Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: ow5ZAjmX3+eo0Rh0bx71oeTdum41/kzHSzg2dY1JYPs=
Subject key identifier: 45:BF:92:4D:FD:73:E5:79:1E:E3:94:BE:96:EB:C0:61:DD:10:42:8F
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 01987298D3D3F8728848FBEF35E1AEEA2330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 0298
Signing time: Mon 04 Aug 2025 01:01:14 +0000
Manifest this update: Mon 04 Aug 2025 01:01:14 +0000
Manifest next update: Tue 05 Aug 2025 01:01:14 +0000
Files and hashes: 1: EbZtq2coMU270JnZ4a-zaYQT_0Q.roa (hash: yU3RaYJSG7d5Cg9VqCAtXvTzjDsa0Gi9QQwBd19SnQo=)
2: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: INVWackHbp95pOBh+Zlq2Qq1lHt/NZs3uHcgyPEcPhQ=)
3: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
4: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:d3:d3:f8:72:88:48:fb:ef:35:e1:ae:ea:23:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Aug 4 01:01:14 2025 GMT
Not After : Aug 5 01:01:14 2025 GMT
Subject: CN=45bf924dfd73e5791ee394be96ebc061dd10428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:3d:93:85:57:cb:5e:d6:98:5f:aa:d0:dc:
78:ca:6d:5b:89:b8:5e:c1:bc:b7:97:c7:7e:16:72:
7c:1d:23:dc:8d:c0:64:05:d2:a7:f9:30:36:2a:3f:
1f:07:e2:ce:5b:95:cf:ce:33:07:77:9b:8d:1b:4e:
a6:25:13:5d:52:9c:60:ea:7f:aa:03:cf:b6:64:ff:
01:41:91:93:77:ea:14:f3:a7:6d:54:0f:0a:c9:58:
88:af:a6:90:c5:bf:19:60:74:2b:f1:6c:9e:71:63:
05:66:5d:e9:47:ca:58:f3:42:a4:f7:16:f6:57:e0:
d9:fc:bf:ee:c5:96:15:ba:c3:95:56:13:10:8e:8d:
46:6a:4c:ad:9c:3e:cc:b2:6a:45:43:f3:71:40:6e:
64:e2:19:3c:6e:1a:8b:89:27:a1:d0:e3:47:9d:12:
c6:a1:4b:a0:67:4b:d2:2f:82:44:e9:07:2b:ba:3b:
90:92:e2:38:f9:f0:dc:fb:f4:24:6c:da:b8:e6:3c:
5f:28:f6:58:54:8f:68:42:23:c7:6a:48:e3:e9:b6:
5d:af:61:5a:da:ae:d1:2f:47:ae:93:d0:8c:89:ed:
76:86:c5:93:a6:8d:22:6f:5e:01:bb:93:8d:40:ae:
53:ea:af:78:1f:f8:ec:9b:13:15:9a:42:f8:76:6e:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BF:92:4D:FD:73:E5:79:1E:E3:94:BE:96:EB:C0:61:DD:10:42:8F
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:eb:81:6c:f6:56:21:08:99:3b:ee:27:90:f4:19:36:f1:3b:
83:34:69:dd:eb:4a:7a:46:c7:d7:5b:30:6e:96:3f:95:ad:ce:
b7:8b:0f:53:52:fe:52:a1:59:ca:ad:b3:9b:a7:a0:0d:22:c8:
66:e0:47:d4:d2:65:ce:ef:06:ad:57:1d:94:5a:cc:05:74:0c:
6a:24:bd:23:27:ac:2a:de:cb:47:cf:34:1e:04:22:b0:7b:3e:
2f:d8:6d:9c:6b:eb:49:4f:59:43:41:e2:96:67:39:da:99:ab:
20:dd:e9:d6:3b:57:1c:ba:a6:0c:42:d1:b5:16:f1:4a:11:14:
0e:21:74:5b:3d:c1:f9:9a:eb:d9:cc:e1:28:c4:b5:34:8b:bd:
f4:7e:85:f0:c8:e3:78:9d:03:62:09:fb:c4:56:2d:ef:ef:49:
44:3e:e8:a8:38:d3:85:54:f8:b7:20:fd:64:7c:ad:b8:07:5f:
0b:72:1d:f6:b4:84:81:01:5b:b2:7e:99:19:66:3f:fe:b8:3f:
e4:f7:32:23:e5:a9:13:15:af:f3:dc:7a:1b:32:b0:3d:0c:f0:
8e:08:51:a6:3b:ae:f1:bf:01:95:d0:85:f3:15:f3:6f:ad:08:
fc:c1:15:7f:29:03:b2:8a:4b:b8:91:45:61:14:a5:8d:af:a8:
8b:54:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:03 2025 by rpki-client