Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier: 21KUHm52i9QhF8ZNjrhAj+cU3yXBi4h+2cmF7FFb6q4=
Subject key identifier: FF:09:FF:94:10:F2:4A:A7:3E:15:38:C7:91:3D:34:A2:1A:D3:41:FE
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 019894B894965BA16BD41636C226FC2EF59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number: DD
Signing time: Sun 10 Aug 2025 16:03:01 +0000
Manifest this update: Sun 10 Aug 2025 16:03:01 +0000
Manifest next update: Mon 11 Aug 2025 16:03:01 +0000
Files and hashes: 1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=)
2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: grGRfqa4rDCjpwVxrqkEIDrbL8lC+o/cXoV5b88lh4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:94:96:5b:a1:6b:d4:16:36:c2:26:fc:2e:f5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Aug 10 16:03:01 2025 GMT
Not After : Aug 11 16:03:01 2025 GMT
Subject: CN=ff09ff9410f24aa73e1538c7913d34a21ad341fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:3e:86:b3:27:b2:f2:7c:30:51:0a:09:1e:
04:3b:53:fd:4a:92:fd:a9:c0:be:c0:d5:35:22:7d:
49:20:19:c4:32:9d:a9:6d:fb:b9:d0:a1:09:ef:41:
09:1f:6d:3c:c8:75:81:4e:b9:20:a8:5c:5a:f5:fe:
4d:77:dc:98:09:27:94:3c:c0:44:4a:9c:08:79:0f:
e5:b5:7e:0b:ec:0e:33:68:27:84:aa:34:1c:8d:36:
7c:d2:87:8e:33:cf:3b:a4:30:c4:0e:10:9f:0b:7c:
57:8d:98:72:c1:4e:9e:2a:ac:18:3e:fc:fc:1d:24:
ed:4b:65:f7:d5:b1:64:6d:5e:af:61:02:24:f7:7e:
75:ee:41:10:1d:e3:ab:a5:70:d0:3c:24:41:8f:4a:
ee:f0:1a:f2:4e:e7:c9:c7:de:42:df:84:00:b2:70:
fc:b8:2a:14:60:a2:e2:61:0c:81:ba:72:a0:ca:6a:
04:d7:00:15:67:e4:86:b8:d5:b7:6f:79:55:92:b5:
76:9b:da:74:39:73:01:90:b3:91:66:bc:f2:7c:23:
34:4c:d5:44:a4:18:99:f1:e1:ed:c2:f5:b4:64:75:
6f:15:37:85:59:91:1e:14:92:a9:31:17:99:2b:09:
b1:18:ed:61:82:9f:2a:4c:4e:ac:58:a8:10:f5:6b:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:09:FF:94:10:F2:4A:A7:3E:15:38:C7:91:3D:34:A2:1A:D3:41:FE
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1a:9b:31:f2:8b:3c:30:55:0c:8c:f6:93:55:a8:06:92:93:
a9:0b:9b:fb:c7:7d:01:4e:df:1a:96:e6:6a:af:c6:01:43:63:
19:9a:e3:88:27:7d:6b:bc:82:d9:72:c7:9e:ec:0c:db:2a:9c:
e6:21:ff:d3:4b:5c:68:07:49:55:bc:f2:74:f6:b5:c0:bd:33:
74:d7:c0:e9:7d:33:0d:63:4c:e5:58:f6:0c:7b:63:be:04:c3:
a3:a5:2e:cd:ec:7e:ec:0e:f2:20:c0:bd:45:25:30:6d:39:61:
1f:08:94:43:3b:b7:29:03:ed:a1:d3:d1:6c:f0:01:5d:08:51:
5f:b9:a0:e5:b0:3e:4b:41:db:43:7d:29:65:5c:08:13:33:6e:
1f:d7:a2:7a:7d:47:ae:5e:7d:34:e6:d2:68:74:6c:f2:9f:62:
42:1b:71:2a:1c:e3:be:be:93:5e:22:f9:bf:1b:c9:16:48:9e:
0d:4b:0b:51:33:94:18:b2:02:4a:2d:38:c4:ec:df:00:67:c6:
de:23:35:7c:b9:fa:97:94:11:8d:da:e8:bd:ee:2c:50:73:0d:
cb:1d:48:11:28:3b:6e:44:b9:df:20:b3:54:f5:6d:bf:d6:dc:
af:53:de:4d:bf:11:ce:5f:9c:f5:18:3d:52:9b:4e:e5:3f:5f:
76:ca:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:44:00 2025 by rpki-client