Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: EyfXAmoCQbw1X24h4/K9sJQ/BhaL4laAz0NDW53Useg=
Subject key identifier: BD:C4:7F:6D:FA:30:5D:FF:23:8A:08:A0:05:15:12:9B:AF:4B:B0:38
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 01987DC11F0979E9FCA8BDC17662111046D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 04BE
Signing time: Wed 06 Aug 2025 05:01:05 +0000
Manifest this update: Wed 06 Aug 2025 05:01:05 +0000
Manifest next update: Thu 07 Aug 2025 05:01:05 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: ItiZJRf2UbKzzNLTcI7XnePgKfRadqKzhhJjvuJdWlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:1f:09:79:e9:fc:a8:bd:c1:76:62:11:10:46:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Aug 6 05:01:05 2025 GMT
Not After : Aug 7 05:01:05 2025 GMT
Subject: CN=bdc47f6dfa305dff238a08a00515129baf4bb038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:fd:9f:41:54:cb:2a:c8:88:10:e5:ba:f4:
f9:1e:b1:11:49:f0:0a:f6:71:75:b0:42:11:f9:17:
2d:ac:6a:d9:a5:98:93:ba:2c:f9:bb:50:1e:68:30:
00:1f:53:4d:84:f3:1d:c4:44:8e:59:f1:be:11:7c:
2b:91:27:58:2f:4e:2e:b4:99:23:71:60:da:89:84:
4c:db:bb:46:5c:6c:1d:f8:0c:61:48:06:db:37:ba:
09:c5:ea:d3:49:e2:bb:ee:71:6b:58:ac:62:83:ad:
2d:ce:9a:9b:18:ff:43:ed:b5:55:64:57:a8:bc:1c:
e7:6b:29:c2:fd:94:53:59:4f:04:bc:33:c0:6f:aa:
b4:b5:b1:94:cd:1b:d2:41:40:96:57:8e:d1:ca:4d:
c1:3e:4d:a9:0b:50:c1:e1:38:b5:22:19:7f:01:6d:
64:2e:a7:18:d7:a7:fd:2c:58:15:6f:c0:c9:8b:7e:
79:77:71:b1:5d:bd:2b:ff:46:c8:2e:38:47:2a:f2:
81:03:01:06:8b:9b:c8:72:4d:a0:25:75:a8:87:39:
39:cc:b7:32:3e:b2:1f:cd:39:3e:00:2c:6b:98:e6:
19:02:af:a4:a2:d0:5a:ed:59:26:d6:67:e2:86:b4:
21:88:a5:5e:4a:67:4a:b0:2c:0f:cf:6b:66:4b:87:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:7F:6D:FA:30:5D:FF:23:8A:08:A0:05:15:12:9B:AF:4B:B0:38
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0a:6a:57:38:29:5b:05:0e:33:a9:2f:42:d5:41:ac:0b:21:
51:46:8e:5d:16:d5:32:88:10:77:44:6f:7d:65:6b:52:d8:22:
1a:f9:af:f7:45:61:f4:48:ed:f3:73:6f:96:72:75:d2:bf:d2:
2c:c0:ea:03:17:2e:51:75:02:25:69:db:86:25:ec:32:a1:49:
ea:b2:27:7b:b6:51:ed:bb:ed:86:14:eb:6b:94:02:da:96:ea:
cd:26:a7:80:9a:53:e1:73:ce:6c:c0:8b:2f:ce:13:52:e2:aa:
ce:c9:59:13:15:d0:80:aa:b2:5d:7d:91:20:7e:52:46:57:55:
b1:a6:cf:bb:14:d0:c1:40:1b:a7:13:ec:58:a0:a5:16:72:f5:
7e:bc:84:81:de:8a:ad:44:21:c1:a5:39:dc:49:12:82:de:59:
d2:b1:74:d6:5e:44:3b:9b:29:1a:da:cd:fd:f3:ec:db:d6:51:
a2:16:3b:42:3d:a2:98:9e:e1:3c:5f:ef:52:5f:17:f7:b1:9d:
5f:fc:c9:1b:e9:db:4d:4d:cd:57:a4:98:c4:19:c5:f5:67:d5:
cf:9d:a0:76:fd:d1:d3:f8:8b:67:8d:b6:b9:40:2f:e6:4d:32:
ee:b1:7f:83:15:84:03:a4:de:ab:ae:c9:3a:36:48:cb:96:0c:
83:d6:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:28 2025 by rpki-client