Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: 5d6waRQ0rTRJo4Vtd6Na+izt8wAdU+n9ivKHlebcLVM=
Subject key identifier: AE:7C:E3:7F:0B:8B:C6:42:28:1D:E5:87:74:19:BB:70:2B:18:4E:B9
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 019897B798040D39CC5D4C2DD6BC81A96683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 136A
Signing time: Mon 11 Aug 2025 06:00:48 +0000
Manifest this update: Mon 11 Aug 2025 06:00:48 +0000
Manifest next update: Tue 12 Aug 2025 06:00:48 +0000
Files and hashes: 1: 1qXoS3ZyJIxcOWhfODj10DLjQ_U.roa (hash: GFEaUvVwjsTkY2CZy9se0kItacxeC4v59hUMVKrNWa8=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: v5PO+7EI//f3NdKXaZSc3NrJQMbFoIDCtw2BmfIvNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:98:04:0d:39:cc:5d:4c:2d:d6:bc:81:a9:66:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Aug 11 06:00:48 2025 GMT
Not After : Aug 12 06:00:48 2025 GMT
Subject: CN=ae7ce37f0b8bc642281de5877419bb702b184eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:8f:a8:89:f9:e3:e1:50:b9:cb:f3:08:56:
5d:36:f3:c5:73:04:1f:1c:04:64:b5:ec:81:1a:12:
70:fe:95:38:cd:46:04:81:e8:10:d7:6a:2b:55:86:
4b:ba:48:e0:06:a8:a5:dd:ec:6d:b7:f9:49:29:4d:
98:86:65:24:ea:c1:05:22:3e:bb:6f:1d:27:83:5a:
a8:ef:c8:83:d5:05:ef:86:dd:a0:eb:25:62:88:98:
4b:87:28:3e:6d:05:d9:83:f7:cb:0b:f4:79:b8:4e:
74:b0:c6:1e:f2:eb:20:4f:d5:20:ca:17:df:fa:d3:
c8:90:5e:39:5e:fd:3d:9a:aa:19:6f:7d:b0:63:9f:
2c:14:cf:41:93:c4:b5:f5:2d:68:67:5c:19:50:eb:
2f:5f:96:2e:05:84:95:99:81:1c:93:19:69:fc:bc:
6d:1b:d2:57:ad:49:ae:90:57:e0:b9:01:71:60:b5:
da:0c:69:5c:4f:67:96:ac:8c:7a:41:85:9a:e3:73:
44:83:dd:8e:11:87:02:19:41:01:2c:1a:5e:ec:db:
6f:7c:c8:3b:52:ca:b0:e9:5c:24:f9:a0:61:1d:a7:
c7:9c:75:1a:aa:ff:6e:b5:7b:4f:67:3e:5b:ba:ca:
25:7d:b8:a5:26:e0:3c:53:62:1a:9a:2c:b6:88:df:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:E3:7F:0B:8B:C6:42:28:1D:E5:87:74:19:BB:70:2B:18:4E:B9
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a8:21:73:77:c9:77:0e:cc:a6:dc:8d:c8:d2:c5:e5:2d:9d:
32:60:b2:2d:1b:f4:0d:98:7e:23:a9:d2:d4:cf:78:49:7d:ae:
1e:d8:ec:af:b9:9f:91:69:9f:51:b6:01:95:9e:1a:5f:79:e3:
d7:03:e5:6e:2c:fa:d0:46:7d:78:75:ce:b8:09:67:6c:70:37:
28:c2:19:41:48:12:d6:12:66:02:3a:9b:8a:d7:37:4f:7d:c6:
bb:09:4e:8e:ce:d0:e5:4c:e7:08:14:c4:d0:92:84:d9:7e:f7:
1e:93:78:ec:4a:cc:5e:54:61:29:c0:06:6d:74:98:d1:68:cc:
54:c0:6c:7c:d6:1a:70:09:b2:fa:66:3c:4e:65:e9:09:f7:bc:
5c:82:cf:c1:e8:26:37:01:85:7e:4f:3c:20:b0:62:39:b1:53:
fa:9d:eb:60:bf:2e:ec:95:51:00:75:73:c7:69:62:a8:b7:85:
a1:46:f0:75:a9:9c:62:d1:86:03:ba:db:d5:0f:c3:e0:17:47:
9b:3c:7b:4e:e4:f4:b0:be:42:6a:fc:b9:07:30:0c:e9:21:97:
7f:13:67:70:78:56:d6:aa:b7:77:95:64:b2:25:67:e4:67:f2:
4f:d4:48:e2:98:fe:d9:dc:95:bc:70:da:d2:05:93:a1:a5:57:
44:e6:61:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:17 2025 by rpki-client