Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: mEgxseyBfhOYvkv+4zkS+mrQUXfAuhsGgZs7B0UH6+A=
Subject key identifier: 92:C4:7A:EE:F9:19:EC:16:FE:11:C1:75:70:08:81:BA:C1:60:B8:72
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019873E35145DBE238A21BFE3509F64DDAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 162E
Signing time: Mon 04 Aug 2025 07:02:13 +0000
Manifest this update: Mon 04 Aug 2025 07:02:13 +0000
Manifest next update: Tue 05 Aug 2025 07:02:13 +0000
Files and hashes: 1: 2iawdTNRAh1zMLPtNSSUfzd99zU.roa (hash: glHA3I9GeCgeFCksuKJN4v0XXNiSd6eBOO+HCKjdMxc=)
2: D3uFNp_uUSHt1YSi-2IaHiDrRag.roa (hash: s8c53hlFJRAlFwJlOpAFaiZbwpviv1EIugwd2PuQcZA=)
3: dFUsEYWW8cUdCui6PDM05P1wfuk.roa (hash: AL/iuu9lD2lbk6JUjTvJCA4F0UIgpReIGiy6fq4g99s=)
4: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: L6/1lQAWclmGDBiv81CiZl/cypY/Pol05sLvNdfTNDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:51:45:db:e2:38:a2:1b:fe:35:09:f6:4d:da:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Aug 4 07:02:13 2025 GMT
Not After : Aug 5 07:02:13 2025 GMT
Subject: CN=92c47aeef919ec16fe11c175700881bac160b872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:10:01:8d:b4:10:15:5f:80:6f:5f:2a:cf:
9a:18:66:b4:b6:7a:f9:56:31:fc:0d:ba:7c:ff:32:
8b:8f:01:21:48:98:a3:42:38:53:8e:ac:4f:96:61:
6f:64:c9:bf:32:f2:5c:bc:4b:e1:ab:fd:3a:e9:07:
1f:0e:19:3f:21:50:75:bb:5a:7a:33:bb:6a:3d:3e:
e7:12:34:2a:74:4f:4f:72:47:22:47:d3:9c:8f:7c:
c5:3c:f1:78:20:fa:ac:a8:3a:f3:39:40:11:a5:58:
7a:c4:cb:28:5d:1c:ee:3f:64:5b:ac:7f:e6:47:ca:
4f:80:34:08:8e:53:c8:18:c1:bc:1d:97:63:dd:a9:
d0:92:4a:c0:d2:69:73:92:7d:2d:44:b9:55:0a:71:
be:fd:4d:74:d1:22:f5:a2:65:32:a9:c9:72:55:59:
4d:fe:42:c0:23:00:98:09:b6:e3:af:16:ec:d4:92:
bc:b5:e2:95:47:dd:98:b5:b7:fd:ff:4e:cc:ab:47:
cf:5a:84:2c:61:ad:88:53:71:4e:4f:78:fb:c0:3c:
a1:bc:48:b8:2a:e6:46:d9:9b:8e:50:58:a9:6f:7b:
0d:14:05:21:d0:aa:1b:a8:5d:e1:8f:1e:53:ac:92:
2d:76:bf:69:c1:e5:0c:ac:b8:a3:f0:1d:88:0a:54:
00:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C4:7A:EE:F9:19:EC:16:FE:11:C1:75:70:08:81:BA:C1:60:B8:72
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7e:8b:a2:70:86:d9:7b:4b:c5:0b:03:8f:32:ec:e8:73:5d:
f0:d9:ac:a8:fa:26:22:61:f5:50:41:03:72:ac:8a:d7:8d:97:
01:0d:58:a8:f2:a4:e0:38:80:df:13:db:43:c6:8c:43:bb:7f:
76:60:ec:5f:a3:6a:49:2d:04:24:42:9f:4f:60:22:f0:b9:ba:
99:5e:16:a4:d0:30:10:f8:66:0d:5a:02:27:57:b3:34:b6:57:
6c:03:f6:df:94:ea:49:27:80:a2:ef:3a:a2:6c:8d:16:7e:bc:
56:f4:79:0a:80:4d:c7:98:a4:87:60:c2:1b:9e:c8:fe:54:ec:
01:99:ee:88:d7:56:ec:52:61:45:43:8c:fa:71:3e:1f:07:1a:
d7:19:6a:b3:58:4b:0a:df:83:b8:c0:b0:84:ea:9c:9b:11:14:
4a:d2:1b:c0:d2:26:88:00:69:ad:0e:c6:54:f1:3e:1b:cb:f2:
23:51:c1:92:a1:f3:45:4e:68:8b:8b:37:d3:90:a3:6d:73:53:
b1:61:69:38:d2:f7:54:de:39:b9:3a:64:86:8e:05:0f:40:dc:
ba:eb:55:2a:d4:a7:96:a3:2a:b8:5c:69:d6:39:ed:5a:26:ff:
a0:b7:df:86:bb:d7:4b:28:89:1e:5b:99:40:05:b8:2d:88:fc:
19:90:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:39 2025 by rpki-client