
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
File: oVHP748-2G0RrqutTRngal0HDTA.mft (raw, json)
Hash identifier: zCcakA4gjIZG/pdn3xl3lbVo9KCABOeDfEhO8sNpszU=
Subject key identifier: EB:81:F8:18:1A:A4:89:1F:58:9F:C7:93:20:7A:47:3F:ED:08:59:43
Authority key identifier: A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30
Certificate issuer: /CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30
Certificate serial: 01988EEBAA117D95FEE6F304345E6632FBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 13:01:05 +0000
Manifest this update: Sat 09 Aug 2025 13:01:05 +0000
Manifest next update: Sun 10 Aug 2025 13:01:05 +0000
Files and hashes: 1: cURozdoKIb78CE26-wMYNNQ7Uyc.roa (hash: dA/x8vNS0uSWiGck2vmKHPyuh1JLESwmF1FR0wRZ1Jw=)
2: oVHP748-2G0RrqutTRngal0HDTA.crl (hash: 1U7Qf0HMWi9nsBI7Lx4eP8piuvrm1nIqp19ZcqsNCKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:aa:11:7d:95:fe:e6:f3:04:34:5e:66:32:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30
Validity
Not Before: Aug 9 13:01:05 2025 GMT
Not After : Aug 10 13:01:05 2025 GMT
Subject: CN=eb81f8181aa4891f589fc793207a473fed085943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:9f:af:e6:f8:17:24:6e:60:88:6d:a8:46:
4c:69:bb:bb:a4:0c:68:99:b8:0b:70:a0:12:eb:92:
e0:72:c3:d4:ec:34:0a:5b:8d:54:68:19:b3:9f:f2:
45:18:e9:b3:db:84:de:fa:fd:5b:73:5d:b2:27:ff:
9c:22:46:bb:7f:8b:32:7e:2f:a7:41:56:5e:c8:f4:
b7:6c:0d:e2:c8:5f:62:9a:d4:4d:8c:77:42:59:59:
6c:55:c2:20:e8:95:b7:4c:4a:8e:24:ee:1e:f8:c0:
5d:29:77:fa:2d:b0:16:83:1a:90:94:4b:31:a0:18:
07:56:62:b1:27:7a:6b:66:3b:78:eb:ea:6d:2e:0b:
e4:54:07:2c:12:a8:f8:5a:4e:64:eb:25:0a:a4:f0:
d4:f9:20:5a:3f:19:91:ec:9f:3f:55:d4:81:16:b1:
64:e0:fe:cf:50:66:6b:67:25:5a:b6:9a:6d:86:32:
e5:b7:ac:93:f5:5b:89:fc:95:5d:8d:a2:bb:7e:a7:
a8:d4:5e:34:cf:5c:8e:f1:b9:49:a0:d9:c3:1e:6e:
67:0e:68:08:e9:c7:f9:88:b4:5e:80:5f:29:a8:c7:
00:92:1c:fb:85:04:fb:7c:a1:fd:52:17:c7:7c:6e:
90:e2:84:5a:2c:7c:65:6d:05:63:a2:59:51:89:17:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:81:F8:18:1A:A4:89:1F:58:9F:C7:93:20:7A:47:3F:ED:08:59:43
X509v3 Authority Key Identifier:
keyid:A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:56:f6:92:21:d9:21:2b:83:52:02:53:9e:87:26:13:61:63:
54:91:91:f5:c0:9c:81:83:fc:94:fe:cb:33:ab:90:4c:6a:e3:
76:b3:8c:cd:d4:f6:9f:7a:19:52:2f:94:ae:85:93:19:39:9d:
a0:ea:ea:86:43:9f:6d:02:00:4c:c4:84:cb:30:e7:57:60:5d:
7c:14:c4:82:3f:4c:07:ca:4c:d7:30:66:22:0c:13:65:1a:08:
ce:c3:58:7c:3c:63:05:de:b5:89:9b:32:f7:61:ec:b1:70:7e:
b4:59:a4:63:fa:54:f5:f4:1a:43:f2:80:14:d4:9a:a6:50:21:
25:b2:a6:e4:19:af:a2:3c:c7:30:32:51:f3:7c:24:1b:7e:58:
fe:73:af:90:13:6a:35:f1:2c:f3:36:db:78:b4:4b:88:89:fa:
ee:f2:98:56:f9:7f:d3:71:f3:c4:1f:33:e5:8e:f0:55:5a:9c:
d0:33:12:9d:b2:e1:ac:6c:65:01:0b:09:97:92:b1:e3:e4:71:
9b:8b:24:4a:3b:35:e0:69:96:ba:5b:ab:f9:61:ba:e3:52:be:
32:04:76:69:4c:d2:0c:a5:91:b5:37:bf:77:c3:a6:6e:ed:b4:
a1:95:dd:f9:f7:6c:51:6d:4a:a1:b9:02:79:66:34:6b:38:c2:
f1:74:37:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:36:58 2025 by rpki-client