Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier: 6R/jXhei4VYsDOFUMBDmf+728pHDsfpQ5RcPSmvh0kA=
Subject key identifier: 33:CC:2B:19:89:C1:97:E9:34:47:2B:24:4E:D2:5C:F1:84:6E:EF:99
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 0198906C032296E3FC119DA0321D3171DAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number: 07F9
Signing time: Sat 09 Aug 2025 20:00:54 +0000
Manifest this update: Sat 09 Aug 2025 20:00:54 +0000
Manifest next update: Sun 10 Aug 2025 20:00:54 +0000
Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: DLBh9Bh1HVw/ovvW8LbEpzntPUd3y07iD5aa/foO7gI=)
2: swurPPgvx5Mw_k7aI45OkF86THI.roa (hash: dit/va7s8wsuU7O85dlDJKzD74oG/IiETxDpxdGILWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6c:03:22:96:e3:fc:11:9d:a0:32:1d:31:71:da:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Aug 9 20:00:54 2025 GMT
Not After : Aug 10 20:00:54 2025 GMT
Subject: CN=33cc2b1989c197e934472b244ed25cf1846eef99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:b2:0f:f6:7c:8c:04:79:6e:a8:8b:be:e9:
c2:80:98:29:fc:eb:9b:12:b7:91:db:1b:83:54:9a:
50:b8:0b:0e:1a:80:74:2b:60:fb:70:48:67:6b:e4:
30:f7:1e:c3:cd:9d:9c:c9:07:21:83:d4:67:50:37:
b1:23:85:87:8c:bd:7e:6d:e8:91:e0:43:61:c4:de:
b6:ba:53:ca:5e:f1:d0:d9:ed:d1:e1:5e:5c:ec:a7:
04:14:1e:59:69:92:70:50:d5:ce:3b:9e:d9:b3:bc:
2e:ea:47:d0:c5:3d:a8:f6:41:42:a5:25:0f:63:43:
73:d0:8f:55:75:76:0e:e3:8a:96:59:c0:ce:00:dc:
62:3e:69:a8:b8:f4:fb:9f:4f:03:41:3a:20:07:86:
04:3d:4f:76:26:9f:d0:da:31:53:33:7e:b2:d0:fe:
44:72:72:8c:3e:15:e4:e5:3a:bf:b8:57:59:7c:c1:
54:e1:3c:84:b4:35:09:ad:08:69:c0:ac:7b:b0:da:
3f:cd:71:4d:76:8e:54:b8:21:41:c0:04:a9:7d:40:
bc:a1:a2:01:ab:46:d2:9f:f6:59:da:28:af:ba:f8:
67:b3:3a:b1:e3:ae:7a:4c:d6:c1:04:fa:9b:ec:6d:
ff:cd:c4:c0:d3:1a:49:93:ca:89:54:4d:e7:d1:66:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CC:2B:19:89:C1:97:E9:34:47:2B:24:4E:D2:5C:F1:84:6E:EF:99
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:8a:33:9c:c0:11:17:46:1f:e5:03:8f:f6:89:ac:43:19:
2b:40:fb:7b:c5:6e:49:cf:90:0f:f2:35:de:ff:e3:2a:4d:d8:
d3:54:1b:ca:ed:ec:c2:39:f5:21:ad:eb:ca:6f:5a:11:ed:20:
3f:5e:1e:a2:9c:c6:76:57:ba:c8:2f:a4:cc:78:6a:2b:7f:1c:
ed:7d:13:8d:82:4b:9e:f2:88:10:e4:f5:01:4d:ea:09:9c:84:
a4:d3:98:36:7c:80:1e:5a:41:32:66:67:12:80:e8:5c:2a:9e:
10:83:02:b9:b9:a6:c1:17:fb:2e:18:db:46:f2:d5:45:a3:65:
74:02:be:d8:c3:4c:0d:19:71:aa:a6:75:04:25:f6:00:cf:74:
2d:4a:0c:5f:de:cf:98:07:bd:3a:3a:f6:91:1f:52:ee:0a:dd:
32:fe:7d:3c:89:d0:44:99:13:8b:a5:6f:68:6f:40:a6:fb:4f:
68:07:f4:50:a0:7e:95:23:63:5c:99:60:00:bc:25:42:d1:ab:
d1:57:7b:4a:43:52:8c:97:e1:ca:4a:c6:9e:a1:91:9d:11:c0:
dd:98:99:ab:24:08:ee:c1:47:a4:89:3d:c3:b6:d1:d3:fa:ac:
a3:cd:cc:5f:86:59:33:dc:22:25:b7:16:f6:09:00:4d:26:6a:
2e:9f:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:32 2025 by rpki-client