Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: td88Cq98Ouqga4GjcWeGRROZvBOh/P3q5BzbZf34rX4=
Subject key identifier: 8B:64:58:F0:58:FA:75:DD:E7:94:9A:78:F0:B5:D5:D9:FE:FB:ED:ED
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 01987CE4F34FD0923446DC85519CDCF2CB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 11DC
Signing time: Wed 06 Aug 2025 01:00:35 +0000
Manifest this update: Wed 06 Aug 2025 01:00:35 +0000
Manifest next update: Thu 07 Aug 2025 01:00:35 +0000
Files and hashes: 1: Vk-tGAmV5TZofFrkU8NsN6eg260.roa (hash: n+OnJ5MdOwQk0fYvXBBSZ9AYECq0X6y6UCleUqQHa9c=)
2: epViL3MVi9bWXcuzA24cAMVu98I.roa (hash: SrcEH3xgjkVSJRtnVeoxwKETukrMGUr8rXBzqe4u9C8=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: 14lViyp77TObfP4/hm84UHikOlfzyOEjkGtgaC7OHno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e4:f3:4f:d0:92:34:46:dc:85:51:9c:dc:f2:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Aug 6 01:00:35 2025 GMT
Not After : Aug 7 01:00:35 2025 GMT
Subject: CN=8b6458f058fa75dde7949a78f0b5d5d9fefbeded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:9f:ac:ee:b9:d4:f2:0d:5e:4f:d9:55:27:
dc:df:ed:bf:f1:40:b1:68:38:18:11:15:66:da:4f:
c6:52:17:1c:b9:3a:c0:31:64:c1:55:bb:fc:01:47:
8b:49:f4:e2:20:aa:dc:c0:72:89:b8:3e:54:84:59:
28:88:3d:28:8c:ce:48:a8:f9:4d:ae:e4:1a:8e:ad:
32:dc:b6:17:5c:b2:65:0a:fa:91:af:00:57:aa:a3:
62:ba:72:2c:4d:74:bb:1f:bf:17:4a:b1:ec:1b:d0:
84:2b:ce:36:fb:12:7d:99:03:2c:40:16:ea:40:f6:
2c:c5:d2:77:a2:99:c6:b4:ac:68:51:fd:ea:86:71:
db:db:d2:17:8f:08:45:2b:cc:23:88:25:7b:9f:4d:
aa:18:6f:6b:e7:9e:8d:d3:c2:8f:be:22:f7:5a:fa:
bd:47:9b:de:2b:dd:08:77:57:70:c0:e7:79:fe:56:
30:6b:8e:e5:65:97:80:fc:e0:0a:25:80:45:3e:73:
26:00:1d:e9:f6:cb:8c:6f:da:d5:e9:3a:ea:8b:60:
ce:7e:7c:63:03:25:fb:e2:fc:10:64:1a:aa:a1:d0:
d1:37:6b:38:20:99:1f:bd:eb:9e:47:ff:13:11:70:
0a:bf:e7:dc:07:64:1e:f8:63:a2:59:85:e2:7f:29:
8d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:64:58:F0:58:FA:75:DD:E7:94:9A:78:F0:B5:D5:D9:FE:FB:ED:ED
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6d:f9:4d:dd:6a:16:ef:13:f1:d1:42:00:7d:0c:c2:ff:95:
3d:8f:e7:e2:57:71:9f:5c:8d:a8:a7:83:0c:c7:7a:52:67:14:
eb:e6:35:54:f4:66:a3:cd:ce:ee:9c:06:a3:1e:9d:37:50:e8:
03:12:c8:51:07:3e:85:7f:50:bc:2c:3c:bb:59:f0:06:cf:1c:
13:21:ce:19:06:51:7e:16:d9:0a:99:bb:07:2f:40:6f:5f:f1:
0c:ae:4d:54:ef:06:3e:db:36:03:0b:d1:62:60:64:c5:4c:ac:
a1:a4:01:86:bf:31:4a:a3:eb:a9:ba:b6:65:76:e7:7a:78:07:
48:79:f7:5b:c9:48:a7:bc:81:85:a1:7a:6a:6a:27:e6:fb:c8:
e7:ad:35:d9:f0:11:9a:46:74:15:a4:a3:60:f8:3a:d6:c0:f6:
87:6c:f8:e0:25:d9:4d:a1:b7:f3:0d:9f:89:e2:28:57:b8:8b:
1a:75:25:d1:2a:08:a7:50:5b:3a:d5:8e:84:0f:64:53:c1:1d:
ec:49:0e:5c:5c:c8:f7:ef:50:66:94:57:10:50:8e:06:bb:a0:
f6:b1:20:7d:1c:7e:a3:25:4c:3e:6e:12:fa:f3:b5:6a:87:00:
99:8b:75:39:bf:1f:67:56:4e:5f:06:f9:10:17:a9:a4:e9:dd:
40:4c:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:16 2025 by rpki-client