
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: uVVAoJFvjlSWEguxQ4XjX2nSCgnF8GBnfjCxZmovCVI=
Subject key identifier: 5F:5E:DA:B8:CE:0F:41:3C:89:91:8B:20:69:08:D1:0F:B0:C4:07:80
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 01987B2D9D52F8FF5AE5C9B8AB1565A5837A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 0EB4
Signing time: Tue 05 Aug 2025 17:00:43 +0000
Manifest this update: Tue 05 Aug 2025 17:00:43 +0000
Manifest next update: Wed 06 Aug 2025 17:00:43 +0000
Files and hashes: 1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=)
2: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (hash: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=)
3: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: 94dZ+4xei27EIL8mJtG3h8Zol/qCzeOm0Uz6nBIWGUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:9d:52:f8:ff:5a:e5:c9:b8:ab:15:65:a5:83:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Aug 5 17:00:43 2025 GMT
Not After : Aug 6 17:00:43 2025 GMT
Subject: CN=5f5edab8ce0f413c89918b206908d10fb0c40780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:f1:49:c9:e8:04:25:44:4a:65:75:ed:7b:
76:92:f3:f7:dc:51:4f:66:ef:48:9e:4a:6f:b8:0d:
07:d2:cd:47:5e:e1:a4:02:63:d6:b5:cd:65:ad:ad:
b3:de:51:d9:2f:cb:eb:3e:49:e0:cf:29:b2:f2:1e:
7a:02:43:ba:c7:8c:ec:1d:d7:92:51:25:2b:a3:3d:
a0:19:a4:cb:cd:6e:ff:cf:01:9e:59:b6:88:5b:cb:
7f:fa:e7:56:fd:dc:6d:91:90:1d:33:08:a4:45:50:
8f:9e:91:da:37:4a:ad:3f:49:b3:e3:a2:fa:4e:c1:
68:c6:36:5c:80:99:71:57:6c:d8:8f:9a:05:d3:1b:
4a:d1:21:a6:6f:2b:44:c7:2a:a6:ad:c8:f0:f7:35:
94:5a:f5:18:c1:10:df:59:a7:20:e2:5e:05:c6:e3:
e4:6f:9f:4b:81:0e:21:46:13:6b:b4:1b:c6:91:19:
b2:03:67:48:9e:cf:5a:6c:eb:ef:ff:0c:4a:0f:5a:
87:07:38:4e:3f:27:48:51:0a:93:9d:b8:98:f8:47:
4d:43:2f:ee:99:0f:7a:24:cb:45:99:19:32:b4:17:
b3:80:35:31:9c:1e:5e:0f:a6:9a:c6:d2:87:96:3f:
be:1e:78:c9:b7:e8:3f:25:09:67:6c:45:a0:e4:c7:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5E:DA:B8:CE:0F:41:3C:89:91:8B:20:69:08:D1:0F:B0:C4:07:80
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c7:14:9c:0a:6c:e7:8d:4f:33:10:4b:e9:32:ec:c3:64:d5:
8c:53:41:d1:23:64:a0:e3:0c:5c:62:16:b3:72:15:8c:ce:79:
a9:42:c1:06:60:d8:1e:f3:75:99:46:96:ed:d3:c5:c7:4e:98:
d8:3f:74:2c:75:ed:90:d3:64:5f:d4:d2:96:68:41:1d:89:6b:
d9:93:e5:ef:ba:85:57:2e:1a:b5:dc:c1:4a:fe:d4:60:a6:7c:
08:41:79:a4:31:c6:e8:da:05:83:11:7d:5d:39:72:67:21:88:
45:a8:68:bd:4b:0e:33:94:9e:63:14:83:fe:c6:64:de:43:c8:
23:1b:39:9f:d2:b1:8b:a7:5e:07:c4:ca:3c:55:4d:14:df:dd:
b2:50:35:3b:80:bc:ab:35:09:a3:d1:af:71:db:4d:03:62:f1:
7f:8b:2b:ba:7a:63:0e:97:3f:7f:d4:0c:5e:b6:86:f1:d8:5a:
b6:d9:db:72:8a:74:02:3c:c9:63:22:e6:c0:72:55:6f:92:e7:
c2:6d:d9:69:cd:3a:06:62:ed:a2:f4:72:95:bc:e9:10:76:b6:
ab:df:2f:46:16:ba:8d:ac:54:b0:89:1d:49:28:ca:5c:a5:fc:
54:4b:3c:c4:b9:d4:b3:6e:2a:7f:59:5c:16:8c:0e:ab:80:b8:
11:4b:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:12 2025 by rpki-client