Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: 3KsK6Ktlb2X3mvLPEBj5SXLDBPzUXb/sASzQjxmED/0=
Subject key identifier: 5A:5B:F8:01:33:D2:2A:CB:90:A3:5C:0D:40:70:72:56:D0:90:BE:22
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 01987CE4FFCB41734717D8D326ABDAD5DF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 0DF7
Signing time: Wed 06 Aug 2025 01:00:39 +0000
Manifest this update: Wed 06 Aug 2025 01:00:39 +0000
Manifest next update: Thu 07 Aug 2025 01:00:39 +0000
Files and hashes: 1: LxU6tlx0NvY-QjdCp11SSrIBGxQ.roa (hash: 4y0W42qWUeJANjUJDiVjV2lnQQegZOOleaVcw17TyRw=)
2: o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa (hash: avmrJ2rsXtwjFy7tu4gv+fivfWYGTorP5jQUfY03fLE=)
3: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: pvXJB8TvQh/uK9Ed3yonWZjbK8wRcjTZHqhoooj52lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e4:ff:cb:41:73:47:17:d8:d3:26:ab:da:d5:df:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Aug 6 01:00:39 2025 GMT
Not After : Aug 7 01:00:39 2025 GMT
Subject: CN=5a5bf80133d22acb90a35c0d40707256d090be22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:a0:2b:09:af:1f:b6:7b:30:1f:1d:06:ba:
d3:90:67:7d:14:66:f4:79:ec:fa:28:78:75:0c:b6:
d4:18:fe:ed:9a:09:e2:9b:5d:c1:57:66:fc:24:d8:
ba:b4:60:06:17:66:56:b9:35:63:1e:7c:6a:92:70:
4e:2f:16:8a:84:6c:c3:dc:0f:c4:9f:1e:10:d6:b5:
b7:0c:4a:86:90:06:a3:f2:87:b4:d6:a0:73:9d:23:
52:e1:53:06:b7:a5:97:e9:78:e1:d4:53:1f:65:27:
dc:31:95:06:9d:46:f4:f2:be:12:16:d7:0e:56:e4:
5c:9d:ca:b1:f8:34:6b:c8:cf:8e:89:33:cc:26:e1:
20:7f:9f:a4:58:23:af:02:d3:25:ba:ae:36:42:a8:
15:88:af:a8:dd:3d:36:80:ab:7f:4d:dc:40:1b:23:
a3:5c:0d:c4:d7:39:75:cc:5c:b1:3d:cb:7d:7c:74:
07:1f:89:1d:75:c1:4f:4b:97:e1:3c:bd:1d:a1:50:
ca:ff:6d:3e:c6:7e:28:7f:1e:a6:7f:18:b6:b8:c3:
19:dd:25:ac:e3:63:50:1a:87:ca:88:c7:02:ed:a6:
9e:dd:df:7c:34:96:98:14:be:25:f6:18:ea:15:0a:
84:7a:85:05:ea:2a:af:be:1c:ef:20:ec:45:be:4c:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5B:F8:01:33:D2:2A:CB:90:A3:5C:0D:40:70:72:56:D0:90:BE:22
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9a:03:0f:2c:a7:ec:25:82:df:1d:e4:31:72:7b:d3:1b:08:
82:73:a7:67:20:2e:05:d7:16:7a:76:6d:43:29:db:6c:32:87:
02:46:cd:c5:0b:12:30:2a:38:2b:3a:c1:75:cd:a0:0e:c8:a4:
d1:c8:8b:8b:aa:32:97:77:97:58:a7:60:01:fa:2a:84:8b:8e:
88:6a:06:47:c4:32:c4:66:84:86:26:88:d4:e3:8d:91:66:fd:
e2:48:89:2f:13:8c:92:f8:ad:d9:c3:a5:01:68:c8:e8:4c:37:
be:f3:71:e4:db:d0:5b:4b:f2:63:14:2c:12:21:6b:83:f5:f5:
2e:d6:ae:dc:35:2a:c0:b5:00:30:d4:02:1a:b6:3c:ab:4e:ba:
c8:f8:06:eb:82:d7:a8:86:0c:b0:46:b9:1e:cc:7d:e1:84:02:
14:6d:19:24:e1:96:4a:7f:9f:ef:4b:7e:52:09:a5:13:d9:87:
1e:7d:b1:8b:38:38:ca:b9:5c:23:f7:1d:0b:d0:7f:84:d3:b1:
01:df:13:31:c9:a7:78:b0:35:1e:f3:4b:e1:ef:03:50:fb:de:
b8:c6:dd:13:79:db:b1:6f:15:93:02:42:c0:83:cd:99:69:47:
53:97:20:1d:86:92:27:03:4f:e7:bf:fc:0e:0e:0f:f6:19:11:
06:01:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:54 2025 by rpki-client