Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier: zejnfVewN0FlBH0eXNl/1J5k42j1WHTpOG7ZN8cHLLk=
Subject key identifier: E4:CB:1C:46:F5:E6:88:D1:42:1D:EE:7E:6B:1D:24:52:44:46:A4:8E
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial: 01987374184FEF72896CA604DCF49FDD8E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number: 06EF
Signing time: Mon 04 Aug 2025 05:00:44 +0000
Manifest this update: Mon 04 Aug 2025 05:00:44 +0000
Manifest next update: Tue 05 Aug 2025 05:00:44 +0000
Files and hashes: 1: hnLlF72Gey1RhDc5w20W5CDAULo.roa (hash: shW0FHDTxcWsn5y+FQlRP0Y7mcQwz41mLYft4nrAmSI=)
2: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: LeerujPhNL3I4HWIdV1uf2+rv2slWRfBY3J3OJB1Ws4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:18:4f:ef:72:89:6c:a6:04:dc:f4:9f:dd:8e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Validity
Not Before: Aug 4 05:00:44 2025 GMT
Not After : Aug 5 05:00:44 2025 GMT
Subject: CN=e4cb1c46f5e688d1421dee7e6b1d24524446a48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:11:c5:d1:e8:13:e9:8e:88:b0:83:f5:05:
13:d4:f6:e7:99:9a:3e:fa:8e:fb:2e:c4:d3:ff:b9:
7e:92:fb:aa:ad:60:d1:33:36:63:84:cf:84:79:0f:
d9:54:f0:b3:05:55:2a:72:ba:9f:b9:6e:6a:8b:72:
40:b2:1b:20:ad:64:25:0b:1b:80:ba:b1:8f:00:19:
c0:4c:e9:21:27:9f:f8:04:01:00:2b:33:34:33:de:
97:49:a6:cd:b8:fb:2c:2f:63:08:41:09:48:d2:67:
39:dc:a4:70:0e:71:9f:57:c0:97:02:35:6f:ec:e3:
98:91:0c:f2:18:51:83:7a:dd:e5:0d:9c:78:bb:33:
4c:48:9e:c0:5a:56:8a:fd:80:0c:59:ce:4d:17:1d:
cc:44:30:aa:05:df:fe:05:6b:fe:3c:43:2a:0c:32:
e3:9b:78:4f:94:7c:3d:29:56:65:40:7e:91:44:84:
50:67:7b:9c:48:08:fd:45:d4:1c:fd:dd:ba:3c:2d:
13:de:86:8e:d2:64:62:7b:83:b2:ec:de:52:a5:7c:
f7:7d:d6:e7:eb:d3:75:a6:89:d1:6f:31:35:bf:70:
3b:08:d5:03:cc:f8:28:51:8c:59:8f:9c:be:c3:b5:
b7:5a:7b:34:15:1c:f4:1f:db:17:58:d4:99:6c:4d:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CB:1C:46:F5:E6:88:D1:42:1D:EE:7E:6B:1D:24:52:44:46:A4:8E
X509v3 Authority Key Identifier:
keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c5:05:22:1f:c0:c8:62:88:7a:b8:62:5b:10:16:ab:8e:bb:
2d:23:cd:b9:3a:e9:0e:18:85:d2:bb:0c:86:4c:29:c2:31:f9:
37:a5:0f:76:cb:61:4f:08:62:b1:6f:ab:00:5d:e2:dc:72:7e:
dd:07:e6:40:cd:8e:5e:68:27:8a:35:b6:e7:1b:cd:89:30:27:
84:af:ca:0e:eb:f8:d1:93:79:0d:e9:8d:4f:c0:05:ff:f2:51:
90:1d:3a:8d:0c:f6:d1:c5:f6:da:4d:99:46:04:52:79:75:36:
a8:26:b3:aa:b1:d3:c0:30:3e:49:01:6e:b8:50:5b:1e:db:be:
81:52:ec:b5:57:99:0c:58:49:76:4b:86:59:fa:a7:22:a3:99:
a4:ac:a3:45:b9:aa:b7:98:2d:08:67:99:91:56:5d:c1:27:2a:
8c:4c:d4:05:1b:bd:fd:ed:9b:a6:dc:e2:01:2f:f6:68:44:b0:
04:a9:69:d0:49:61:5f:01:8f:3c:7b:f7:cb:79:66:36:ce:37:
09:f7:ac:ec:37:5f:af:71:29:05:45:73:78:1a:1a:2a:d1:35:
bf:cc:b2:3c:f8:bb:a0:7c:ae:34:b7:7d:52:9b:db:cb:f9:51:
18:08:fc:f4:56:81:3a:16:1d:d1:6d:9c:82:19:29:fb:aa:b9:
01:1f:c2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:16 2025 by rpki-client