Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: kDEO7KmVIdZ2hD1YAOExxFqanhTaddK4MkxJIuqfz5I=
Subject key identifier: 1C:0B:20:0C:68:45:B8:9C:60:01:1C:67:21:7A:62:94:61:9E:81:E8
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 0198895782B30F05435C793A44C9EB288E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 11:01:10 +0000
Manifest this update: Fri 08 Aug 2025 11:01:10 +0000
Manifest next update: Sat 09 Aug 2025 11:01:10 +0000
Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=)
2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: wPZo8rHd+/m5Ud1DZIY5Zo1cAREnoyhEVDKASwjVk6c=)
4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:82:b3:0f:05:43:5c:79:3a:44:c9:eb:28:8e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Aug 8 11:01:10 2025 GMT
Not After : Aug 9 11:01:10 2025 GMT
Subject: CN=1c0b200c6845b89c60011c67217a6294619e81e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:eb:88:95:1d:02:78:8e:e5:0a:c4:5c:5d:
01:71:9e:5d:21:87:c6:14:f5:5e:f0:81:09:5a:3a:
5c:18:71:32:e0:6f:4d:a7:cb:bf:09:dd:7f:78:d2:
28:9b:5e:24:ca:d8:f6:93:a2:b0:33:21:fa:4c:09:
16:d7:02:14:24:5e:b8:4d:c4:b1:40:0a:5b:91:38:
66:72:dc:f6:e3:b5:ff:19:4d:da:ac:ee:c1:81:b6:
b3:d4:9c:c1:40:3c:12:6f:38:f2:0d:bf:58:24:9f:
e0:bc:35:57:34:90:6f:1f:a3:62:6d:2b:57:7a:80:
57:14:78:3e:1d:f2:7f:1e:f6:72:e8:ea:ba:25:15:
63:74:b0:05:17:62:9d:62:22:19:c9:eb:f8:94:cf:
a2:fb:1f:c4:5e:ef:3a:8f:b1:41:e4:a0:72:7d:6c:
e9:25:28:01:8b:4b:cb:0e:84:0f:d8:09:b2:85:e3:
8e:26:29:9d:e3:01:40:7e:1d:24:8f:d9:d4:2f:da:
02:d1:97:c6:be:51:b6:5d:bf:ae:03:f4:0c:94:97:
b8:ff:20:13:9b:18:83:54:4c:9b:36:2c:d3:fa:d8:
7e:ea:44:da:0c:af:c1:99:87:b5:50:fd:01:c8:47:
37:3b:c3:5a:5c:6f:c7:f9:e9:57:ff:8a:df:f3:f4:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0B:20:0C:68:45:B8:9C:60:01:1C:67:21:7A:62:94:61:9E:81:E8
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:58:15:07:18:1e:51:71:55:52:77:a7:2e:23:22:46:c4:de:
bb:2a:6d:46:ab:7a:af:34:0e:54:c9:8f:b6:d3:6c:bd:8c:82:
04:d3:4d:e9:99:46:6f:3b:8f:96:5f:b2:09:24:32:bf:c3:ab:
00:16:e0:03:b7:63:71:33:8a:e6:40:5a:9e:6c:2a:2e:8b:f6:
7d:32:fa:2e:ed:f8:64:0d:a0:aa:be:76:33:de:95:a2:33:fb:
f7:4c:2b:cb:d7:4c:7c:2e:84:ff:84:af:eb:29:74:7d:96:6a:
11:fe:d5:bd:d1:d6:e6:f7:3c:31:a4:e0:57:b8:20:7d:29:f9:
30:96:76:54:7d:f1:03:a5:a7:22:11:24:56:5b:6a:4d:5a:7a:
d6:f9:51:b7:17:e0:91:8d:96:98:65:e1:85:88:48:61:a8:d3:
ba:3a:b1:5b:29:37:12:77:7c:8c:8b:41:4d:ae:ef:4b:a2:8a:
70:8c:74:ad:7b:f9:b6:5d:da:ff:4d:63:96:cd:c2:fc:f5:3d:
75:58:7c:f4:32:7b:f4:4c:81:80:59:43:ab:a7:d9:5f:88:2f:
9a:3d:f9:96:c5:2e:0d:60:64:ca:8d:1d:ff:aa:1a:67:7b:6c:
23:b2:6c:7c:a4:81:7d:99:d4:96:67:87:a9:77:09:b0:3f:11:
e6:f5:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:50 2025 by rpki-client