Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: 7iK1amyhcp8BQQzamyCQ4GTI5ODB9hv7/wZwevcqe2w=
Subject key identifier: B5:AA:2D:8C:52:57:EE:93:1B:67:DD:AC:53:1E:C3:18:E6:06:52:74
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 01984AE5F95A5DB812EE0DA3E9A0AF4E4DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 08:00:42 +0000
Manifest this update: Sun 27 Jul 2025 08:00:42 +0000
Manifest next update: Mon 28 Jul 2025 08:00:42 +0000
Files and hashes: 1: lhjGJIifChZhyO0SU9NNpxfAaP0.roa (hash: nX/uaYhIBdSKJHgpMLgtjy0tDRvricoltizd7F7VYTI=)
2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: EdftCXbVaUNcOIlbzWicYwULAReg2BXcdi1s0O0ymXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:f9:5a:5d:b8:12:ee:0d:a3:e9:a0:af:4e:4d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Jul 27 08:00:42 2025 GMT
Not After : Jul 28 08:00:42 2025 GMT
Subject: CN=b5aa2d8c5257ee931b67ddac531ec318e6065274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ad:7b:b7:87:93:47:ab:17:15:1d:4e:75:ff:
7a:f7:68:03:92:39:b4:24:00:76:53:77:e5:bd:c2:
89:22:a5:f3:9f:55:4e:e2:bd:8d:a4:3f:a4:e9:9b:
f2:54:e6:4c:41:89:3f:75:5b:fc:cd:a2:6d:b8:89:
e6:90:f7:8c:fb:2c:2b:c8:76:ef:43:32:5a:ce:f4:
5c:59:67:5f:60:1c:f1:27:09:13:61:d0:8d:e0:79:
51:7e:0d:77:3c:8e:49:b4:1a:34:38:ac:75:4a:2b:
1d:a5:c7:a3:ba:cb:6c:8a:f0:74:71:8b:07:79:b3:
5d:b0:56:a4:56:c4:b9:0e:9c:22:41:61:3c:bf:cf:
00:df:d8:71:8d:60:67:29:c0:8d:9e:7b:28:d8:cb:
a3:b1:e9:fe:f9:8f:e8:7e:8f:6e:66:8b:14:fe:af:
08:d6:7b:c0:fe:6b:7a:a6:03:31:52:ee:63:d4:c8:
d3:f9:af:d5:e8:43:93:4d:84:64:b6:63:ab:2a:75:
70:90:3c:bc:3b:a1:61:45:8d:98:22:6d:de:63:74:
d3:f7:74:cc:df:4d:47:1a:58:73:15:5b:ea:2d:15:
7b:67:46:5d:e6:de:11:d8:6c:b4:8e:f4:45:1a:c2:
64:ca:e7:43:a9:49:68:1b:f0:53:57:89:09:32:a1:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AA:2D:8C:52:57:EE:93:1B:67:DD:AC:53:1E:C3:18:E6:06:52:74
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:55:86:74:89:0e:72:80:13:02:4b:20:d9:82:eb:05:c4:c5:
c4:29:8c:8b:88:18:f6:f3:f2:11:f6:41:d8:9d:d7:78:b7:a8:
16:ea:f7:0a:7b:8e:0d:ac:1c:d1:cd:ca:5d:4d:0a:82:3b:17:
b2:49:32:70:6e:f9:36:e9:44:ff:2a:50:d5:18:b7:2c:cb:d7:
de:fb:7d:9a:90:d1:de:d0:3a:48:c2:3a:4a:40:a4:39:1d:ff:
a8:8d:7e:a8:fc:20:e2:76:15:ce:21:2f:ca:4a:23:ef:c0:80:
a4:6f:f2:0a:ce:b3:12:46:b8:a0:8c:53:ee:31:73:49:22:16:
1c:4f:b8:fe:75:8a:3d:2c:bf:f3:5a:1b:7d:ff:e8:0a:73:10:
39:7c:f5:0b:ae:21:2c:7c:c4:74:26:c0:b0:11:e6:fe:08:18:
e7:10:69:50:83:37:be:09:32:c2:84:94:35:76:dd:b3:1f:b2:
45:89:01:5b:a9:3e:a6:47:b5:31:2f:07:88:c5:be:7b:89:c1:
5a:7a:45:b2:fe:51:29:58:85:7e:42:6c:05:ca:44:be:88:a2:
b3:ce:44:3d:bc:26:86:e4:75:ef:9b:bb:61:2e:f2:85:ef:e3:
04:6a:2a:b1:dd:34:27:d8:fa:89:d8:dd:b0:62:b2:bd:d2:fe:
34:8e:45:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:59 2025 by rpki-client