Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier: fgM9jmY1VmmxvCCnc+dO3bZC2wl9XAtQpcDSopafD6Q=
Subject key identifier: 84:7E:E2:42:59:00:0A:65:C4:AA:14:10:25:B5:C8:09:F9:42:2F:65
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 0199FB7C99D67EDBECAC7F5FC0907B8DD838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number: 1133
Signing time: Sun 19 Oct 2025 08:01:10 +0000
Manifest this update: Sun 19 Oct 2025 08:01:10 +0000
Manifest next update: Mon 20 Oct 2025 08:01:10 +0000
Files and hashes: 1: CrnwsA95yJmVEXlbmftIErRDbX8.roa (hash: 26F3HVvHxyFlycTNtQI23gW/r6OOmym9z31epdFUdl0=)
2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: 9OtW5U22lBUeQBhweundcbKDG5hxcj23i6WBoUFQmWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:99:d6:7e:db:ec:ac:7f:5f:c0:90:7b:8d:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: Oct 19 08:01:10 2025 GMT
Not After : Oct 20 08:01:10 2025 GMT
Subject: CN=847ee24259000a65c4aa141025b5c809f9422f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:30:2b:9b:5a:1f:cb:d5:18:af:2a:31:0d:
78:9b:9e:5f:b8:58:00:90:e1:1e:01:af:32:30:39:
38:d3:77:5d:74:dc:d0:40:c6:1e:43:4f:64:d8:c4:
99:7d:a3:aa:74:df:ca:66:4c:62:49:c7:0f:a7:80:
69:86:b7:24:ed:12:ae:86:33:d1:72:e0:42:6c:d5:
53:89:4d:b7:ae:24:38:20:ac:d9:f2:e2:31:c6:ce:
a1:e7:73:d6:e4:dc:3d:be:59:e0:a6:10:0d:f5:34:
61:d2:f4:4b:96:d9:dd:60:72:e4:b8:45:0f:c1:84:
67:87:fc:00:0f:57:08:0f:9e:66:d3:3a:2e:6a:7d:
fa:5b:a9:8c:30:01:7b:94:8e:6f:32:2c:5f:13:3a:
e8:a9:b6:29:4d:9b:a1:52:7e:68:98:65:a6:a0:ae:
a7:e1:06:9a:48:af:21:89:13:54:f0:3b:90:74:86:
6f:a2:17:ea:80:c5:11:1f:1b:6e:80:b2:18:1d:53:
ce:4b:fc:9b:c7:48:cc:84:35:a0:1f:7d:dd:cb:c8:
ed:44:92:48:07:0d:f6:83:22:40:1c:c5:10:58:b3:
06:b9:c2:3e:b6:8d:c8:20:86:fa:dd:15:aa:fb:89:
5b:ca:4e:71:cd:85:64:74:b2:76:ca:f7:5f:89:17:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7E:E2:42:59:00:0A:65:C4:AA:14:10:25:B5:C8:09:F9:42:2F:65
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cf:3d:18:89:86:d6:f0:9a:b3:3a:99:1d:9f:0b:22:c4:e0:
2d:66:37:16:fe:83:5b:8e:77:1b:aa:ca:20:2c:be:05:cf:1b:
89:ca:94:51:c0:a9:a6:a8:c8:4d:30:c0:f1:0f:80:5c:f9:e3:
34:71:aa:88:36:a7:66:ab:33:94:d3:05:6a:94:22:93:c9:18:
03:b3:be:db:0e:c5:4e:72:d3:0a:5e:ac:d8:cc:3c:80:6d:2d:
bf:15:8c:99:5a:c5:5e:c0:41:9e:66:b8:59:c1:31:86:d1:9f:
b0:a4:02:f8:94:cd:e2:83:b2:d3:bd:fc:a4:cd:b7:77:a6:f1:
23:b9:b4:75:2f:3e:e6:b7:ab:c9:1d:6f:db:b5:1d:ae:ce:e3:
6f:27:04:aa:a9:f0:d0:59:dc:9e:78:e2:9b:69:17:2e:59:60:
77:34:42:2c:45:33:f0:5a:07:39:5e:ae:95:d6:85:94:4a:37:
41:01:b8:d9:ab:e4:47:f8:14:e3:95:e1:8f:ba:5d:b8:9c:70:
c1:e3:05:3e:18:b0:49:7b:d8:ea:b6:f3:e8:27:23:3d:b3:f7:
eb:fa:ba:01:85:61:68:6d:f3:a8:76:28:c4:5d:7b:e7:26:3d:
6f:3c:6c:8c:47:35:68:3e:4a:b2:93:f4:e5:25:f5:c6:ff:0f:
96:87:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:11 2025 by rpki-client