3f:e9:b7:c8:54:17:c4:e1:9d:1f:8b:76:d4:8e:3c:32:7d:fb:
18:c8:83:de:ec:a9:fe:10:50:94:d2:9e:2a:c3:ba:5c:a0:e6:
77:95:fd:70:99:6e:86:83:03:dd:94:bb:6f:8e:2c:41:d3:71:
6a:c5:0b:da:1c:9d:84:3a:43:c0:f9:83:ff:3a:a3:2c:28:bd:
cf:54:d3:f7:20:a8:b5:92:14:19:24:d6:ea:fd:a5:99:ad:89:
48:80:b0:75:20:a4:ce:1f:93:d3:07:7a:45:dd:7b:1c:36:bb:
3e:c5:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:49 2025 by rpki-client