Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier: FlqtiTiPR2YdaQIJ4jcKUGTZ3HoHh8e1FwUvKv+qG4U=
Subject key identifier: C1:33:BD:5D:F6:28:1F:2A:CD:E6:65:F4:AB:25:22:5A:CC:A3:6E:B2
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 01984AE5EBE27022D937DFB00C14F4A2FA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number: 160B
Signing time: Sun 27 Jul 2025 08:00:38 +0000
Manifest this update: Sun 27 Jul 2025 08:00:38 +0000
Manifest next update: Mon 28 Jul 2025 08:00:38 +0000
Files and hashes: 1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=)
2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=)
3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: 46B270uuwLyMShLYSjqC/b0L94Bql1Re2BnJ8ziTSdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:eb:e2:70:22:d9:37:df:b0:0c:14:f4:a2:fa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Jul 27 08:00:38 2025 GMT
Not After : Jul 28 08:00:38 2025 GMT
Subject: CN=c133bd5df6281f2acde665f4ab25225acca36eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:6c:c1:5e:be:36:86:16:4c:a7:72:97:3f:
1b:d9:6d:02:83:e3:ac:bb:c2:02:6c:3d:b0:73:b3:
ea:75:91:20:6e:f9:61:53:27:33:b8:1b:e6:82:6e:
d1:c7:6d:30:1a:ee:b3:37:28:a1:17:2e:37:35:e4:
c1:c3:8f:de:74:c6:11:aa:e7:c0:43:6e:a6:b5:00:
6e:3b:92:0b:52:b6:86:51:a3:a9:42:76:a2:81:f2:
65:d8:4d:cb:f1:9a:47:73:ca:46:cf:5b:15:89:cf:
9e:2c:86:b2:89:5e:11:7b:67:61:02:0a:14:6f:be:
69:72:35:1e:50:40:9a:99:3d:eb:8e:79:b2:ec:4a:
44:29:70:e8:2e:a0:f1:93:7f:e8:d8:8c:c2:28:25:
1a:2c:64:47:3f:38:8f:e2:da:20:73:1b:b9:84:ab:
f9:19:5a:12:20:9d:83:c1:fc:e3:28:bc:5a:3b:2d:
b8:08:1a:e7:e5:06:92:5c:e0:11:c5:bb:23:dc:b0:
17:84:42:34:a8:01:c5:6d:31:84:e7:1c:81:6c:7b:
ec:cf:b1:49:cc:a8:95:a3:d5:55:b3:22:aa:5a:62:
c4:06:c1:80:e0:5f:d7:80:cb:86:d1:03:d0:3c:9c:
18:b5:0f:8b:43:5d:ee:17:f0:ed:15:00:b0:ab:f2:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:33:BD:5D:F6:28:1F:2A:CD:E6:65:F4:AB:25:22:5A:CC:A3:6E:B2
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:60:86:7a:d8:c4:49:ce:22:f8:60:cc:59:f9:e2:ee:c2:8c:
e2:d4:46:c2:91:e9:48:46:16:b7:15:7c:07:51:12:e6:33:0c:
a2:ec:94:2d:a3:03:b0:3f:55:d2:27:88:ee:5e:0e:d1:4c:80:
9f:ab:ca:1b:55:d0:e8:cf:eb:81:60:91:3f:b4:9c:71:06:1f:
1c:3d:ed:83:62:1a:5b:82:56:d6:ad:5f:b2:d4:bb:39:49:71:
56:85:3b:d8:7c:7b:d0:83:bd:0f:85:93:fb:d9:d3:84:a2:b4:
20:e0:07:7d:69:3d:8f:cb:71:75:45:a3:fe:9e:83:18:f0:ea:
25:89:3a:63:8c:61:f5:62:f2:cd:1d:88:fc:66:ef:b3:59:7e:
b2:a8:64:6f:78:39:43:e0:3b:49:a7:fa:5d:4f:8f:85:cc:fe:
cf:13:73:3f:8e:c0:43:a6:4c:a7:da:da:95:6e:04:23:b9:fc:
d9:86:9d:9e:13:9d:97:c6:ff:f9:1f:ff:ee:19:41:10:3a:7e:
74:31:bf:2c:86:b1:68:08:a6:ac:b4:47:21:96:3e:b3:9b:39:
e1:8f:ac:bf:f5:c6:cf:0e:b7:81:6e:32:60:57:7f:9f:66:d9:
57:01:28:7e:b6:49:55:fe:cd:ac:0e:a6:ee:15:32:77:24:59:
62:5a:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:40 2025 by rpki-client