Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
File: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft (raw, json)
Hash identifier: pMMC8aUuBQgCudz9t2NEE39EnTpEUEojLNGH7S+ryxs=
Subject key identifier: 06:F4:FB:A9:57:E9:25:10:34:AC:C3:67:BE:B7:A5:FA:1B:B2:E6:42
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 0198801D2CF3D8C36F3EF357F10FBACD9992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
Manifest number: 0EEE
Signing time: Wed 06 Aug 2025 16:00:52 +0000
Manifest this update: Wed 06 Aug 2025 16:00:52 +0000
Manifest next update: Thu 07 Aug 2025 16:00:52 +0000
Files and hashes: 1: JyWi5BFZcLnbfEzmECOIrpo9WqY.roa (hash: BGeaCEXgvEq5NNxKl+Ag2+yFWkLD9Y1n05TPe3xR8kw=)
2: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl (hash: RQNfFYjvIdvRwJ2ggNDyevWA38GWi8LRFTRpxsYo5Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:2c:f3:d8:c3:6f:3e:f3:57:f1:0f:ba:cd:99:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Aug 6 16:00:52 2025 GMT
Not After : Aug 7 16:00:52 2025 GMT
Subject: CN=06f4fba957e9251034acc367beb7a5fa1bb2e642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:43:db:a4:ef:e7:13:e7:21:6a:21:64:17:
36:61:62:7f:19:e1:c7:b2:3a:ec:ef:df:46:be:48:
3b:4b:e4:fe:2f:48:da:7d:46:0d:9a:66:b8:82:64:
37:d5:42:44:36:31:63:be:29:9b:1d:58:25:3c:74:
88:69:c3:1b:89:6f:31:ee:3e:71:07:11:28:18:40:
aa:28:14:1e:a2:fd:1f:cf:a4:5b:f3:4d:8a:ec:05:
77:eb:c5:ff:b5:f0:08:aa:54:7a:eb:51:2c:8e:5e:
0e:af:b3:a1:2d:9c:07:6f:7e:be:67:5a:ba:d1:e3:
a7:71:e2:4d:4a:d4:a0:b3:52:c4:08:a3:8b:b5:3d:
00:7d:5f:42:81:b3:de:18:d2:29:8e:35:43:70:32:
53:71:18:a0:03:b2:1f:17:0d:66:a8:93:b1:59:d3:
17:d5:e0:7d:5b:0d:91:3c:0d:e2:97:59:dc:5e:4b:
e9:50:9e:9b:73:85:4f:2f:f5:5b:30:68:79:dd:e7:
42:8a:4b:8c:f3:21:35:7c:e1:92:70:3d:c4:2c:e3:
26:7a:fb:17:6d:7f:c5:20:b8:c9:d5:8c:68:a9:bb:
a0:1e:90:06:53:ee:f7:ba:ba:58:e7:6c:13:bf:24:
6a:d9:44:e2:cd:99:79:06:a6:20:13:33:54:09:4b:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:FB:A9:57:E9:25:10:34:AC:C3:67:BE:B7:A5:FA:1B:B2:E6:42
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:bb:37:64:a5:7e:9d:3a:c4:92:9d:cc:e0:ce:ff:14:98:72:
7b:c3:24:1a:89:74:2c:e4:77:69:dc:3b:a0:e1:36:b1:f6:dd:
a2:74:fc:3f:4f:e6:3d:a9:60:b9:c7:52:d4:d5:7a:49:8c:34:
b5:b9:fd:f0:31:c6:a2:88:5e:9f:1b:cd:0e:1a:5b:25:a7:5a:
65:48:32:43:55:dd:a5:f6:ec:d8:b3:c6:42:bf:3e:b1:0b:09:
b4:1b:49:6f:43:9f:d1:d0:4f:90:b2:42:82:e7:54:9e:43:9a:
46:3b:b0:a6:8c:e9:e7:73:1d:32:6d:98:4b:8e:c6:c5:10:3f:
44:e5:1f:22:80:27:77:0f:6e:98:ad:70:55:40:96:d1:4b:13:
c5:71:73:78:af:66:d9:cd:ca:d1:6c:76:8b:21:71:df:e5:14:
d4:27:d8:22:b1:b7:73:a1:97:b3:3f:eb:e0:f1:82:15:f1:92:
a7:22:74:c9:ff:1b:c7:e0:63:56:0c:db:24:f6:d8:05:f6:62:
29:28:9f:44:81:eb:1e:21:69:be:60:28:38:85:a4:38:e6:b9:
a6:05:3c:48:a2:17:66:01:2f:7e:e9:2f:0c:b7:de:73:a5:e5:
eb:ba:6c:26:2e:cc:1d:b2:39:c8:f5:58:1f:0f:88:e6:3e:c9:
22:dc:ae:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:41:06 2025 by rpki-client