Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: HrPCrcUEHvg9tlLCUw4KCvHrJa0tnVLJGP3Zh7DRgKs=
Subject key identifier: 5E:15:99:9C:96:BE:3B:81:76:A2:29:6D:A0:77:39:3B:A9:8C:3E:0E
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 019873E2834BAFF701374707FA45B122E659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 0FF3
Signing time: Mon 04 Aug 2025 07:01:21 +0000
Manifest this update: Mon 04 Aug 2025 07:01:21 +0000
Manifest next update: Tue 05 Aug 2025 07:01:21 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: fdkqqqHrpNrUlaYBsrmMlQQkeJf5mjWz800gL5L3iUM=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:83:4b:af:f7:01:37:47:07:fa:45:b1:22:e6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Aug 4 07:01:21 2025 GMT
Not After : Aug 5 07:01:21 2025 GMT
Subject: CN=5e15999c96be3b8176a2296da077393ba98c3e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ef:a4:a2:ba:be:e8:de:b5:2b:ff:ac:0f:31:
9d:35:03:3f:fe:af:7c:5a:f0:c1:77:64:55:fe:a3:
c0:e0:d5:60:6f:fc:0a:f5:e7:df:0f:1b:10:1d:51:
10:05:7c:71:6d:22:02:81:8a:cc:ba:ad:75:6d:92:
6d:da:8b:33:fa:be:6a:f9:92:1a:1e:f8:36:ed:e7:
40:bb:ee:7d:94:cc:1e:2d:68:88:ad:e5:24:1a:63:
d5:65:d7:6d:23:dc:2d:f0:a8:90:71:be:ee:7e:19:
c5:1c:f4:e7:e4:61:34:ca:9f:e5:22:d8:73:6c:77:
31:cd:46:7d:cd:93:03:7a:26:d3:47:6c:90:15:99:
73:bb:54:53:b5:fa:d4:09:10:d3:f8:53:86:8a:b2:
dc:89:14:cd:86:75:86:73:04:05:a2:1f:8c:11:33:
cf:19:97:e0:c3:c6:17:40:d0:c8:58:6a:8b:e2:45:
2c:9e:c8:2d:23:0a:08:a5:52:3f:f7:cc:59:e3:9e:
08:a6:ad:fe:08:00:ee:f8:52:2e:c3:35:c4:85:61:
85:0b:4e:2d:10:97:c4:fc:59:43:87:35:fe:74:d2:
ad:52:a9:07:ba:bc:67:a4:3a:83:27:db:37:ff:45:
d0:eb:35:04:75:76:ac:94:65:73:73:48:e9:e4:67:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:15:99:9C:96:BE:3B:81:76:A2:29:6D:A0:77:39:3B:A9:8C:3E:0E
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c2:8d:32:19:70:25:5a:b2:75:99:41:48:e4:71:60:ec:23:
79:6b:da:b7:4b:2f:49:0e:80:e0:bd:fa:0d:f4:07:d0:15:aa:
29:d9:16:5b:a4:40:11:5b:ee:ef:18:21:49:d9:c1:3e:5a:c1:
2a:d1:f9:fc:e2:47:67:9c:be:ef:a7:8c:f2:ff:4f:e2:e4:a3:
b2:72:72:3b:4b:f4:84:76:b1:21:a9:d5:de:61:51:e2:ce:13:
8c:7c:e5:4f:ef:c4:32:fe:37:a8:56:1d:fc:09:5d:7c:d4:44:
89:a8:aa:fe:75:57:96:85:ed:7f:a2:af:26:1a:bb:62:7a:b4:
0a:93:b7:8e:47:7b:64:da:52:cd:b2:f1:32:6f:a0:b0:b4:99:
c4:83:b5:72:ed:fd:7f:71:9d:46:ac:9f:34:d9:1a:fd:cd:f7:
3b:c4:b8:2c:61:a2:e9:38:52:74:2e:0f:1a:23:61:2d:12:bd:
9a:99:de:93:cb:94:0d:88:66:6d:20:dc:a0:f1:d9:98:46:37:
00:ee:67:f8:24:81:52:ec:64:e5:c8:08:a0:ba:fa:9e:37:34:
99:ab:2c:17:bb:fb:fd:0f:f1:49:1b:b7:5e:86:01:e8:51:6b:
e6:b3:a4:45:6e:a3:8f:66:cc:fe:74:6f:6b:13:5e:21:87:a0:
9f:ed:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:03 2025 by rpki-client