Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: jAZtRFN64gMaEwE/kElyEXpUyIU9rAi9Ke3fROd8hUg=
Subject key identifier: F8:AE:76:D1:56:0D:40:44:60:08:77:CB:B6:99:F8:6E:96:BB:A9:4D
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 01983BE2169E8BCA4B310A6CC99EFE8169B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0959
Signing time: Thu 24 Jul 2025 10:02:09 +0000
Manifest this update: Thu 24 Jul 2025 10:02:09 +0000
Manifest next update: Fri 25 Jul 2025 10:02:09 +0000
Files and hashes: 1: 5Ut0b0NCsET_SBcrRZDGmpxguZ8.roa (hash: yFP/8VV88RGdYS/1gMV2xguqReDrDsPUy9So1+AmUlY=)
2: 5govGzTOoEOkHW5AQQBeXhEslnY.roa (hash: WSesnMfx5MzV8mfpr2Kk+2TovkIoHzCJWKSulEHwHA0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: dOp8BdX7I71wEMWyuGkizlplJ7wCUX53ZknXzzaeZDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:e2:16:9e:8b:ca:4b:31:0a:6c:c9:9e:fe:81:69:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Jul 24 10:02:09 2025 GMT
Not After : Jul 25 10:02:09 2025 GMT
Subject: CN=f8ae76d1560d4044600877cbb699f86e96bba94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:cf:e6:30:22:79:84:06:93:5e:75:ab:28:
17:1c:5b:6a:4a:17:c6:fb:f1:e0:5d:3c:64:a3:7a:
c6:76:4f:4d:84:04:46:07:17:03:dc:62:88:3c:9b:
3a:79:94:ca:87:99:aa:63:07:9b:8e:0d:0c:4d:3b:
89:a5:8a:2f:08:52:5f:fa:17:91:bf:92:8f:4e:c5:
32:0f:12:88:89:cb:8d:17:2e:d4:a2:0d:bb:c5:21:
96:78:6a:fa:fd:d4:72:a0:87:53:34:77:63:14:fe:
91:17:08:98:f7:52:02:e7:df:91:f0:31:3c:35:dc:
20:04:22:e9:46:ee:7f:f9:0a:fd:f0:c0:3e:18:bf:
b4:58:d6:48:90:de:34:a1:51:96:11:9f:4c:96:6a:
46:03:f6:7f:9b:6c:af:f6:28:76:76:f5:18:31:67:
b8:96:5a:4c:16:b6:7c:de:f5:07:15:a3:fb:f6:c3:
ae:f1:41:d6:51:66:4d:f8:ee:58:3c:c1:e4:a9:ca:
3b:2a:1f:cd:49:57:09:e7:c8:74:c7:e4:01:2e:c2:
6b:a6:1b:32:7e:05:e8:e4:a8:dc:0f:9a:80:87:bf:
47:bd:e3:43:3f:cb:3f:dc:4e:a9:bf:5f:8d:41:46:
b0:07:3a:73:87:fa:0f:79:c9:1d:d3:b8:d5:01:67:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:76:D1:56:0D:40:44:60:08:77:CB:B6:99:F8:6E:96:BB:A9:4D
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:71:50:de:dc:c7:ee:c9:07:f4:60:58:d4:b6:5e:a2:e2:91:
9d:ca:67:9d:b5:6c:77:7b:65:6f:c6:88:b1:d2:bc:b9:c5:d9:
67:13:eb:38:1a:ef:af:c1:9a:be:e0:3c:a1:0b:0b:0a:49:f5:
72:fe:d5:23:da:47:c1:3e:28:79:7e:cc:77:6b:cf:03:b1:ca:
16:8d:e5:38:e5:80:85:97:0f:bb:9f:0d:31:76:e1:e8:f9:82:
09:c2:0b:df:a0:fe:c4:f3:98:06:f2:25:f8:78:b6:bb:29:0c:
04:ea:f1:d2:44:96:f9:21:40:aa:4a:b9:51:12:73:43:7a:f5:
47:20:96:b5:a5:2c:9b:9d:7f:7a:b6:c2:3f:e2:a9:bc:fc:ab:
1c:07:ff:8a:dd:5b:6f:01:24:56:cd:35:a5:2a:1c:7c:98:08:
0b:c5:fc:e8:77:42:49:27:f7:ac:fb:aa:1c:f1:8e:c3:b7:5b:
85:ea:1c:39:ea:53:ec:99:76:4f:5e:8f:55:95:66:ca:38:53:
d0:01:f4:af:c7:a0:cb:92:92:9c:b6:15:ed:cf:5c:1c:3f:06:
14:fd:97:5a:8b:db:20:58:9f:8a:6f:47:69:28:83:f1:1a:5b:
a4:72:6d:71:ca:3b:54:1f:3d:59:1d:b4:5b:5c:4d:80:ff:5f:
1c:95:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 17:14:41 2025 by rpki-client