Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
File: oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json)
Hash identifier: gPzYnX2Ziq1jtFfkKqZaanGFznNvX+ZUMTY5u3mTcK8=
Subject key identifier: A5:59:F9:7A:F5:5A:C4:4F:D2:A4:6F:77:C5:48:50:15:57:BF:BA:87
Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
Certificate issuer: /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Certificate serial: 01988DD933E651A80E4038CC13334D838047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
Manifest number: 0147
Signing time: Sat 09 Aug 2025 08:01:18 +0000
Manifest this update: Sat 09 Aug 2025 08:01:18 +0000
Manifest next update: Sun 10 Aug 2025 08:01:18 +0000
Files and hashes: 1: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: HiEHslP1+XwoVe38tfHKOC4kPyaQOS/fApw2kC+36E4=)
2: sT1fnBcommpqYG28Wvu_VZnisuk.roa (hash: bgoEmCHH3xYPTJAnecz6TfwkrZtOdQNWaY0Or/vvOhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:33:e6:51:a8:0e:40:38:cc:13:33:4d:83:80:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Validity
Not Before: Aug 9 08:01:18 2025 GMT
Not After : Aug 10 08:01:18 2025 GMT
Subject: CN=a559f97af55ac44fd2a46f77c548501557bfba87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:a7:1e:b2:45:3a:6b:de:bc:7a:18:df:30:
4a:85:6c:a0:3e:f2:77:70:c5:70:5c:72:8f:12:36:
8f:17:3d:21:9f:02:70:c8:22:35:8c:5c:09:4b:24:
1b:a8:7e:45:8c:84:c3:38:d4:3e:a5:ec:62:49:69:
df:49:09:5b:50:5b:16:7a:07:10:3a:66:b5:94:cf:
9c:35:39:6e:d8:9b:64:3a:7c:3d:92:79:39:34:79:
a0:16:2f:35:f0:b3:ac:cf:9b:14:b4:cc:ed:fe:0c:
18:e1:45:eb:f8:36:2e:15:59:21:7e:7e:b0:9d:40:
bf:95:3c:fb:95:e9:29:74:51:07:77:0a:11:d3:6e:
93:73:fd:56:d1:83:f0:0d:7e:f5:cb:f3:3d:f1:8e:
b2:ed:27:4a:74:5e:62:bb:33:66:9c:29:6a:55:45:
4f:e5:e9:24:08:b1:1d:eb:de:45:2b:d0:11:0c:71:
a5:2f:e7:d7:2d:bd:f8:b3:6d:8a:0d:b6:91:7f:3c:
b7:f8:b4:2f:df:f8:81:a0:34:28:51:e7:2c:d4:b0:
76:cc:60:27:c9:02:36:79:77:ad:fd:e3:d7:86:58:
5a:9d:78:d2:e3:ee:2e:23:40:bd:78:87:a9:f2:0a:
20:0d:9d:c1:97:9f:73:43:a6:ee:dd:2e:6d:f4:95:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:59:F9:7A:F5:5A:C4:4F:D2:A4:6F:77:C5:48:50:15:57:BF:BA:87
X509v3 Authority Key Identifier:
keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:cd:98:7e:69:cc:96:6b:d3:d0:06:a3:b1:ba:7b:ad:1d:af:
b3:ee:8c:07:85:d4:dc:94:46:f9:c3:d5:fa:47:69:cf:68:c4:
ff:68:23:f6:f1:a5:bc:33:2e:da:7d:b1:7f:58:59:83:be:2e:
47:de:bb:8f:37:fa:10:19:8f:4d:bd:c0:3d:03:98:c2:4e:32:
15:80:ed:be:30:b6:25:72:eb:d5:cb:20:d7:f7:f4:ac:69:2c:
13:bc:e3:f8:23:4f:0b:b9:ab:ca:d5:28:e4:b7:87:78:3f:9c:
ee:69:bd:fe:7f:3b:9e:ad:c2:7f:75:da:71:c8:65:a5:99:11:
e1:67:b4:b8:c4:29:59:26:03:5f:90:3e:ae:ae:f5:3b:98:00:
cb:64:f0:8d:3c:8b:c2:3b:f4:fd:ad:2f:09:54:c5:48:56:0f:
29:1e:80:29:62:47:69:a6:8d:71:c0:68:23:2e:19:86:99:f4:
1a:20:85:9c:df:7d:06:46:c5:93:c5:94:a1:92:94:e0:2c:b7:
fa:f3:2c:38:b8:6a:19:73:d6:ce:6e:32:02:85:21:a2:ea:83:
84:cb:76:27:da:4c:66:44:ca:1d:d7:49:8b:e8:f9:3d:94:52:
e1:9a:3a:c6:b2:a5:37:3d:21:5f:5a:3a:0f:db:4a:09:e6:76:
29:b1:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:43 2025 by rpki-client