Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier: xEU2+n6rh4bpFytuKeVPLMCq0Jf97UyEPgVr6hyPkAY=
Subject key identifier: 5A:69:BF:9C:40:29:C4:88:0B:B0:BE:17:AA:C4:AB:94:CD:BB:B5:09
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial: 019874BE422461111CA7A2F805BF826B29C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number: 12DA
Signing time: Mon 04 Aug 2025 11:01:22 +0000
Manifest this update: Mon 04 Aug 2025 11:01:22 +0000
Manifest next update: Tue 05 Aug 2025 11:01:22 +0000
Files and hashes: 1: BKO9_ka076C-tXU0qbN-UGwmJGI.roa (hash: XdjBZ6slflGj5L2hVm6yPejyKM1/cZtcRCLImvpU8/c=)
2: TQC_J_n_-TEcjtQ--Snxo_Bz6IQ.roa (hash: OYVJWqinUu1yhTH3sZjKq6EGQxrkbvI8drSvSE0FOvI=)
3: hJb28BPhkPKFBgqvGsU8_1tv0Q4.roa (hash: VXcAvS0yl0OmKbIx5rn61FhcJXudPrnwGtfqe8chNNI=)
4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: fOXhcKD3gbYky58rTdt915KiMXSdEIEe4d261Awcefw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:42:24:61:11:1c:a7:a2:f8:05:bf:82:6b:29:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Validity
Not Before: Aug 4 11:01:22 2025 GMT
Not After : Aug 5 11:01:22 2025 GMT
Subject: CN=5a69bf9c4029c4880bb0be17aac4ab94cdbbb509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:97:73:e3:42:5f:37:dc:cd:ed:46:6a:1b:
1a:4d:10:b2:ef:be:64:a7:f6:cc:08:7f:e4:5e:11:
35:7c:d0:59:f3:19:5d:af:31:c1:ab:91:36:72:d2:
6f:e3:1a:a1:95:7d:ae:f5:a3:c8:09:c4:bb:de:37:
a0:de:c6:ab:dc:a4:58:43:25:11:15:05:84:86:6f:
36:d4:ed:85:55:eb:24:6b:07:f2:a3:23:03:99:d7:
3d:41:bd:05:91:3d:9f:69:95:77:96:d9:06:b7:ff:
30:88:ac:62:39:ad:7b:8f:32:e0:f4:d2:f6:b8:64:
e4:1f:cc:62:74:bf:b5:e9:bb:2d:2f:e9:47:b0:25:
a3:3f:69:76:f4:d7:e5:2f:24:b9:a4:a8:e0:48:e9:
ef:16:98:d0:37:80:f7:0f:c0:2c:24:9a:e9:de:1b:
5a:c3:70:9b:fd:65:0f:aa:da:d9:e4:45:c1:0b:3f:
19:63:9b:bd:bc:85:aa:57:a8:b4:47:32:66:69:d1:
c9:d1:81:48:9a:d2:7c:cb:06:95:47:6f:e5:3b:b1:
24:de:45:ca:b7:89:59:36:38:e3:9b:fd:33:6a:4d:
76:2c:7e:e7:05:04:a2:45:d9:ab:c3:82:89:66:7d:
eb:f7:13:c1:7c:64:f7:66:2f:11:9d:5e:04:6d:ff:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:69:BF:9C:40:29:C4:88:0B:B0:BE:17:AA:C4:AB:94:CD:BB:B5:09
X509v3 Authority Key Identifier:
keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7b:ce:5c:f4:76:97:d7:4c:af:bd:4c:85:b6:3a:5e:55:de:
17:6a:64:d4:bc:90:bd:24:87:84:ce:87:27:41:9b:05:39:a8:
af:c5:45:89:16:96:23:7e:ae:bb:25:3d:55:f6:68:48:81:aa:
15:5c:5a:0f:f4:bb:c7:23:c9:a9:2b:3f:21:c4:41:2d:0d:fc:
6f:31:f5:b1:f6:a3:7f:27:3d:2c:08:dd:af:37:4b:7f:9d:ee:
76:73:59:ff:ac:d9:13:31:6e:64:61:99:d6:38:22:ff:d8:c6:
f3:b1:e6:4c:00:02:6b:9b:6e:2c:00:c8:e1:a3:06:54:8c:6b:
08:03:84:f4:37:a8:88:37:46:20:f9:8e:12:3d:3f:0a:5a:ed:
07:4c:8a:8d:83:c2:3b:e8:02:94:ea:2a:be:fe:85:13:56:6e:
02:2e:09:15:12:32:00:2d:95:c1:9a:66:f9:de:4c:5c:16:da:
e6:0c:d5:8a:ad:91:7b:36:12:0d:19:ba:ea:37:2a:f8:f7:eb:
16:d3:c7:9a:67:de:b3:cd:a7:c6:41:0b:25:0a:2c:92:52:af:
3b:e1:cb:f5:60:80:68:77:9f:cc:6d:4e:b9:36:f5:75:b7:56:
3a:76:7c:84:96:52:09:9a:0b:8f:2a:cf:14:81:5b:61:c5:ac:
46:4d:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:25 2025 by rpki-client