Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: Wetb5XBq9dLZzGK6FSfgjmeG4q3gUEgrnlid+RlIDmQ=
Subject key identifier: 42:5D:48:A1:54:53:04:7E:CC:FC:35:50:3E:33:4C:C1:45:77:5D:50
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019847E4B813143D27D5D36A152A3C9414B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 157F
Signing time: Sat 26 Jul 2025 18:00:28 +0000
Manifest this update: Sat 26 Jul 2025 18:00:28 +0000
Manifest next update: Sun 27 Jul 2025 18:00:28 +0000
Files and hashes: 1: NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa (hash: EKuPrmDOqjvIb0P5ALzTBFMc5GRcKpakwtWPyDrs5oc=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: oXed/Q/gNY+U1OtpZVvp/yXSuPvSMPSTTjIg0kzjYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:b8:13:14:3d:27:d5:d3:6a:15:2a:3c:94:14:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Jul 26 18:00:28 2025 GMT
Not After : Jul 27 18:00:28 2025 GMT
Subject: CN=425d48a15453047eccfc35503e334cc145775d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:3e:4c:51:9d:29:46:aa:e3:2f:ab:0c:34:
b4:4d:8d:59:47:3a:de:bf:16:ce:8b:f8:0c:e6:26:
d9:dc:b2:ac:46:2d:74:07:e3:14:49:90:43:59:30:
78:46:33:ce:5f:67:06:16:e2:b4:83:85:24:7a:fe:
ef:54:9e:26:91:85:02:19:e4:0e:ca:08:61:5b:e8:
b6:1a:89:d5:42:83:19:fd:ff:3d:92:b8:fa:85:ce:
94:3f:c6:4e:c2:02:4b:5f:88:37:4b:0d:ab:2d:7e:
18:4c:fc:7f:c3:0f:2a:21:7f:7b:d6:09:e4:ea:aa:
2f:16:58:3b:b1:43:00:ab:b6:10:8d:fa:77:87:0d:
57:57:a2:e4:a1:63:ea:61:10:b9:5d:08:9f:21:c6:
5a:bc:11:0a:b1:b5:f6:15:91:a5:71:5d:ce:03:ff:
93:bd:ee:37:a8:4f:5a:3d:5c:44:a3:ed:8a:d7:32:
b6:48:84:9f:94:72:e7:dc:27:7a:2f:08:85:a4:f7:
2b:9b:e9:c6:ba:15:61:64:69:e1:f9:43:6b:02:75:
08:1c:d9:cc:98:79:28:1b:7c:4f:3e:7a:e1:e9:86:
0e:7a:dc:53:a7:4d:60:09:b4:4d:10:fb:e9:dc:06:
9b:7f:d5:d3:c5:7f:27:76:70:00:7f:68:95:4d:af:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5D:48:A1:54:53:04:7E:CC:FC:35:50:3E:33:4C:C1:45:77:5D:50
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0d:fb:9c:a9:e6:95:74:3b:15:0c:3c:1f:73:dc:54:1b:88:
a9:95:9d:48:eb:e4:fa:35:cb:1d:3c:c6:2a:2f:87:cb:71:28:
2e:06:8f:2c:82:d3:25:fb:bc:c7:58:0d:93:4e:4f:4f:b1:ee:
27:dc:7e:e4:3d:59:8d:a8:50:fd:f9:4e:24:13:18:dd:c9:a0:
96:30:26:cc:e5:1d:c5:29:12:5d:31:4f:5f:f2:9e:6d:97:f6:
52:0d:61:07:4c:9d:d3:5e:7f:f5:e2:97:ee:ef:e6:41:bd:1f:
98:48:56:c8:d2:02:19:f0:2c:44:20:37:62:47:9a:07:82:fd:
d2:d1:cd:0c:c8:bf:02:be:07:69:b4:fc:ad:51:90:56:5c:fd:
26:9a:78:77:1f:d2:b4:4b:d5:10:ac:fc:3c:b7:31:6c:22:72:
da:00:3b:b0:a7:9a:fc:0e:ba:ef:c8:c7:a8:7c:24:ac:88:6e:
76:f4:5b:58:80:ec:c8:92:ae:e8:19:7a:de:6c:5a:52:a8:57:
bb:6c:6f:40:d4:bd:b7:42:cd:07:f8:cf:02:11:e3:8c:55:69:
8a:a0:0f:91:5e:38:2e:74:52:88:91:d2:30:9a:2b:f8:4d:2a:
9f:9e:dc:8b:c9:33:dc:51:87:22:c8:57:23:45:95:9a:27:63:
7c:6b:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:42:21 2025 by rpki-client