Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: qAiCnei2e0MVYUEdnhQL4ek2OtABjhdtvec8YUjh7sw=
Subject key identifier: CB:88:6F:AE:8B:1A:7F:EA:D9:2B:49:42:DD:54:89:2A:28:4D:24:69
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 0198873200F87126FBE7FD9EA867DAA4419E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 01:00:57 +0000
Manifest this update: Fri 08 Aug 2025 01:00:57 +0000
Manifest next update: Sat 09 Aug 2025 01:00:57 +0000
Files and hashes: 1: 3hcLMvc25IMPdhmKQEHCMZTqIjs.roa (hash: SEybTz+/cd8wiIccvdujur1jHcT09AAEthIXnDu/BtA=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: 6UgE38qEZAK37R9tNLeyzqK3b57Y6YVuj2bqbdtJVTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:00:f8:71:26:fb:e7:fd:9e:a8:67:da:a4:41:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Aug 8 01:00:57 2025 GMT
Not After : Aug 9 01:00:57 2025 GMT
Subject: CN=cb886fae8b1a7fead92b4942dd54892a284d2469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:d5:1a:1e:06:af:f5:c3:7f:0e:98:37:e9:
5f:26:70:96:dc:71:b1:a7:0b:23:f4:57:fd:4d:75:
ec:21:d5:c9:02:fc:b5:44:a7:e7:4a:b8:19:bb:24:
31:fb:6d:53:b5:97:dc:a5:1c:f8:71:a6:b2:7d:fe:
05:b5:82:c5:4a:e3:ee:d2:14:9e:b4:86:18:44:b5:
ff:f6:ae:62:91:46:f9:2d:ee:14:e1:83:66:a0:28:
44:39:28:51:9e:07:2f:d3:de:c7:05:b5:9c:92:4b:
00:0a:15:11:80:8a:9f:a6:59:fd:ba:ed:20:d1:88:
d8:30:6d:29:95:70:d5:3e:21:0d:44:54:20:4a:2e:
2a:f8:99:4d:a4:03:74:9c:c4:6a:8b:ca:df:08:1a:
9d:04:ea:8e:80:91:a8:75:75:44:7e:2f:9f:2e:c4:
50:57:15:ba:94:d3:b7:bf:92:a8:24:6e:70:c9:80:
2d:5a:3b:3f:76:70:01:4a:6c:3f:90:8e:26:18:e6:
67:cc:be:f8:70:1a:07:c0:d7:20:8a:37:80:fb:8b:
06:09:ae:18:ac:cc:28:3c:c6:23:13:f0:4b:bd:fd:
e8:1e:a9:5a:02:a2:43:64:3b:db:0a:60:ab:3b:4e:
69:fd:86:56:f3:a4:fa:8e:e3:ad:68:52:4e:3a:b5:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:6F:AE:8B:1A:7F:EA:D9:2B:49:42:DD:54:89:2A:28:4D:24:69
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e5:a3:48:cc:d9:9b:a1:a1:1e:0b:0f:73:58:c7:22:95:92:
95:be:1e:0e:c2:b8:53:19:c5:36:6a:38:a8:75:0a:75:91:e9:
0c:cb:35:3c:fb:7f:e8:d0:d7:24:72:5a:7c:dd:20:41:ff:1b:
33:67:e6:cb:82:c8:28:a1:4d:9a:62:28:e5:b6:8e:7b:96:26:
66:45:a6:f8:66:5a:fc:a1:6e:e7:e4:0f:87:66:8a:00:4e:19:
c1:4a:4d:49:32:ab:0a:98:02:cb:0e:d9:43:5e:e9:21:11:8b:
5f:d9:aa:56:18:89:91:ea:22:50:54:2f:c0:fa:ac:92:3b:83:
a4:38:db:09:e0:8d:f9:32:6c:8e:bd:9e:1e:5e:45:72:f9:e2:
64:d6:bc:e9:27:32:1f:c8:99:74:43:de:dd:06:41:ea:54:ac:
ee:db:a4:65:33:68:fc:cf:67:de:e5:35:ad:6a:f9:4e:ac:41:
39:b1:e2:77:a7:e2:8c:a0:23:6e:f6:48:ea:10:c8:e6:6e:07:
69:bf:20:f8:11:76:ed:28:80:82:68:d6:67:83:13:d1:42:17:
81:19:e0:d2:59:f5:f9:6c:ed:41:b2:ae:f7:18:d0:f2:23:f4:
7a:dc:a7:ed:5c:28:6d:06:dc:e3:47:85:96:1f:4e:74:ea:10:
16:17:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:30 2025 by rpki-client