Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: ZPcSK1JFmheLpWhC258CTdGcuwc/FzJUd/chpmCdTg0=
Subject key identifier: 33:BC:53:C1:71:7D:B9:24:EC:0D:DB:71:66:75:AA:98:51:0A:12:DE
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 01988D6B7BDD4D4F916D58333EBBBB58701F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0CD3
Signing time: Sat 09 Aug 2025 06:01:28 +0000
Manifest this update: Sat 09 Aug 2025 06:01:28 +0000
Manifest next update: Sun 10 Aug 2025 06:01:28 +0000
Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: nCycbyrWAZOLabO0vo2lxB/JGp+FOaZdnIOD47XN/wE=)
3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:7b:dd:4d:4f:91:6d:58:33:3e:bb:bb:58:70:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Aug 9 06:01:28 2025 GMT
Not After : Aug 10 06:01:28 2025 GMT
Subject: CN=33bc53c1717db924ec0ddb716675aa98510a12de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:fd:2b:af:6c:c0:6d:22:47:06:7c:69:16:
ed:15:c6:84:21:2f:5b:9f:24:47:79:6d:92:ee:10:
7d:54:dc:60:46:90:19:09:a6:c5:c3:0a:fb:96:7f:
69:f0:13:bd:41:4c:05:85:0c:1b:b1:1d:7c:17:4e:
35:d4:0a:1c:f8:9a:a3:ad:96:d8:d6:bb:88:5f:7d:
35:d3:62:77:06:a7:0e:b6:4e:ad:b1:06:c4:cb:f7:
94:5e:bc:35:c1:aa:ac:ee:c6:22:5f:b5:0d:50:10:
52:05:16:22:f1:d1:d5:ea:5f:9a:83:cd:e6:3a:f7:
9b:89:75:db:df:a6:8f:92:98:3e:8c:02:4a:50:9d:
43:45:50:f1:ee:6b:03:3a:68:b6:98:52:00:b9:37:
ff:3b:aa:67:7d:b7:2d:7b:24:94:c9:b6:b1:c2:2a:
ce:a8:91:0d:95:82:da:b6:c4:63:55:9a:46:3a:b1:
d5:5a:d1:d9:f7:59:b4:c8:6a:bd:a7:b9:1a:29:74:
48:86:92:df:0f:92:85:7b:01:f9:8d:6e:a1:0c:61:
d6:bc:11:08:69:19:01:c9:d0:46:b9:f7:3b:02:a9:
6a:a3:75:86:e2:d9:f2:bf:8f:fe:08:68:6b:f5:31:
ec:80:8a:2f:58:31:23:04:d9:19:bc:97:95:c9:b1:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:53:C1:71:7D:B9:24:EC:0D:DB:71:66:75:AA:98:51:0A:12:DE
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:04:38:32:ba:b3:ea:ac:ce:ec:a1:42:da:f0:eb:d4:a9:11:
69:57:2d:f9:b5:f2:ab:bb:6f:5f:c1:f3:58:ac:6f:5b:68:fc:
3f:75:9c:1f:0d:17:3d:c7:43:79:cb:91:6d:2c:02:b9:84:e6:
43:7c:1d:92:72:6c:f5:1d:59:65:22:87:13:87:aa:f5:79:82:
8c:a7:d3:e0:4b:b7:7c:21:66:17:d4:7d:89:59:86:45:ea:1b:
47:e4:25:df:7a:c6:4f:0c:15:c6:ed:e5:52:54:ba:81:cb:01:
e1:ec:3e:79:a0:a3:85:d8:25:c8:5d:ee:26:bf:e3:f9:37:af:
5f:bc:ba:f1:60:e6:69:42:69:98:03:62:ea:88:44:3c:42:0d:
70:e0:d5:c0:8c:bb:6a:75:7d:e0:40:1a:d2:c9:91:29:c9:34:
60:b2:29:a9:01:ed:14:fa:bf:d1:42:e5:db:3b:2b:7e:66:42:
1b:1c:b4:22:e1:f5:1f:8c:e7:f3:3f:6d:87:6c:80:3c:c9:f0:
c8:96:48:d7:00:77:18:72:76:e5:c3:05:e9:10:05:91:c9:11:
cb:17:10:d9:b9:cf:3a:67:7d:75:64:2f:cf:e8:15:4a:ed:a6:
6d:63:19:bf:97:1a:a7:63:65:28:c4:ba:61:e3:00:10:e8:96:
fd:e3:7c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:15:49 2025 by rpki-client