Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: HGtjyut/lm0RPLBUyQN+2HwefRlACfm6KjdEB4gLYSc=
Subject key identifier: 2B:19:0D:43:BB:A8:ED:6D:91:E2:F2:53:21:21:ED:74:17:9B:11:E3
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 01987C0A02272A44DBE12A45B90575168188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0560
Signing time: Tue 05 Aug 2025 21:01:27 +0000
Manifest this update: Tue 05 Aug 2025 21:01:27 +0000
Manifest next update: Wed 06 Aug 2025 21:01:27 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: 4atm4zIAa+Hd66QayTJaPsm/DRlXWQSJiTjSMUDjs28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:02:27:2a:44:db:e1:2a:45:b9:05:75:16:81:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Aug 5 21:01:27 2025 GMT
Not After : Aug 6 21:01:27 2025 GMT
Subject: CN=2b190d43bba8ed6d91e2f2532121ed74179b11e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:7b:44:ef:32:9e:e9:d3:19:22:cd:8e:94:
61:cd:11:5f:12:f7:f6:db:d7:7a:d9:40:51:9e:55:
57:57:38:ac:e0:2a:7e:f9:29:2e:65:08:da:07:d0:
58:99:4e:cb:75:27:f1:b3:47:81:3a:8a:cf:94:ac:
1d:f7:2f:ff:14:ae:e0:cf:93:79:be:19:68:59:de:
c1:b5:d5:2a:33:7f:f7:5c:07:7c:5e:0a:f3:fe:a8:
64:3f:d5:03:11:e0:ce:e3:45:83:45:f7:b8:da:bb:
db:dd:73:21:75:f7:9f:03:76:17:7b:63:3c:32:22:
6a:93:a8:08:a2:48:84:a9:0c:d8:84:07:64:12:66:
2e:5c:82:77:d5:71:93:13:fb:43:26:7a:b7:a0:06:
89:85:1a:54:3a:78:01:c5:4e:b4:da:80:1e:6c:f0:
68:05:9e:b9:f5:a2:a7:e8:30:11:73:f9:2c:95:f7:
8e:4d:fc:8c:e1:6b:54:ab:b8:9a:a2:03:0f:80:21:
56:21:0d:dd:a4:6c:fd:d8:ba:64:7c:e3:0f:84:f1:
12:4c:dc:74:f1:c9:29:2c:4f:1b:fe:d4:25:2e:72:
d0:96:b0:e8:42:f1:82:ea:6c:7d:32:72:ad:ec:70:
bf:c4:4b:00:63:15:79:ec:79:94:6f:e8:87:6b:06:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:19:0D:43:BB:A8:ED:6D:91:E2:F2:53:21:21:ED:74:17:9B:11:E3
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:49:21:3e:11:d8:38:b4:25:3c:07:90:20:df:8a:0b:42:c5:
d6:36:96:b2:06:78:30:9d:62:73:0a:a1:5b:e6:90:8c:f1:38:
9a:d1:45:1c:b2:ec:32:da:5c:80:84:39:39:fe:10:4f:f9:77:
b5:4c:21:1a:d2:22:e4:a1:b0:f5:3d:95:58:59:67:24:0b:8a:
55:29:54:37:d2:30:f2:b3:58:ec:f5:43:d4:b6:54:8d:6c:b7:
35:92:06:07:9e:29:63:2c:3d:d3:46:d5:8a:0e:c3:5a:cb:09:
13:bc:d1:c4:e0:64:f2:1d:09:57:77:5d:80:c9:23:18:96:a8:
b8:02:3b:4b:2a:f4:bf:7f:ab:e0:1f:db:f6:ca:06:73:b9:15:
6c:03:3e:24:f6:d4:5a:4e:d5:8a:9b:4b:50:65:fe:fc:11:6b:
9c:d6:89:56:d1:74:a4:b5:7f:1f:42:8d:ca:b1:7d:cb:3e:84:
2d:29:48:ee:58:4d:c0:52:2a:86:dd:a6:a6:d4:ee:a7:12:5b:
c2:42:df:af:08:fd:e1:10:95:0a:98:8a:8d:65:58:22:93:ba:
0b:01:c9:78:02:c7:ea:a6:a9:a1:2b:ef:09:c4:cb:20:5d:6e:
08:bd:48:6d:e8:b4:63:42:b9:8c:97:1d:51:54:96:db:9a:68:
e9:cc:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:26:20 2025 by rpki-client