Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier: z1AcBNOZvpXXPi/q+QVxx6WOSqc7JPMUiQV7DpL2LqQ=
Subject key identifier: F4:53:E9:5C:F8:C7:98:74:93:1F:4A:35:B7:B3:44:9E:E8:E0:50:03
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 019851FA56CAA5519FB0CBDAF742B9098414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 17:00:17 +0000
Manifest this update: Mon 28 Jul 2025 17:00:17 +0000
Manifest next update: Tue 29 Jul 2025 17:00:17 +0000
Files and hashes: 1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: LLNnGu3xQFicMV386uRhfENuasA1QIUJNwuBh85XWo0=)
4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:56:ca:a5:51:9f:b0:cb:da:f7:42:b9:09:84:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Jul 28 17:00:17 2025 GMT
Not After : Jul 29 17:00:17 2025 GMT
Subject: CN=f453e95cf8c79874931f4a35b7b3449ee8e05003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:1a:a0:fa:14:7f:81:11:06:a8:c1:02:d6:
e2:0e:9b:51:73:16:3f:9f:65:99:69:11:48:6d:56:
75:0e:04:c3:a3:c6:8d:4f:d1:08:b0:fe:f4:6f:2d:
b2:93:07:57:de:74:f2:14:cb:f7:49:2d:5e:21:ef:
9e:cc:f6:8f:0f:f3:0a:de:ba:dc:3a:4b:a8:1e:ec:
c9:86:d1:d0:ac:c8:f2:c0:9b:75:80:c9:9c:35:63:
54:80:26:fd:a8:56:7e:d1:69:bd:5f:83:f9:f5:8c:
fb:27:f0:2a:0a:92:dd:8b:6b:9a:67:e9:81:43:4f:
d3:43:8d:df:90:ad:65:6e:9e:aa:3d:a4:34:bb:3a:
44:f0:61:d6:cf:91:30:e4:89:84:c0:17:0e:8f:64:
93:ed:d9:00:7a:f0:f3:a9:4b:70:5a:b8:8c:c8:7a:
80:a0:d3:44:7e:e3:ba:13:67:dd:7d:9a:80:2d:44:
3d:fd:b1:14:65:d4:ca:19:1e:02:9f:9e:fc:1e:f2:
4e:8e:7a:c2:28:0d:3b:44:ed:03:ef:47:05:60:77:
14:be:88:48:62:1e:cd:ca:e6:8b:71:05:60:77:60:
16:6d:2b:54:de:b6:0b:f9:91:99:28:77:81:04:41:
8e:07:57:32:8f:fb:9d:68:02:63:39:95:43:a4:3a:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:53:E9:5C:F8:C7:98:74:93:1F:4A:35:B7:B3:44:9E:E8:E0:50:03
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:85:82:b8:dd:69:c2:e4:5f:90:22:70:a2:26:46:85:46:1c:
2e:da:68:2e:1d:51:f5:e7:22:de:45:a3:49:c8:8c:bb:96:54:
14:55:cd:0b:96:ca:a0:5e:5e:0e:e3:a6:86:e6:56:d8:c1:15:
b3:2b:20:02:66:57:b8:56:c7:ff:e6:c4:ad:67:fe:19:aa:1e:
b0:b4:ce:f8:89:d8:1d:17:1a:28:00:70:24:6e:6d:2d:0e:86:
62:51:42:fa:d5:97:05:50:71:29:12:61:81:30:8d:d9:3f:12:
72:9f:54:68:7c:49:62:83:23:6c:39:4f:0f:89:b2:4b:c4:83:
3f:23:30:af:1a:2a:8f:2b:06:bf:a8:c3:46:5e:26:1b:aa:cd:
55:b2:20:5b:ad:ea:40:68:d6:e9:f6:0f:a2:28:1b:2b:70:a5:
db:2c:ff:e1:d2:6b:84:1a:ca:ae:48:8a:53:a8:64:d7:f3:2d:
06:dd:d7:2b:28:f3:bb:cc:16:27:6f:5c:35:b3:e2:e7:90:c4:
9f:d3:9f:a5:71:9d:2a:13:da:0b:14:f9:35:cc:8b:52:a0:cd:
98:ab:56:26:1b:ef:53:56:cc:94:bf:b7:aa:30:98:c6:f5:40:
4f:9d:84:35:98:4e:2a:87:4f:21:76:56:a8:36:f2:58:f7:65:
26:95:4d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:32:28 2025 by rpki-client