Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: saCm5txH+Ouiwn4j/MbztwH0Z4tUGo6jYt4PlkO2IdM=
Subject key identifier: 35:67:13:ED:E4:43:D8:D4:7D:38:4E:DE:BF:E0:31:B9:54:92:6A:EA
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 01988C58344D1388FB0D0F870A1EF4BB9442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 03F4
Signing time: Sat 09 Aug 2025 01:00:47 +0000
Manifest this update: Sat 09 Aug 2025 01:00:47 +0000
Manifest next update: Sun 10 Aug 2025 01:00:47 +0000
Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: dxmWtgrIaZ6AE/YF8GfrVA+lgOOeAR8Pi7y8V9Eq6e8=)
2: avdVBk-rHRbW-M4AabpJX7CSjxg.roa (hash: XlwxkSLG5mJnTFp/kB80ylCJ16RiA9KQHhkduE06FV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:34:4d:13:88:fb:0d:0f:87:0a:1e:f4:bb:94:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: Aug 9 01:00:47 2025 GMT
Not After : Aug 10 01:00:47 2025 GMT
Subject: CN=356713ede443d8d47d384edebfe031b954926aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:0d:54:26:db:62:2d:14:34:b2:f2:b1:54:
a5:55:08:e7:ee:44:a5:77:8b:1c:60:ed:51:28:1a:
8a:8c:da:5b:f6:ce:99:69:9b:32:5f:37:5c:90:51:
60:fd:e9:b1:34:48:15:e0:c5:95:b2:69:fe:74:59:
78:fd:c6:53:60:1f:f4:92:ba:ce:7e:a4:b4:8e:fd:
51:cc:07:e9:97:cc:ef:8d:77:d0:d6:93:d1:b3:c5:
36:8c:6c:80:17:cb:83:40:95:18:68:94:f0:46:21:
86:f0:a4:e9:1c:b4:0d:c6:ce:38:73:f5:d2:40:a3:
75:b4:87:03:ee:5d:0b:91:fa:3b:28:c2:17:13:c4:
75:a6:c0:a9:33:71:53:b9:4b:2c:bc:dd:f4:c7:31:
99:70:19:55:05:fe:a7:f4:1e:02:85:3d:5f:3b:f4:
f0:81:b5:9a:fa:af:26:2d:a0:8a:25:42:1a:3b:f8:
58:0f:6d:cd:2e:49:8d:7c:de:de:6f:31:5a:9e:f0:
b1:34:ed:c8:a8:c7:90:7f:a9:06:3d:b6:ec:d2:c7:
88:d7:bf:a9:e2:ac:82:ad:74:c8:1d:96:60:6e:07:
5c:ed:53:fd:4b:5f:ea:34:0c:c2:e3:12:ee:90:cb:
8f:11:ba:ca:47:2a:ad:61:b5:1c:dc:65:be:e2:3a:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:67:13:ED:E4:43:D8:D4:7D:38:4E:DE:BF:E0:31:B9:54:92:6A:EA
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:de:26:e6:61:f9:48:4c:57:85:ee:ad:88:98:79:1d:79:e6:
4f:3f:ef:1d:8a:09:4a:0a:de:57:72:d3:93:5c:62:1c:4f:0f:
99:51:4f:60:15:e1:6a:4a:e3:40:01:c4:7f:0c:00:4a:57:1f:
57:92:90:24:8f:a9:fb:c3:96:3f:a4:57:7f:8d:73:4f:16:07:
23:09:47:37:ff:bd:11:30:f0:77:7c:7d:55:15:73:96:9a:d4:
ff:8f:70:56:e1:86:fa:ed:32:e3:e6:2c:c7:8b:7f:34:b4:d3:
63:d0:41:24:8c:83:97:57:ea:4f:b7:bc:5e:2b:7b:09:e9:c6:
cf:d4:5b:62:c8:f2:b0:63:cb:0a:8f:af:41:2b:ba:94:b0:e1:
1f:c9:7a:3d:58:2e:e3:fc:4a:9d:1d:3b:10:36:f5:e8:27:4d:
18:4e:4e:8a:7d:e8:08:8f:b7:71:56:85:c7:88:26:59:2d:85:
a9:f6:a3:96:62:65:ba:9c:a0:dd:44:09:a7:0d:f4:2e:9b:a3:
ab:a9:70:81:b1:00:b4:bb:d0:1c:67:cd:0e:a5:93:2d:0d:a2:
6e:df:0b:b7:9b:74:50:6e:3c:04:a7:a2:48:f8:a4:9b:3c:04:
86:01:e7:ce:df:1f:4c:a1:f3:80:a3:60:ef:5e:f2:ca:5b:a9:
16:67:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:53:02 2025 by rpki-client