Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: W4a7NAjgmgu6o3Cj2L8gYTbnbnTkJvaUimU7PmO9oxo=
Subject key identifier: 36:CC:6C:B1:2E:AB:18:04:AD:D5:3B:BC:5D:A5:2D:87:A0:B7:BC:B7
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 01987374864089718CF91070CB0AAE01D634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 01E7
Signing time: Mon 04 Aug 2025 05:01:13 +0000
Manifest this update: Mon 04 Aug 2025 05:01:13 +0000
Manifest next update: Tue 05 Aug 2025 05:01:13 +0000
Files and hashes: 1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: Nnk1/Bh8pkKzL2wbsg1R61BS6B4197rocLHd38306UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:86:40:89:71:8c:f9:10:70:cb:0a:ae:01:d6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Aug 4 05:01:13 2025 GMT
Not After : Aug 5 05:01:13 2025 GMT
Subject: CN=36cc6cb12eab1804add53bbc5da52d87a0b7bcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:25:6f:bb:5d:7d:ed:47:63:cc:30:8a:bd:
ca:5d:a6:24:a3:ba:19:18:73:c1:38:58:7c:e6:e9:
de:24:84:ad:e2:e2:4b:94:e5:e6:d5:39:b7:8a:6e:
fa:8d:75:b6:32:14:bc:60:45:85:89:9d:e9:6f:dd:
cd:62:a0:41:55:8d:86:ea:f6:c4:98:59:a5:0f:0a:
9b:ac:b7:a1:57:27:89:13:2a:8e:79:42:c8:23:88:
13:36:00:aa:d2:88:06:de:b2:83:da:4e:08:14:54:
2d:71:cc:9f:25:a8:d6:c8:51:07:0f:3e:51:b5:9d:
31:53:26:b3:ef:7d:39:56:cb:1e:2f:9a:a0:ab:33:
33:94:8f:ab:2a:54:ee:94:8a:77:13:c5:be:06:01:
61:38:74:8c:29:90:47:6d:da:80:e7:98:65:91:59:
9d:c7:8d:94:a2:87:45:b1:6f:2e:d9:9c:61:bc:83:
c7:a6:5e:c9:d2:b0:98:3e:f4:66:72:ed:6d:9e:37:
6f:70:77:83:95:8c:99:d7:f7:f0:83:f0:91:b6:ac:
c2:d0:0d:0e:10:b7:5b:3c:5a:a9:d4:54:c9:ed:6b:
d4:1b:e4:98:f8:13:0e:25:e8:83:58:88:72:2c:d4:
c2:f0:69:65:de:ab:a8:fe:d9:8b:a5:52:e1:db:62:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CC:6C:B1:2E:AB:18:04:AD:D5:3B:BC:5D:A5:2D:87:A0:B7:BC:B7
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:59:8a:fa:e5:a0:a0:f9:39:67:aa:b7:b7:c6:4f:d2:1a:1e:
db:26:64:92:9b:5f:e6:7a:7a:94:1d:c0:0d:dc:cd:8d:b7:5c:
e3:93:c7:43:d2:ac:a1:f2:db:87:e7:0d:e0:e0:27:00:7f:1b:
ec:8d:6c:4b:14:71:8c:61:17:db:e1:a2:11:dc:f0:c1:f9:68:
bc:4e:d9:ce:9e:e6:c3:07:1a:15:f1:68:4e:9c:da:a4:4d:75:
ce:4c:b1:35:30:b6:17:98:bb:f2:a8:5f:34:35:01:ed:13:79:
6e:f8:14:19:1f:99:dd:cb:85:ed:f7:89:65:92:4f:85:1a:90:
e8:1b:6d:c8:08:c3:e4:93:49:ed:1a:dd:a6:63:56:49:49:c7:
ec:8e:2c:2c:fc:51:04:68:ba:24:96:3a:a0:be:92:0b:86:f5:
79:68:61:6e:6f:5b:66:7a:e5:11:5d:56:94:51:a1:09:4d:72:
bc:c9:3c:87:e0:a4:f0:3a:e4:ed:7c:4f:79:93:ce:2a:f6:22:
55:df:e0:9a:80:33:a5:57:d7:c8:6c:da:fc:f7:b7:b3:a8:79:
09:cb:68:34:2a:f9:99:82:3f:d3:33:01:a6:20:32:b4:96:fe:
c6:4c:0b:a8:69:3d:ac:fb:ff:95:f9:bf:e0:db:46:e2:ae:ba:
fa:81:13:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:39 2025 by rpki-client