Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: oAk7o1mZV2vJlVmLNI8eGDkiKQwCCUVsCeOwt7SwOwU=
Subject key identifier: D7:B1:7F:19:F5:F2:4D:5D:F7:09:A0:FF:81:6F:9C:91:26:4C:2E:6E
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 01988E7D8B0C253118A3EFCFEC0EA5BA1E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 0EC0
Signing time: Sat 09 Aug 2025 11:00:48 +0000
Manifest this update: Sat 09 Aug 2025 11:00:48 +0000
Manifest next update: Sun 10 Aug 2025 11:00:48 +0000
Files and hashes: 1: FGRnxc9C3d9faJa4e9X6S4cHjFA.roa (hash: d5SgFAeT21YMWMJqdCASd/9NKR53dDrqmG/NUaV6X8s=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: HMp00z4+THMUXBKBW0GmprWCh+wpkNfJ2kkpoQ04k94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:8b:0c:25:31:18:a3:ef:cf:ec:0e:a5:ba:1e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Aug 9 11:00:48 2025 GMT
Not After : Aug 10 11:00:48 2025 GMT
Subject: CN=d7b17f19f5f24d5df709a0ff816f9c91264c2e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:1c:8e:c1:f5:70:a4:9e:42:54:11:03:f2:
68:53:0d:1d:e4:b2:36:99:81:8b:e9:db:25:f3:f0:
8e:77:83:06:89:5e:8d:6c:a2:23:ab:26:46:b5:81:
b1:70:d9:cb:55:4f:4c:62:84:7e:d5:37:e1:67:5e:
a1:04:1a:f9:96:43:1a:fb:52:1c:03:1a:27:4f:e2:
84:61:de:82:53:69:02:fc:c9:60:2f:c2:2a:a4:7d:
24:d6:d4:d2:ca:13:2f:d4:11:72:93:90:53:4a:73:
37:c5:1d:a8:f4:ce:3d:e9:c1:db:e3:7f:98:ae:bb:
46:c7:36:1b:07:3f:61:28:e1:a9:f7:ec:90:0c:0e:
5d:97:13:53:dd:f5:e1:90:4f:a3:b6:7d:af:1b:4e:
fe:b6:59:79:9f:a4:8f:01:03:1b:58:39:06:36:9f:
d8:de:06:28:74:a7:4a:65:ee:5e:67:35:3f:5f:91:
97:df:9d:10:34:8d:99:f0:8b:a4:e6:cf:de:8d:cd:
3e:5f:7a:fe:cc:88:58:54:1a:7f:48:43:c7:0d:b5:
b8:fd:9d:9f:8e:77:40:59:26:1e:33:ed:0a:a6:fe:
f0:35:7d:b3:2d:61:be:89:ad:33:de:c3:0a:5e:c3:
08:04:60:8d:6c:eb:29:e5:a9:5e:c6:05:28:07:4c:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B1:7F:19:F5:F2:4D:5D:F7:09:A0:FF:81:6F:9C:91:26:4C:2E:6E
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:52:1b:e1:85:0f:93:ca:2b:7c:2a:29:6d:fe:98:ee:79:4d:
36:1f:93:89:e9:30:d9:e2:73:86:ad:b4:e7:e3:b4:05:ce:a8:
c0:06:84:16:e5:58:b2:1c:75:52:91:38:03:55:53:1d:3e:3c:
c5:97:fb:67:13:40:d9:4e:69:6d:b5:79:fa:8f:ae:23:5b:e6:
30:09:8d:51:f0:3a:e7:46:2f:c2:e0:40:2c:0b:4c:6d:6b:16:
12:6c:ca:b9:90:20:68:d5:d8:9d:58:9e:ed:4e:4e:b2:73:94:
e2:7c:63:6a:92:b1:8d:86:e8:3d:a1:6b:0b:5d:c0:8c:78:f8:
c3:d9:d3:74:84:4b:da:69:ae:c3:fb:4c:be:7d:1a:5e:c7:2e:
03:2f:99:78:c5:7d:26:10:9c:6e:01:a1:6b:33:0c:72:04:65:
98:22:66:0c:c7:b8:06:39:a0:1d:3c:3e:13:9a:d4:32:0e:aa:
5b:7a:e1:c3:1b:bf:67:c7:a8:e0:ae:e7:c9:4f:0a:1e:33:9c:
f7:98:35:bc:ff:b3:60:bd:6a:fd:e2:99:fe:1d:ad:e0:c8:b8:
19:01:14:a1:97:1e:ee:55:ae:50:e7:0c:0c:91:fc:8a:8b:9f:
64:05:4d:f9:5b:d9:12:9d:0a:40:c6:40:72:3f:de:d6:bb:6d:
d6:ca:14:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:59 2025 by rpki-client