Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: I5k1R8kIVkap1rtR9N2ToPO20O/r3J6JJN6EjDpHYnA=
Subject key identifier: 0B:C3:64:A5:66:AF:C9:F2:EE:F7:E0:6F:FC:A8:9D:64:E9:5B:42:98
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 0198D4DFEB8534C5812FE1553F9AA7649F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 1138
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: flAPsQaqW3ndZjAB4iLUzOU0wy6GQP1RMJ3Uu3wC0kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:eb:85:34:c5:81:2f:e1:55:3f:9a:a7:64:9f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=0bc364a566afc9f2eef7e06ffca89d64e95b4298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7d:9f:b1:4c:86:3c:87:cb:7f:72:42:1e:6d:
77:2d:41:32:b8:c0:24:ba:50:55:e8:eb:9f:b9:87:
fa:7d:1c:47:aa:08:2d:8e:fe:6f:c1:84:a7:5e:7f:
ce:6d:90:d5:1b:bd:ba:b7:fb:0c:51:22:ad:3f:ce:
6b:c5:94:3c:b5:02:44:99:5e:a8:b5:ac:89:14:51:
fe:dd:f9:11:df:2f:69:19:56:8c:13:b8:4e:3c:83:
6e:da:c1:5e:a0:26:c8:ef:f0:9d:d3:34:c5:aa:d4:
9c:62:db:e1:a4:4d:9e:fb:a7:8b:08:30:f3:21:e9:
98:49:ee:a4:95:3e:88:78:a2:cf:98:f2:25:c3:01:
74:cb:ea:89:01:17:4a:c2:e5:0c:7f:ee:59:fc:ff:
59:89:23:d3:1c:19:ea:e3:9d:aa:85:43:c5:e0:0b:
c3:69:de:2a:c5:41:54:26:bd:fd:b4:eb:75:d4:55:
c5:3e:96:cb:f1:bc:40:21:b5:60:0f:30:d2:ee:a6:
56:e4:bf:63:2f:2a:24:b2:b2:cd:7f:40:ab:11:f2:
7f:95:c2:c2:60:39:3b:71:25:65:60:99:01:d3:5e:
15:6f:4c:22:81:55:fe:0d:8e:a0:4a:b9:29:01:1d:
68:1c:59:3c:95:78:d0:21:b9:3f:24:56:55:06:44:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:64:A5:66:AF:C9:F2:EE:F7:E0:6F:FC:A8:9D:64:E9:5B:42:98
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:23:12:a8:c6:58:de:f6:4a:ba:92:2c:7d:c6:f0:ba:17:ff:
a2:2e:a6:27:fb:d1:9c:06:39:21:cb:40:e9:f7:20:de:6a:04:
b0:8d:c5:3d:b8:4e:d4:86:2e:45:9d:d4:52:71:b3:92:1f:65:
06:6a:ef:a7:c3:a5:fe:2c:76:70:1a:21:22:15:e0:a7:b2:d4:
90:0a:75:aa:59:84:61:48:f4:76:79:d3:72:ad:f6:5f:cb:c0:
dc:74:bf:d7:fb:a6:d2:7e:ce:c3:b3:60:4c:b6:dc:b9:ba:1a:
0c:77:e2:10:9f:2c:a9:ba:d5:41:e9:eb:92:df:86:b8:20:08:
5b:86:d7:a8:b9:e5:97:e5:6e:78:e1:b6:ae:01:ce:68:ce:14:
b9:07:04:13:14:8e:9b:dd:2d:64:13:cc:d7:90:20:d5:a7:3b:
5c:69:b2:6a:eb:df:bf:88:39:62:bc:a3:1a:ea:61:59:fe:46:
07:e6:60:02:99:59:1f:7b:0d:8e:8f:e4:53:0c:ad:e3:a0:ba:
95:d1:1e:97:35:c7:6e:45:7e:11:1c:df:98:59:43:d2:ff:a8:
79:a8:9a:d4:28:d1:72:b2:93:02:d6:e0:c7:aa:4a:b4:90:16:
98:4a:73:d8:77:aa:5b:59:55:48:e3:e1:ae:72:fb:28:cc:70:
c3:ae:ce:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:02 2025 by rpki-client