Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: VA+gh8VKZ/tRgdeDeU7YFNLSbVer0DZ9uBF2A6d2lQM=
Subject key identifier: 1D:5C:C1:2C:87:75:C3:98:F6:80:31:7C:AB:FA:D6:7B:37:AC:48:50
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 019880F9385CF4FC6DEFFE47B9874F4BC144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 12E9
Signing time: Wed 06 Aug 2025 20:01:13 +0000
Manifest this update: Wed 06 Aug 2025 20:01:13 +0000
Manifest next update: Thu 07 Aug 2025 20:01:13 +0000
Files and hashes: 1: ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa (hash: f+ETlYVDvmS9d48p0ZYmqykWIOKGSt0JzwDEXRuMaVs=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: gqDkIyX/vHwEN9+a++IEJwgmUNtrn4WqdQKgX/L3E/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:38:5c:f4:fc:6d:ef:fe:47:b9:87:4f:4b:c1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Aug 6 20:01:13 2025 GMT
Not After : Aug 7 20:01:13 2025 GMT
Subject: CN=1d5cc12c8775c398f680317cabfad67b37ac4850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:82:b3:44:4b:2c:f4:b6:83:fe:5d:5a:94:
c8:1c:43:4b:0c:ba:bc:a0:3b:75:10:f4:8e:1d:28:
16:10:c2:58:75:4c:57:4c:a7:59:2b:b7:89:9f:6b:
11:35:b5:92:5f:ce:f6:ce:16:a8:6d:22:a5:cb:fb:
62:36:75:1e:e7:9d:d3:de:d2:60:cf:41:37:0e:81:
6c:9b:61:80:7c:71:bd:94:3c:d6:f4:2f:f6:f1:c2:
9b:69:e7:0b:9e:38:1f:a1:ed:e4:9c:e5:af:47:2f:
72:5b:58:51:4d:09:88:48:96:28:7b:6f:4b:9e:d8:
17:d3:79:83:3d:3c:fc:a3:5c:1d:2d:c7:53:13:5a:
bb:53:d1:4b:56:f4:69:ee:e4:f4:00:0b:05:17:58:
0d:3d:38:38:d0:8d:f0:2a:c2:74:54:06:57:f0:0d:
0c:a4:a2:10:3f:57:90:62:33:3f:b2:08:70:dc:b9:
b0:4a:f2:91:a7:b2:07:3d:1b:03:38:2b:c6:24:6c:
44:3d:4a:6a:bc:1a:65:d8:79:38:c3:c2:98:40:cf:
76:9e:05:0b:c7:ce:20:0d:76:ff:7c:4d:7b:cf:b1:
b1:43:45:29:24:01:fb:d8:e5:a8:62:0f:9e:9d:01:
4b:16:c3:fa:69:11:d4:ba:70:cf:5b:85:42:de:91:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5C:C1:2C:87:75:C3:98:F6:80:31:7C:AB:FA:D6:7B:37:AC:48:50
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:68:d7:b9:17:60:2f:10:1f:b5:d9:4d:89:07:a5:9f:7a:e3:
a7:a1:33:d3:96:fa:13:f6:c9:94:d9:a4:99:7e:ae:40:41:f3:
a7:94:17:44:97:28:40:92:d7:51:5b:92:f1:9f:af:07:dd:a7:
69:fb:6f:73:a1:a8:97:b0:24:1f:20:22:db:2f:b6:7b:fa:e2:
5b:95:61:a5:3a:e4:03:8b:8e:6c:fc:f8:29:66:dd:8e:41:0a:
94:e7:90:b9:92:6c:ad:6e:61:45:cb:20:db:f1:56:2c:24:e2:
7d:31:5b:5e:04:c3:49:22:e3:f5:fe:b3:f1:e9:03:a5:08:9d:
0f:7d:0b:09:60:7b:d5:20:00:d6:0d:66:dc:3e:4c:79:6d:68:
67:20:54:d4:57:c9:d4:db:eb:f8:58:59:08:c3:14:33:05:7d:
cd:36:1b:f4:8e:1e:27:91:f8:c1:ef:b1:ab:28:16:bc:f2:fc:
f9:79:e1:a1:35:b8:98:ef:55:8c:57:02:dd:3e:89:78:a3:c7:
e3:d6:05:53:5f:c1:2d:40:78:b4:da:65:a1:0f:80:d9:1f:40:
ac:3f:e6:d4:34:b4:06:2e:5f:aa:51:81:63:7e:1b:e6:c2:9d:
b2:f7:9b:5f:29:f9:54:6a:54:81:5c:4a:5f:0c:09:40:21:c1:
6a:a2:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:35:29 2025 by rpki-client