Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier: Yjfm8MRL0MFxDHaDM+r7sLgfnSRDWDkCB7Mb9ftYgbY=
Subject key identifier: C9:44:E1:E8:66:7A:F7:66:83:DE:3E:CF:48:12:C8:C6:F0:02:5B:3D
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial: 01984C9CF10B1E717FC28D8367BAF09081B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number: 156A
Signing time: Sun 27 Jul 2025 16:00:10 +0000
Manifest this update: Sun 27 Jul 2025 16:00:10 +0000
Manifest next update: Mon 28 Jul 2025 16:00:10 +0000
Files and hashes: 1: ID7EJVgdGpnmyne0NupoGtnpzek.roa (hash: ZeCQXddR8S6+kjzcEpoW2z9l/rn9G5gRDRbTRJiZ+0o=)
2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: N3miA7c/u0zueHPMlANc8klZ59qOEP8meDUxNZJWqSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9c:f1:0b:1e:71:7f:c2:8d:83:67:ba:f0:90:81:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
Validity
Not Before: Jul 27 16:00:10 2025 GMT
Not After : Jul 28 16:00:10 2025 GMT
Subject: CN=c944e1e8667af76683de3ecf4812c8c6f0025b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:21:c2:a7:fc:d6:d5:a1:01:55:b5:a6:8e:
bd:6b:1f:95:dd:c6:23:88:fd:ab:b6:e0:b3:f7:c3:
7a:a9:f6:40:4d:c7:5c:42:14:93:c8:c6:03:8e:19:
cf:4a:ae:90:32:84:99:41:58:34:ef:e3:6a:e9:29:
34:a4:01:aa:73:67:7b:b7:cb:94:b6:e5:10:e2:6c:
2c:64:fc:33:09:77:6b:ad:b7:a5:2d:fb:38:1b:ec:
01:1e:13:81:7f:6a:64:63:a0:35:ec:ed:ac:63:47:
58:81:01:57:74:6c:00:42:97:5f:b6:f2:ac:ba:aa:
07:1a:b8:69:20:8a:46:8e:6d:9e:86:23:49:6d:47:
d5:c8:ee:c3:18:ed:bc:4f:d2:63:f3:53:ea:2f:8f:
ef:c8:4c:78:91:5a:2a:63:d9:99:d8:3d:73:c9:bd:
13:a0:1c:e4:af:1e:d6:45:e0:71:a3:9f:c4:d1:25:
0c:07:90:c1:fb:a4:ae:50:1a:65:ca:06:2f:94:48:
22:10:85:12:fc:5b:ae:f1:df:bd:55:98:84:9e:ba:
6b:fe:bf:f4:be:b9:7f:cd:f6:12:a4:e0:37:8a:a2:
e1:e0:99:da:e6:d6:53:81:93:81:62:ff:bb:ae:7c:
7e:41:3b:83:9d:e5:28:55:89:b2:4c:ec:6f:c0:9f:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:44:E1:E8:66:7A:F7:66:83:DE:3E:CF:48:12:C8:C6:F0:02:5B:3D
X509v3 Authority Key Identifier:
keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2e:7e:27:e4:1b:02:66:d8:8d:c1:fe:8f:0c:7e:20:04:4c:
53:6e:f6:2b:ea:0d:3d:9d:69:ac:c8:2e:7c:5c:87:54:41:ea:
42:69:e5:65:66:1e:47:8d:2d:0e:3b:8d:91:fb:1c:f1:7e:55:
87:48:e3:1d:96:a4:ab:97:bb:34:35:43:55:81:44:81:04:c2:
c6:05:06:c3:ae:28:60:54:b3:73:24:39:04:2e:ac:93:c2:0c:
21:66:ee:79:f5:15:99:7d:9d:08:e1:67:dc:e7:15:e3:bc:8e:
7c:2c:09:f0:03:87:c3:ed:65:29:8a:3f:04:67:ca:13:55:d3:
bd:ec:db:40:5e:3f:9f:fd:ff:73:a1:3c:39:f3:c5:6d:af:6f:
ca:b7:bf:61:c4:0e:c1:74:2c:32:77:c5:61:f9:7c:38:c0:60:
9b:95:9b:5d:b2:41:37:0b:c9:6f:dc:05:66:02:57:72:86:c8:
de:e2:7f:db:a4:c4:56:00:70:dd:c5:be:7f:e7:85:a9:e9:ac:
1e:e9:39:51:1a:8a:27:3c:08:5a:aa:d8:25:c4:1b:f7:5d:ed:
b7:db:c6:05:c4:cb:c5:59:4d:75:69:dd:24:a6:2e:6c:6a:44:
9a:97:5a:5f:b7:6c:67:ac:6d:52:39:52:08:9d:47:aa:55:eb:
67:fd:09:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:30:45 2025 by rpki-client