Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: SHTqDY2N7EpjNVZJRFPfa2dQTKSU97Hc0BQMef39iTo=
Subject key identifier: 89:52:9C:65:E9:BC:D9:5C:65:0D:22:45:0C:F8:1A:FA:E9:55:FD:78
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 0198838C7628035D7B6DEDCE0364E20EF426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 08:01:17 +0000
Manifest this update: Thu 07 Aug 2025 08:01:17 +0000
Manifest next update: Fri 08 Aug 2025 08:01:17 +0000
Files and hashes: 1: L3VPH_zsfjbjwAwWmPKEb-EZRqg.roa (hash: UjjV+/8s9XVTqZqV/PGNgru/2pjUXQnn5HjnZe2AuZE=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: O8tmL8YZLtoki5OpPQj611l01L6dQtdXLFxBpbhd1Ls=)
3: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (hash: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:76:28:03:5d:7b:6d:ed:ce:03:64:e2:0e:f4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Aug 7 08:01:17 2025 GMT
Not After : Aug 8 08:01:17 2025 GMT
Subject: CN=89529c65e9bcd95c650d22450cf81afae955fd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:35:fe:04:d0:f3:a1:d4:48:a6:16:aa:1f:
1d:a8:e6:70:08:a5:30:47:0f:b9:a5:ba:cb:3f:33:
d4:7c:50:6b:2d:33:e2:2c:25:1b:8e:c6:05:b6:cc:
0f:4c:75:0b:83:90:16:2b:1c:ec:d7:8c:81:a8:34:
12:bc:62:0f:ff:91:65:37:a7:2b:a9:08:ea:14:19:
65:0c:ff:72:51:cc:91:d2:45:4b:f5:ae:ae:a7:77:
53:8b:9d:fe:44:be:09:82:d4:86:b6:b1:ec:01:c2:
4f:e8:10:2f:64:f9:73:78:ff:6e:67:36:ca:03:d8:
88:11:c9:04:19:0a:8d:d1:11:76:f5:e7:1a:69:f8:
93:ed:22:95:b3:b8:6b:7f:ad:e8:bb:45:9f:bd:40:
f5:06:b2:7e:cf:ea:85:23:bf:d0:27:d1:4e:af:dd:
7b:35:95:44:42:94:66:c6:ec:29:9c:46:95:d9:7e:
52:4b:5c:a1:08:4a:ca:f4:02:85:52:0d:9f:98:25:
b2:42:76:58:6d:c9:70:90:b6:b2:e9:4d:ff:70:29:
a9:f0:7b:26:b7:99:c8:7f:c5:00:85:7d:48:c6:91:
74:b6:10:27:9e:1d:ef:84:ce:ba:cb:31:5a:e0:3d:
a9:a5:7a:8c:8e:30:5b:54:65:ce:a7:12:bc:ab:c3:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:9C:65:E9:BC:D9:5C:65:0D:22:45:0C:F8:1A:FA:E9:55:FD:78
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5c:eb:c2:57:80:07:ee:b0:a4:1c:d8:8e:96:16:ea:3a:8f:
3c:34:cf:08:8e:eb:82:34:d9:1a:24:32:8c:0e:45:8a:d3:14:
98:11:4f:0c:8a:6d:82:2a:41:d6:69:90:04:e1:91:4a:29:d9:
ee:fd:af:85:08:d7:87:4e:64:d8:c5:91:f6:0b:c6:d7:a9:20:
ab:ec:92:49:6a:81:b7:c1:a9:8a:43:b4:98:fe:a8:a0:69:f2:
5a:90:2d:86:80:08:82:cd:b0:98:52:b2:62:a6:92:db:71:5d:
7a:10:7e:41:de:c0:9d:66:a9:fc:da:3a:c2:f4:ea:93:c9:5a:
37:80:e5:c3:73:15:8f:b6:a7:e9:48:c1:dd:95:41:2d:49:73:
7d:5f:10:72:10:1e:c0:0e:0e:86:92:d0:63:c7:f3:7b:dc:e2:
c0:af:46:b9:f1:cf:0b:20:e9:07:f4:a5:23:05:a6:e8:3a:d3:
2c:56:7a:82:69:84:7f:9f:c3:9e:9e:7b:04:9c:63:6f:b5:14:
ce:f6:e2:f9:e1:ff:e8:4e:20:21:5d:e1:b1:30:91:2c:75:ed:
a2:87:dd:ec:2f:24:02:b0:2d:9b:69:34:fe:dc:43:46:5c:c0:
cb:2a:0f:82:a2:18:a3:dc:e5:68:8e:16:47:2a:41:e4:74:cd:
4b:0f:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:59 2025 by rpki-client