Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: 5xEO2d1xqtr4tPmKFyOlGY7vWbPwjlKJ8fg+CTWEw9k=
Subject key identifier: DB:69:F9:C4:AF:30:87:13:9A:8F:1C:79:55:04:81:62:44:59:FB:01
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 0198737479513829974978AE1D36D126F0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 1200
Signing time: Mon 04 Aug 2025 05:01:09 +0000
Manifest this update: Mon 04 Aug 2025 05:01:09 +0000
Manifest next update: Tue 05 Aug 2025 05:01:09 +0000
Files and hashes: 1: gbYZs5g8-tzRIgFZupm0nJKzwkw.roa (hash: 71Q7AYKf4HSZ+MQCf6bmElagIFGNwEfBKHJD2B+78+4=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: m5Et+ghn1FrKJjeg1EbrLBHZ6TtNSsoG29Vf4bbebV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:79:51:38:29:97:49:78:ae:1d:36:d1:26:f0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Aug 4 05:01:09 2025 GMT
Not After : Aug 5 05:01:09 2025 GMT
Subject: CN=db69f9c4af3087139a8f1c79550481624459fb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:21:34:43:7f:d0:d5:c7:5e:3b:a0:03:7c:
cb:a8:07:7a:b4:fc:43:8b:cd:96:9a:0f:aa:88:2e:
0d:99:89:5a:a6:88:4a:6e:f3:1f:63:d7:ce:81:f1:
f5:9c:78:61:5e:12:ba:3b:a5:52:09:b2:e6:89:50:
77:f5:c4:bf:fe:63:35:05:d1:fb:b7:89:93:bf:37:
fe:58:a5:c4:2a:51:58:01:eb:19:88:8c:a5:93:5d:
d7:4d:58:76:33:74:eb:3c:9f:93:82:d3:10:44:ef:
4f:77:08:13:f2:56:20:11:35:f6:aa:cd:a9:0d:e5:
d2:b8:35:ab:ef:56:d7:2c:07:74:e3:32:49:62:19:
7b:2b:93:c3:57:3d:db:ed:b8:8b:ad:50:d6:cc:f7:
ba:81:c7:26:02:fd:41:3e:d3:2d:94:f2:db:55:64:
a1:8c:ee:cc:0e:c0:76:a2:d7:87:3c:03:03:5f:a0:
4e:a1:d8:10:70:11:15:34:d3:5d:d7:6c:a4:1e:1d:
a2:e5:14:c7:29:09:7e:b5:4c:51:22:87:a4:20:e4:
eb:93:ae:6f:5e:78:8a:11:fc:08:a8:18:3a:f6:71:
fa:dd:dd:a6:db:90:51:2f:34:3a:0a:a7:45:a4:9d:
da:51:54:2a:c9:c1:50:f6:57:d3:1c:e2:c9:c2:b3:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:F9:C4:AF:30:87:13:9A:8F:1C:79:55:04:81:62:44:59:FB:01
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d5:c2:af:e4:51:e5:11:71:ce:00:42:f2:25:a9:95:5f:16:
36:0b:09:36:f4:27:39:8e:1f:f3:52:49:f7:db:99:82:e5:40:
5a:3d:3f:3f:d4:6b:43:00:b5:ba:4c:c0:af:d3:52:e6:41:3e:
21:1d:1a:6e:9c:82:a2:ae:fd:6b:6a:a4:2b:05:6b:c9:22:de:
0c:2f:65:48:a8:a8:5b:43:ae:4a:d6:68:d5:9a:41:c5:3f:7c:
0e:2a:ed:6d:ce:5a:bc:90:ec:94:8d:c8:7a:76:74:94:45:61:
2e:0f:7b:ea:ff:e3:0c:80:6f:19:1b:31:c7:67:16:1d:74:88:
11:0a:ec:31:53:f9:f7:8c:4b:f8:3c:be:fe:f9:24:e0:70:58:
29:56:18:2d:bb:f1:0e:89:a5:82:39:1f:a7:17:24:17:71:59:
02:cc:11:27:a4:d5:70:c8:12:19:1d:01:f0:0b:3b:72:d4:e4:
50:26:fd:86:03:d1:38:33:fe:53:97:87:40:e3:71:b1:ec:14:
65:92:f4:48:14:2d:80:8b:8b:a4:c4:b1:7e:80:8f:84:c4:7c:
3d:e0:34:50:e2:c5:f8:53:dd:fa:9a:80:76:4f:09:e2:4c:20:
1d:f2:37:03:58:cc:32:ab:f5:d2:37:f5:cb:9c:a2:09:77:53:
97:54:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:12 2025 by rpki-client