Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: 1RrjH51Hd8QGKvZg6srqyHJ80PzO5/eFwpsnwAm/YZk=
Subject key identifier: A0:83:97:A5:92:B5:13:54:42:36:A5:FA:34:71:14:01:03:27:52:88
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 01988EED388DC99D2E387F6FF7A5C883DB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 05C3
Signing time: Sat 09 Aug 2025 13:02:47 +0000
Manifest this update: Sat 09 Aug 2025 13:02:47 +0000
Manifest next update: Sun 10 Aug 2025 13:02:47 +0000
Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: EaRoKAD6NLRN1ABJcgebLbdSNTRNSLqp1e7kus8kR4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:38:8d:c9:9d:2e:38:7f:6f:f7:a5:c8:83:db:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Aug 9 13:02:47 2025 GMT
Not After : Aug 10 13:02:47 2025 GMT
Subject: CN=a08397a592b513544236a5fa3471140103275288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:8e:3b:82:1e:59:48:ec:56:9f:62:f0:42:
f1:a2:85:11:fc:fc:1a:e1:ea:4e:99:36:41:98:5a:
4e:14:fa:39:69:be:58:36:b1:d9:ee:9a:44:64:31:
1c:a7:fc:1b:9c:30:85:9f:05:a3:bc:31:e4:52:df:
a6:7b:ae:7c:65:c9:29:ee:d5:3e:42:20:2b:04:5a:
db:77:59:32:0a:c1:94:6b:5a:33:9c:7f:e4:da:df:
7d:c0:cb:91:0d:57:08:ac:cf:86:a1:d9:e5:ea:33:
5f:c1:23:44:41:af:94:a7:b0:f9:2f:c7:86:ad:b2:
50:40:6f:cb:a8:d0:16:a5:1a:b6:94:0d:33:ad:49:
7c:0a:db:ad:ca:48:1c:42:a1:c2:66:48:2c:72:6b:
4c:a5:23:3d:20:93:df:f9:ba:13:13:98:51:be:6e:
2b:1e:61:6b:b0:d3:84:ee:97:e8:1b:87:d4:ce:54:
a4:4b:1d:cd:29:d8:70:02:d9:97:0e:28:67:bb:7d:
06:b3:b2:b2:d9:ff:fa:49:48:46:7e:2b:01:f2:86:
98:85:60:1a:85:64:2f:df:97:a6:95:37:dd:56:f4:
6e:53:44:90:3d:5f:a5:2c:20:92:0f:3f:4d:3b:09:
9e:77:9d:3f:47:5c:ce:49:bc:ed:fd:14:5f:7f:18:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:83:97:A5:92:B5:13:54:42:36:A5:FA:34:71:14:01:03:27:52:88
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:f6:04:a4:60:cf:85:02:95:41:bf:e9:56:5f:ac:ac:b0:
f4:02:bc:cf:01:12:53:f6:14:17:06:5d:cd:c4:cd:51:3d:75:
05:ba:93:1d:59:ed:e5:f7:7a:c5:0b:04:ba:01:d2:4a:b8:98:
cc:bd:6b:19:70:f2:5c:e2:15:13:9b:b6:24:74:b3:9f:2d:93:
b8:50:7f:75:89:19:84:0f:aa:55:9e:1f:25:b6:df:7a:67:bd:
79:22:90:51:63:11:6d:1f:2a:74:c2:21:d4:6d:b6:e1:7b:5f:
70:97:cb:b1:50:d8:32:e9:85:91:a6:a3:05:31:72:75:65:ad:
c8:99:e1:7a:6a:a6:46:91:88:6d:c7:a6:70:f6:ef:d7:57:c3:
ef:5b:6a:48:db:45:06:aa:8d:34:3f:96:f1:23:fd:41:1b:07:
6f:f2:f3:e7:b2:03:a7:65:20:3e:ff:87:5a:b4:2a:0b:c1:10:
20:9b:12:92:69:bc:91:21:9f:71:60:9e:fa:bd:76:8c:d4:f6:
02:5f:af:b7:c0:9a:01:c6:7e:60:dd:e2:37:d3:5b:00:9e:07:
d7:33:7b:a6:40:96:b3:4c:0a:24:ab:cf:8f:24:74:35:3f:40:
40:9c:27:47:c1:78:85:1c:f4:89:cf:df:fa:d1:53:b0:e1:2e:
a0:09:b2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:32:13 2025 by rpki-client