Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: e81V/FRaCxTzJ7HqeTt8RGej75yPK/ryCC7D8EQi+m8=
Subject key identifier: 06:CD:BF:81:D9:AB:5F:D1:E6:EF:2D:9F:90:65:DD:D8:17:1E:76:69
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 01984AAECE992FA23C63A73CA9D4DE185107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 1109
Signing time: Sun 27 Jul 2025 07:00:26 +0000
Manifest this update: Sun 27 Jul 2025 07:00:26 +0000
Manifest next update: Mon 28 Jul 2025 07:00:26 +0000
Files and hashes: 1: RDMJmsptAt79z1bZNxCRYGoDbOA.roa (hash: psHiDB3pvgN7EOgCxCvfgOl6kkNmShVGm0R8glPdahE=)
2: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: vSa59Oce6MSnkJF7e1ETO7MAmTIY3+ldSkKw5Z5VDVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ce:99:2f:a2:3c:63:a7:3c:a9:d4:de:18:51:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Jul 27 07:00:26 2025 GMT
Not After : Jul 28 07:00:26 2025 GMT
Subject: CN=06cdbf81d9ab5fd1e6ef2d9f9065ddd8171e7669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:1d:80:43:24:1d:fa:50:d3:92:d2:70:a7:
87:63:84:68:30:76:26:dd:9f:d5:ec:58:33:ed:97:
79:3d:82:79:b6:f9:09:6d:b8:4e:76:ec:b6:e4:34:
fe:71:d6:c6:c4:b7:02:3a:18:da:71:9e:63:75:30:
58:f5:2d:df:c2:ed:e3:74:64:c7:fe:48:eb:17:82:
d8:e1:f8:c5:32:2c:0b:09:6d:46:82:32:b3:33:87:
e0:af:c6:47:54:04:18:1f:76:e0:06:27:cc:66:0f:
90:06:53:60:d1:e4:6b:95:06:5b:17:81:e6:39:3d:
66:0f:a1:30:8e:be:aa:a9:4f:f0:f0:27:1f:7b:a4:
1b:e0:12:75:5f:85:71:fd:22:74:eb:92:20:fd:01:
dc:a6:d1:8d:15:50:44:16:c9:e2:b8:2c:88:5e:95:
e9:8f:a3:5e:c9:fc:ec:b5:47:16:05:1e:9b:5f:5c:
3d:cd:3a:79:5e:75:36:de:54:d1:98:4e:47:0f:69:
30:44:c1:ea:a2:db:a9:60:fb:d4:27:d7:c4:1f:37:
f9:e1:3c:0e:83:ab:7c:68:92:b5:4f:b1:55:43:dc:
59:de:52:44:e4:be:30:74:44:9d:0d:fd:5f:7e:3c:
bf:4d:c4:d2:08:aa:a0:cd:84:95:41:ee:48:4f:df:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CD:BF:81:D9:AB:5F:D1:E6:EF:2D:9F:90:65:DD:D8:17:1E:76:69
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2a:ac:21:c5:97:ff:9d:18:6b:a6:8f:db:c3:06:f5:e1:0d:
d6:e7:22:0b:ce:e3:3c:02:36:dc:0f:e8:bc:c2:48:6b:e5:49:
df:4a:8d:89:d2:15:23:ef:8a:f1:99:f3:84:af:ae:dd:a3:bd:
3c:93:5d:a3:c6:59:46:6f:97:f9:60:ed:15:33:8d:da:26:d5:
28:5e:df:8b:58:f8:fa:58:69:e0:3c:86:c4:13:47:f4:05:65:
f1:3b:1d:7c:b6:49:0b:58:35:1e:6c:89:bb:c9:87:6b:97:03:
37:1a:c1:b3:5e:03:c3:bb:d5:3c:77:35:d1:a0:fe:88:24:e6:
dd:e6:5a:f7:1c:b7:31:12:ba:39:3c:e3:f4:1d:87:61:de:45:
b8:7e:7b:3a:18:a5:f6:66:9f:be:45:30:1d:da:f6:1a:9f:17:
07:5a:e2:63:bc:85:da:31:22:41:9e:c3:37:dc:3c:5a:9e:e8:
6e:99:a6:36:25:cc:da:dd:f7:3d:38:c5:a6:67:1f:b9:2c:12:
0e:35:90:85:49:a6:f2:7c:57:69:e3:4b:93:fa:9a:77:3a:74:
62:ec:48:40:d6:ad:2c:df:eb:2a:c0:67:90:85:56:82:7c:b4:
f8:7e:05:fb:02:49:b6:47:e3:6f:04:81:27:d5:8c:7d:ae:5c:
ab:e4:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:41:31 2025 by rpki-client