Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: l+wX7qKNAQWBaibbvDqK3b2qY2T0dXFl4p2Y6xrfc7A=
Subject key identifier: 55:2F:C9:AA:AE:16:31:11:6A:2B:B2:04:73:DA:94:F6:AE:5D:D5:F2
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 0198744FABAFDA22106379E92AA265DE78AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 1106
Signing time: Mon 04 Aug 2025 09:00:34 +0000
Manifest this update: Mon 04 Aug 2025 09:00:34 +0000
Manifest next update: Tue 05 Aug 2025 09:00:34 +0000
Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: yD91Q7iBHvwrPOfzUcsymAKvYOpey7SPbVNb47L2SfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ab:af:da:22:10:63:79:e9:2a:a2:65:de:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Aug 4 09:00:34 2025 GMT
Not After : Aug 5 09:00:34 2025 GMT
Subject: CN=552fc9aaae1631116a2bb20473da94f6ae5dd5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:b7:ff:9d:8e:29:b8:57:f9:bc:f5:6c:44:
74:e3:89:83:c3:e9:4f:9d:d9:50:0f:57:ab:27:74:
ea:b4:83:34:7e:b7:c8:bc:86:64:41:4c:ee:ab:e9:
81:83:2d:8b:fd:4f:9e:9f:e9:03:08:f1:72:56:d4:
dd:1a:db:a6:77:de:28:29:f9:1b:b2:a1:62:2a:fd:
b2:be:37:8d:cf:75:08:98:b8:90:3b:1f:70:31:fc:
fa:b5:0b:e1:d6:4e:1e:b7:cf:96:b1:e7:59:df:ee:
01:48:13:d4:d1:a0:0d:6f:21:fd:69:18:fa:e6:ac:
48:af:cc:a1:05:8a:da:17:1d:c8:80:70:9d:6d:c9:
d4:4d:37:63:0a:1e:3b:44:bd:3f:de:48:55:b0:54:
84:e3:aa:9f:32:0c:4d:ad:27:ce:1f:a2:df:b4:90:
f9:67:8a:f3:5f:81:e8:70:b8:63:cd:ee:4e:8b:47:
20:b3:9f:d7:9e:6f:40:01:ba:28:8f:79:56:04:58:
a3:4c:b6:1b:b4:43:cf:cf:b5:67:78:98:1f:f4:b6:
42:b7:54:4f:72:1a:fc:20:ac:cb:ac:cd:8d:ea:9e:
53:5b:3e:29:f7:5b:92:5f:c9:b2:9e:9f:be:f5:ed:
57:ba:4f:3c:b6:ca:60:f7:ec:c5:3d:d7:b8:50:e8:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2F:C9:AA:AE:16:31:11:6A:2B:B2:04:73:DA:94:F6:AE:5D:D5:F2
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:93:aa:3b:2c:2f:e0:cc:ad:0c:dc:ab:fd:b8:a3:f3:b6:6e:
62:4d:83:a2:5c:66:97:fb:44:51:d7:13:52:17:49:20:8a:28:
3d:f4:1e:ba:60:65:e7:c8:be:0f:73:d2:6b:ff:0d:ae:c3:c9:
b1:f1:96:dd:64:67:0f:42:37:83:db:72:34:58:a2:a9:26:41:
26:3b:b5:a8:6c:b8:71:7b:a0:e6:7d:38:13:fb:06:fd:e9:f7:
91:3f:7d:62:83:b4:78:06:da:82:24:f5:dc:9c:44:06:83:8c:
48:70:1e:5d:11:53:ee:a9:88:ce:9b:55:b0:c7:0c:e1:e0:78:
ec:a7:3a:f6:94:ad:19:a3:1b:84:ab:03:7b:45:07:8f:0d:28:
a3:c5:10:84:78:c0:bd:94:27:e7:8e:4e:8b:fe:28:d0:97:d2:
2d:59:00:3d:4a:30:8e:95:45:d1:93:ab:88:57:2c:e7:c1:ea:
8f:34:38:03:cb:23:50:7b:66:39:a0:6f:bf:70:7c:67:57:ea:
78:9e:f5:67:3d:51:e4:29:c1:1d:71:33:c4:06:01:c1:a0:c6:
f7:7b:2b:e7:cf:0d:86:90:5d:09:25:e5:8b:e5:2c:28:ed:4c:
1f:86:71:bb:f0:90:ba:84:2a:81:8e:ff:e0:92:25:77:f5:f6:
2f:10:02:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:55 2025 by rpki-client