Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
File: OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft (raw, json)
Hash identifier: b02AzG9GVPql21cX/mQR3K+TlvTnM2KLxEqL+yBz614=
Subject key identifier: 34:6C:D9:72:B1:73:64:C7:AE:3B:04:02:8E:1B:3C:0D:66:E6:1D:9D
Authority key identifier: 38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
Certificate issuer: /CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Certificate serial: 019873E3FF18B913868B6ECF4E7A681C1A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
Manifest number: 068E
Signing time: Mon 04 Aug 2025 07:02:58 +0000
Manifest this update: Mon 04 Aug 2025 07:02:58 +0000
Manifest next update: Tue 05 Aug 2025 07:02:58 +0000
Files and hashes: 1: 96NgLEHRtKxUiimE9cBg6xhscpQ.roa (hash: mk1oEXhjeJbAg6bVncPiZm7XaZ/iA+I0QEGuQUH1ZeM=)
2: OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl (hash: Ze+B1l2Ik9/j8XyYe4aWbKSCjn0DzqWJjjbsGKrWWOk=)
3: auApMcvT0ghtABN_47-F8XLxrNw.roa (hash: XofAinsDeuW+LGI1qiG7UWKXoZIw8N+n+gNQOT5w3Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ff:18:b9:13:86:8b:6e:cf:4e:7a:68:1c:1a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Validity
Not Before: Aug 4 07:02:58 2025 GMT
Not After : Aug 5 07:02:58 2025 GMT
Subject: CN=346cd972b17364c7ae3b04028e1b3c0d66e61d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:1b:07:08:66:e5:77:73:01:e1:bf:e8:64:
a0:1b:ff:71:10:04:9d:74:fe:bc:6e:59:18:da:3d:
1a:b6:ce:7d:7c:24:65:28:6c:6c:e3:e3:31:80:41:
93:eb:48:62:f9:32:50:55:90:10:d6:d1:2b:3a:47:
0f:53:f5:75:32:e9:f8:c4:65:9d:a4:36:b8:7f:e1:
c0:78:9d:ce:39:d2:3d:3b:71:00:35:b6:42:0c:41:
2e:44:07:5c:41:e5:4a:01:4c:dc:76:58:b1:17:24:
3a:3f:65:2d:b4:f6:68:86:98:19:f3:84:12:a4:26:
05:07:57:36:4e:03:c2:d3:b6:27:46:e1:29:e7:b3:
4c:d8:d2:e9:a8:8f:43:ff:48:69:d7:d9:2c:fa:da:
56:39:68:d2:d5:f0:91:ae:01:73:d8:17:6b:72:ae:
12:79:09:19:7a:ba:22:0e:c5:94:25:7f:12:a8:9a:
26:bb:44:81:84:f7:7b:92:8f:74:e4:c2:b3:43:ec:
ca:ba:cd:1e:87:e2:ec:2e:42:68:1f:dd:c3:65:82:
6a:f2:24:db:80:7d:86:d9:46:1a:2a:91:ae:e4:63:
a9:22:6f:76:9d:4e:33:46:35:8f:95:8c:8d:e1:41:
93:36:6b:6c:93:38:ee:32:cd:18:69:d1:ab:34:75:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:D9:72:B1:73:64:C7:AE:3B:04:02:8E:1B:3C:0D:66:E6:1D:9D
X509v3 Authority Key Identifier:
keyid:38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b5:ad:19:9d:72:04:8c:94:1b:06:7e:33:38:ff:4b:da:77:
40:8e:0c:e1:94:72:1a:a2:91:02:87:00:63:40:b2:8b:f9:f8:
cc:56:88:9c:88:a4:4e:61:f2:49:9a:ae:58:94:bd:8a:ff:fd:
c4:f7:3b:10:c9:2b:58:77:45:27:58:e0:85:35:30:6f:1e:15:
76:fe:eb:25:89:91:56:76:0b:3f:e8:a2:96:48:07:c7:1b:ff:
18:89:f0:52:8c:9c:73:63:90:24:37:e6:2a:eb:b7:59:a8:bd:
67:6b:dd:49:e7:77:c0:ce:3b:a5:8b:a3:47:7c:84:c7:0c:3e:
df:12:86:99:25:cc:c4:e1:ad:ef:8c:a6:8b:a2:c8:a1:b6:d6:
c1:b4:e3:88:85:83:81:9c:79:a7:af:ad:9a:25:a9:29:bd:22:
e5:26:eb:9c:99:ce:cf:35:ad:76:02:7b:b6:99:90:63:fd:18:
98:65:1d:6b:8c:64:0c:b2:49:26:73:f6:03:29:51:bb:a2:54:
1b:bc:2f:a6:9f:a9:4f:f0:7d:a3:f3:c6:fd:75:3d:5b:96:ff:
f1:0c:2b:5e:6b:31:e8:bc:b5:29:f4:de:86:53:59:68:ec:ce:
a3:69:92:63:53:6d:e9:8f:c3:e2:b8:2d:97:88:74:19:b4:db:
44:2c:40:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:07 2025 by rpki-client