Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: obMP/IQMMfr479JMPcWt6jG9g2rQjmcCzittAOPrl6c=
Subject key identifier: DC:4F:6C:C1:25:33:C0:5D:E0:90:9E:FC:98:4F:6F:5F:AA:CE:CB:79
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 019889207C46523136D6A90ACE3E720E8277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 03EA
Signing time: Fri 08 Aug 2025 10:01:04 +0000
Manifest this update: Fri 08 Aug 2025 10:01:04 +0000
Manifest next update: Sat 09 Aug 2025 10:01:04 +0000
Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: LE//hvq+eqO99SYOvT6fa9Mf6WO6YUu6tpfZX5a6vLE=)
2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:7c:46:52:31:36:d6:a9:0a:ce:3e:72:0e:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Aug 8 10:01:04 2025 GMT
Not After : Aug 9 10:01:04 2025 GMT
Subject: CN=dc4f6cc12533c05de0909efc984f6f5faacecb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:6e:17:e7:27:e8:b9:ee:4e:48:3b:0b:ec:
b3:de:61:b8:69:22:9f:d5:65:80:12:b6:4a:8d:9f:
5b:45:4b:8d:5e:64:ce:70:fe:f8:be:06:71:fc:29:
55:30:68:e2:f9:19:b3:99:c9:cb:80:0e:e6:d8:2f:
d4:11:65:ad:a0:92:bf:c8:ca:64:08:7d:80:cf:d7:
f6:d3:03:4f:b0:71:56:22:61:20:6d:52:74:c5:96:
0e:d7:4e:89:6b:67:2a:1d:d1:95:05:4c:b7:c7:e3:
93:7d:f0:a1:3f:a6:1c:ea:9b:ab:fd:9f:3b:0c:c6:
ab:06:50:4c:d2:1f:80:06:b9:50:a6:28:ca:d5:69:
c8:68:4f:32:ae:f9:6e:7e:83:1f:b8:d5:51:c1:5e:
93:75:4c:5c:ca:ba:aa:66:c3:d2:4f:6a:33:a4:93:
28:a4:99:cb:61:58:f7:01:5f:e4:0f:16:b9:7b:9c:
e2:5b:b9:f4:02:78:25:6c:fe:a9:8e:60:de:3f:ec:
c6:4f:f6:41:ac:c7:0f:d8:68:de:ea:aa:96:38:6e:
ba:17:55:18:a6:01:3d:f3:33:87:a7:13:50:f4:03:
d6:ba:20:31:c8:30:16:01:30:31:0e:b1:c6:52:e5:
d8:ae:be:e5:ed:fd:35:83:85:d1:09:b4:89:49:6d:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4F:6C:C1:25:33:C0:5D:E0:90:9E:FC:98:4F:6F:5F:AA:CE:CB:79
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:83:1b:9f:67:8c:e3:57:28:6a:4b:d5:b3:2f:ec:d5:18:1c:
f7:c3:a0:1b:c1:b8:43:c0:3b:65:a6:53:a9:99:68:1c:ad:dc:
b2:92:37:5e:a8:7b:ba:5d:97:34:16:6a:11:bd:08:a7:17:24:
28:82:03:ed:79:4b:c1:7d:3c:f0:67:1d:d1:df:fa:56:f8:3d:
56:4c:f7:d1:23:95:8e:82:65:cf:95:70:24:d4:35:fc:92:9d:
69:0c:e1:52:a7:2d:77:67:28:e5:1b:e3:18:f1:09:01:77:bc:
ba:10:cb:fb:ee:40:23:d1:33:58:ee:6b:73:77:37:75:41:0a:
12:31:62:9b:99:35:6f:35:57:da:9a:68:8b:14:8a:40:32:36:
e7:14:ce:39:5b:40:e7:0a:6a:aa:3d:e9:36:f2:f3:99:91:d9:
ef:d4:6b:ad:60:34:90:58:e0:0a:98:6c:63:f9:8e:61:82:e2:
9c:73:8a:29:06:14:aa:34:37:e8:c0:b2:87:ac:ce:76:55:f6:
9c:aa:0f:5f:56:b3:44:6e:a4:3f:fa:ca:ad:57:ab:28:4e:88:
f5:d9:63:a7:ea:93:8c:7c:82:1b:95:2c:3c:af:3b:92:e3:11:
74:5d:df:a4:fd:f0:c2:0e:9d:ce:70:44:e2:1b:61:b2:b9:f3:
3f:fa:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:30 2025 by rpki-client