Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: ShLGUNz/XDFUsioaiPF9gHUFfilz3EqMDScZCnvxO3k=
Subject key identifier: CF:0A:5B:FC:72:FD:E3:AB:4E:12:37:A4:3A:03:30:3C:6B:DE:B7:0A
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 0198857AEEABF999699711412C5501A6FB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 17:01:22 +0000
Manifest this update: Thu 07 Aug 2025 17:01:22 +0000
Manifest next update: Fri 08 Aug 2025 17:01:22 +0000
Files and hashes: 1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: 89NrN2vKEVCjpB1lMvzTYtzwXIQFYJH86etFgQyJOx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:ee:ab:f9:99:69:97:11:41:2c:55:01:a6:fb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Aug 7 17:01:22 2025 GMT
Not After : Aug 8 17:01:22 2025 GMT
Subject: CN=cf0a5bfc72fde3ab4e1237a43a03303c6bdeb70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:00:ac:b3:4b:78:a5:0f:a1:c9:f6:26:ce:
7a:c7:c1:12:c2:b1:71:ae:44:f2:9c:8d:75:0f:cf:
3a:ea:d3:6f:1b:03:c2:cd:da:b1:1d:35:fb:a5:54:
11:7e:6f:5f:5a:71:75:d7:93:6e:0e:84:c1:4f:45:
4d:25:d9:6b:11:97:92:b0:01:0a:a8:d6:11:9d:d6:
ef:9a:71:ad:ac:47:53:29:72:2e:19:d0:4b:ba:ef:
c3:99:e5:18:db:6f:73:00:7e:b9:4d:d1:d0:87:f7:
24:3c:e8:62:1e:25:fa:64:be:7f:8d:f0:46:c4:f7:
eb:5e:f6:ca:2e:04:d4:6e:f1:9c:75:e3:d4:b9:1e:
b8:2e:29:6c:8b:24:8c:e1:76:7b:23:f7:13:47:78:
2c:20:89:47:b9:cf:dd:a2:e2:20:75:30:b6:10:65:
07:60:c9:92:7c:5c:61:de:5f:ff:1a:a8:68:46:e6:
15:af:f8:6a:a3:67:90:0e:d2:6c:63:ff:c7:a5:7e:
41:12:a0:22:7c:49:e4:aa:53:a4:f5:1a:3d:bd:44:
dd:ec:4f:04:a4:27:62:ba:ee:3a:32:25:22:1c:04:
17:4f:8d:0c:37:a3:61:69:2c:97:55:6f:9d:11:5a:
43:d8:6e:29:67:26:e8:ca:36:14:c8:7e:87:53:5b:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0A:5B:FC:72:FD:E3:AB:4E:12:37:A4:3A:03:30:3C:6B:DE:B7:0A
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f4:21:b6:5b:db:07:3b:c9:21:e9:61:52:b6:3c:77:b8:6f:
c5:99:0b:bc:d7:13:e3:23:d6:4f:20:d0:52:39:02:b6:50:92:
c4:6e:99:63:52:e3:59:38:f9:84:73:1c:53:5d:d5:e6:bb:5a:
27:ad:60:72:a5:68:46:1a:19:01:76:c2:1e:e2:d1:8c:56:5a:
11:0d:d9:06:50:14:38:7a:5b:28:7c:13:1e:e4:3c:21:4b:47:
87:71:17:34:7d:ef:cd:c2:78:f0:29:b0:50:b5:dd:5c:e6:10:
7a:ca:4f:b2:38:e8:66:ec:c0:04:79:62:4b:4a:06:cd:72:89:
c6:c4:be:6a:41:d4:64:65:22:90:06:5f:6f:d2:03:ae:7b:d7:
d1:08:ea:3a:25:b9:4a:8c:5e:45:05:5e:15:4a:00:62:c2:71:
43:44:66:3e:4c:d3:19:a7:f6:a0:55:fc:29:a9:26:50:d5:2d:
f4:32:15:6b:67:9d:d5:31:db:a1:30:f4:01:a8:a9:8b:0d:18:
d5:6c:51:50:d5:97:d0:83:9a:bc:6e:a6:d7:48:1d:45:a5:59:
f2:99:39:9f:b2:cb:96:22:70:6b:2d:82:9a:72:0c:30:99:8c:
f5:1e:e3:5a:b0:37:7e:07:bc:3e:a0:e9:d6:8c:58:58:57:95:
6f:78:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:34:44 2025 by rpki-client