
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: dlfxXfT1doLXee4nvgbhQcYTm5flBzYelZGa0oUussA=
Subject key identifier: 81:BE:43:6E:B5:19:3F:08:82:CA:30:94:2F:C5:CC:8C:22:D6:8F:B9
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 019872D00675DAD52177E1401AB058E9F1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0D03
Signing time: Mon 04 Aug 2025 02:01:32 +0000
Manifest this update: Mon 04 Aug 2025 02:01:32 +0000
Manifest next update: Tue 05 Aug 2025 02:01:32 +0000
Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: ZaSNc+KStrueDyFkCJzfJjurt53nF4VQeMSXeMWOQF0=)
2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:06:75:da:d5:21:77:e1:40:1a:b0:58:e9:f1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Aug 4 02:01:32 2025 GMT
Not After : Aug 5 02:01:32 2025 GMT
Subject: CN=81be436eb5193f0882ca30942fc5cc8c22d68fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:fd:98:f1:74:27:ad:1c:53:a3:bd:80:52:
3d:2d:56:e9:39:87:8c:e3:0a:b8:be:45:04:36:33:
6b:0a:c6:d1:fb:33:cc:cd:f1:71:4a:c8:8c:5a:f7:
f7:09:48:02:81:30:03:30:d8:b1:7e:d2:60:6b:5c:
78:b0:43:44:e5:14:8c:1c:b6:6d:a6:41:7c:89:25:
c5:90:19:d7:5c:e1:a1:4c:f1:83:1a:b5:ec:20:f8:
43:39:88:af:cf:fa:6a:03:c7:50:24:4f:8b:0e:fe:
1e:8b:85:b4:28:e1:98:c3:01:3e:82:cc:6b:fe:36:
c4:dc:9e:9b:12:4f:5b:0c:29:d4:52:a8:bd:20:f6:
70:d3:1b:4c:a6:39:29:4a:32:36:d3:7b:de:9a:19:
13:04:35:38:75:b5:95:c8:3e:29:8c:26:cb:ad:de:
8b:d2:49:71:1c:9a:25:90:a4:4a:b2:00:46:b1:3a:
99:cf:bd:98:1b:54:a2:58:d5:da:35:87:5b:ae:22:
f8:da:9a:f2:e9:22:25:f0:42:11:c1:80:37:db:bd:
54:95:76:c9:04:08:8d:92:47:80:65:3b:b8:a7:7b:
46:8e:3f:af:b0:b1:98:b6:12:9e:26:7d:2c:79:da:
4f:08:48:81:37:f4:95:f7:19:fd:4b:74:44:4b:94:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:43:6E:B5:19:3F:08:82:CA:30:94:2F:C5:CC:8C:22:D6:8F:B9
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4f:65:43:49:8d:9a:f5:cd:71:11:fe:a9:bf:c2:0f:21:ff:
52:90:2f:5f:e7:2d:25:a9:20:45:86:e7:53:e6:55:16:0f:fa:
4e:1a:14:cc:e3:50:8d:ee:c1:6d:90:86:d7:b1:51:16:79:35:
0f:c5:eb:b6:5e:f5:ee:48:9c:d2:0c:8a:3e:83:9d:17:b8:6a:
61:5c:09:ba:f9:3b:ff:ee:62:29:9b:08:e4:61:c5:2d:5f:32:
c6:10:47:64:ca:e2:70:62:1c:75:84:7d:59:15:b7:f1:43:b1:
ed:1e:d0:87:84:7c:e5:e6:a9:9f:12:9d:4b:9a:ca:c5:82:ab:
a8:59:80:76:0d:ef:92:ec:4a:fd:48:f4:af:41:cc:58:5e:9a:
1f:bd:f8:37:1f:8b:3d:ce:63:a7:0d:7d:9d:a1:0a:7c:3a:91:
a0:b9:05:83:94:1b:04:19:69:33:da:af:98:f5:47:6a:fa:15:
04:35:07:6d:5f:a4:7e:1f:ed:6f:62:1d:25:97:7c:8c:63:43:
b6:5f:e9:98:23:0e:40:f5:80:ae:1a:6b:f7:36:00:56:04:3a:
7f:c0:c0:96:c5:a6:8b:f4:13:8b:d7:7c:9c:95:1c:c4:ed:29:
2d:88:58:85:85:96:db:a0:ad:46:da:85:13:d9:8b:d3:3c:f9:
97:f3:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:25 2025 by rpki-client