Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier: BnqRvftpmz1HEhSQ06kLSaopNbcyV5rlYzOu2K6jQSo=
Subject key identifier: 57:93:D1:E4:F7:F5:F5:C9:90:E5:01:CB:55:C4:FE:9C:1D:F6:89:E5
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 019893A3BB42D881C08907089FC0586F9919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 11:00:37 +0000
Manifest this update: Sun 10 Aug 2025 11:00:37 +0000
Manifest next update: Mon 11 Aug 2025 11:00:37 +0000
Files and hashes: 1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: atSd3RVFMYJQSxeDlf07l/srnjwrfqzbDzN46xxiZas=)
4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:bb:42:d8:81:c0:89:07:08:9f:c0:58:6f:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Aug 10 11:00:37 2025 GMT
Not After : Aug 11 11:00:37 2025 GMT
Subject: CN=5793d1e4f7f5f5c990e501cb55c4fe9c1df689e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:82:ae:3f:04:5b:e9:fb:5a:a0:62:46:20:
ff:c9:8c:ab:fd:de:47:ed:cb:9f:86:15:5b:ea:50:
2c:47:9c:08:a1:bc:e8:7e:79:2b:5b:12:8c:cf:11:
34:8a:80:12:a1:d0:b3:f1:67:ca:15:36:8b:a4:f1:
f8:64:75:b8:bc:77:2d:4a:02:2a:59:dc:9f:7b:29:
f0:94:7f:6b:c4:b5:d0:ea:89:b4:3b:8f:56:a7:05:
1f:e7:3a:f9:96:c7:4b:5a:ec:fa:c2:1b:3e:ac:4a:
ca:37:d2:57:88:a6:09:03:f9:c5:76:2c:d0:88:4c:
92:8d:ef:78:08:f7:b8:a8:0b:31:ce:0f:c3:22:2c:
e4:de:71:f6:8d:ae:01:d0:d2:93:c4:0b:86:7c:09:
33:a2:c1:b7:71:bc:1b:fe:7f:92:7a:3b:ca:b5:fa:
09:16:b7:53:2c:77:c5:0e:26:bd:5e:70:bb:7a:b6:
b4:ce:b4:0f:b7:5f:c0:d9:d5:7b:09:f9:2d:2e:18:
3b:7e:99:1a:03:c9:7f:fb:b8:32:82:35:64:8c:7e:
a6:a1:ae:c1:50:c6:d1:59:23:e8:e1:33:02:44:12:
89:39:55:ab:b2:a9:df:e3:a8:72:76:e3:45:98:9b:
2e:a5:83:9e:b1:46:07:27:c8:4b:08:ad:24:fc:56:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:93:D1:E4:F7:F5:F5:C9:90:E5:01:CB:55:C4:FE:9C:1D:F6:89:E5
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ce:44:f4:cd:17:ca:98:f3:67:28:6d:5b:99:41:a1:e2:17:
5e:99:9c:97:ec:e2:bb:ce:3f:d1:34:32:e5:76:8e:63:7e:1b:
13:04:1e:05:5c:be:aa:96:09:da:b3:74:65:3b:64:a9:a7:f6:
34:50:df:e0:60:ca:40:7a:84:d7:5a:e6:23:c8:21:69:bd:a4:
d8:65:b6:81:c9:7f:1f:4c:a9:e1:a0:89:0d:58:10:7f:14:ae:
5f:f7:3d:69:d5:b3:a5:23:50:ba:e7:93:cc:20:ce:c1:b0:8b:
66:9c:4e:07:fa:f8:1f:f6:88:9b:09:66:61:ad:d0:a4:38:1e:
66:73:8b:82:62:5a:a9:38:38:27:35:e7:37:c0:27:69:37:55:
77:f2:57:6c:28:2c:25:a8:f4:9c:67:11:7f:0f:d1:57:ff:24:
d0:2a:00:7b:01:55:0e:4c:a2:28:70:82:35:4f:ef:f0:62:1b:
95:21:be:15:aa:27:e5:65:f8:70:f7:61:0c:97:51:1f:6b:76:
d8:42:f6:bb:a8:60:0a:93:f1:be:5e:24:1c:7d:37:07:b6:56:
72:18:63:28:a2:70:0f:13:0e:75:30:3b:d9:01:16:f7:6d:82:
e3:e5:d2:33:38:df:2c:d6:68:de:3c:63:49:39:d0:c8:c8:f0:
c3:d7:fd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:18 2025 by rpki-client