
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: 3/KPzHu2uQxQysImPD9nG5tflJIXodZ5nZdQQkN/qaI=
Subject key identifier: C2:11:C6:10:A4:5A:17:99:3D:B1:44:AF:0B:78:EE:FA:59:07:0B:88
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 01988B7C6D4DFE18ECE5A4CD47213DC8AE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 0248
Signing time: Fri 08 Aug 2025 21:00:44 +0000
Manifest this update: Fri 08 Aug 2025 21:00:44 +0000
Manifest next update: Sat 09 Aug 2025 21:00:44 +0000
Files and hashes: 1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: fjVTpCuuI4jwWN8ktRH9Go7p3HVrOrY6+YjpTe2xgHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:6d:4d:fe:18:ec:e5:a4:cd:47:21:3d:c8:ae:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Aug 8 21:00:44 2025 GMT
Not After : Aug 9 21:00:44 2025 GMT
Subject: CN=c211c610a45a17993db144af0b78eefa59070b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:1d:6a:2e:55:9d:f6:15:25:82:0a:f7:ea:
20:19:80:5c:f9:de:9a:58:b9:2e:c9:31:13:ff:f8:
c3:92:bd:e6:53:95:9f:0d:cd:05:28:6e:d6:02:5d:
ed:79:36:c4:f1:cd:85:18:ee:b4:e9:4c:0e:14:25:
b4:58:d1:cd:d5:0b:ec:e1:79:c2:fb:31:b4:b1:10:
2b:bc:cd:fd:6d:20:ef:cb:f5:fb:09:f0:96:27:af:
04:68:0b:f2:eb:94:8e:2a:34:11:80:32:31:d6:03:
9d:45:63:07:29:cc:4f:cf:12:de:77:12:01:21:17:
24:95:bd:6d:a2:16:f5:0e:e7:cc:72:c2:b5:95:52:
74:ec:4d:ca:e2:2a:73:3a:18:27:76:d5:1f:96:84:
84:01:6b:30:f9:90:c3:7d:cb:a0:a1:b2:63:9f:10:
33:bd:00:fd:7f:b1:a2:b4:00:f4:b4:bf:5a:78:00:
3c:93:a2:de:ff:6a:98:2d:37:25:39:01:83:69:b9:
24:aa:63:cf:9d:40:af:29:09:53:a5:d0:d0:94:d2:
a2:6f:ef:0e:da:38:50:24:1b:3d:b8:b5:02:cd:0d:
c5:be:49:06:60:bd:6d:21:36:42:65:ac:93:41:7b:
56:f4:6d:f8:1c:5f:75:9a:cd:28:70:39:ad:87:52:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:C6:10:A4:5A:17:99:3D:B1:44:AF:0B:78:EE:FA:59:07:0B:88
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9d:d3:b8:93:0c:ff:ed:e0:1c:e2:0e:27:cc:e9:41:cf:db:
cc:63:39:9c:91:66:6c:16:01:3b:77:bd:58:be:5e:1e:79:2e:
49:7d:a9:6c:c2:2a:af:52:a8:d7:3c:6b:85:d0:6d:f1:66:c1:
26:87:5c:10:f7:d1:c1:3f:cb:c5:1c:d5:76:a7:3f:31:5d:03:
58:cb:bb:bd:a3:ce:cc:37:72:e5:0f:f5:5f:6b:1f:ca:a3:7b:
03:a1:9b:26:88:f1:ca:7f:6d:a8:8f:ba:47:9b:99:db:40:58:
0b:dd:98:42:d9:53:0c:7d:66:1e:56:64:5d:d7:be:a8:c4:e5:
a1:92:d0:ff:70:ac:6a:78:43:45:ff:ba:40:19:86:d0:77:43:
6b:a2:75:9d:d5:b0:a5:09:54:ab:59:a6:7f:1d:8c:09:39:d0:
cd:c8:7c:e2:8c:80:86:ea:29:f5:26:c0:5d:84:6c:fe:fe:41:
f8:59:17:92:ea:2a:4c:38:7a:6f:99:cb:cb:68:90:38:c6:24:
a9:bf:41:7c:5c:89:b2:62:2d:95:74:c8:2e:a5:f9:81:12:35:
8f:b8:52:fa:60:d3:93:28:c3:bc:93:24:cc:a8:13:0a:c9:92:
34:fc:a2:ef:17:8a:06:90:86:f0:d5:51:14:52:97:54:c5:8c:
6f:21:0e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:02 2025 by rpki-client