Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: 9tByz1MuaV8yZhYgbFZRdJU6Q7GvP9LqUBs7sXrti50=
Subject key identifier: E7:A4:83:4E:64:19:C5:48:AE:8A:83:DA:E0:08:AF:FE:CE:55:2F:AF
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 019848F79B688FFB4CE82BD6EB24E8B0A8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0CF5
Signing time: Sat 26 Jul 2025 23:00:43 +0000
Manifest this update: Sat 26 Jul 2025 23:00:43 +0000
Manifest next update: Sun 27 Jul 2025 23:00:43 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: 3iM6kUx+nQHwZsXjUwuIVBbC1f094RdD/TPZGy6iwdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:9b:68:8f:fb:4c:e8:2b:d6:eb:24:e8:b0:a8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Jul 26 23:00:43 2025 GMT
Not After : Jul 27 23:00:43 2025 GMT
Subject: CN=e7a4834e6419c548ae8a83dae008affece552faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:7f:17:41:fa:5a:dc:14:64:23:cd:e0:35:
92:3f:dc:15:41:d9:06:f5:df:57:94:b8:fa:2b:c6:
65:f6:17:2b:ef:f0:eb:9f:1f:0c:ff:09:db:55:21:
2b:b5:e9:e1:91:24:d0:19:34:cd:db:e0:3d:2d:f2:
1b:f0:2c:e0:0c:81:60:e6:22:a3:b6:70:65:a9:c0:
52:41:23:4b:4a:75:f6:74:c5:20:0e:73:47:ea:90:
ab:a2:88:18:7e:53:a2:e9:0a:97:d2:0a:cd:0d:5b:
65:ad:af:aa:c1:6f:01:f6:29:00:60:4e:16:62:bb:
08:56:ee:56:18:5b:4f:6d:2c:d3:4a:4d:30:37:ba:
cb:c8:90:85:81:2b:88:b3:49:29:73:d6:16:d7:3d:
25:0c:a6:33:da:9e:85:33:7a:3e:58:48:c6:23:fb:
20:f6:aa:5a:25:88:ee:e7:fa:bf:01:47:8b:da:a4:
01:2e:d4:06:53:67:14:31:05:d6:be:05:fd:18:1c:
5d:12:c3:d2:61:b4:51:66:f6:b5:ca:52:96:a9:2b:
45:45:c2:9c:1e:94:f6:1b:2d:07:1c:cf:8b:2b:9d:
2d:37:27:2e:90:8a:1d:de:9a:30:2f:f0:5e:04:f3:
b0:51:8b:de:f6:a5:cb:11:27:61:42:2c:74:e2:84:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:83:4E:64:19:C5:48:AE:8A:83:DA:E0:08:AF:FE:CE:55:2F:AF
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ec:50:af:f8:d6:6b:80:a2:2f:07:3f:9e:8d:a3:4c:13:25:
29:e5:dc:ad:45:bc:11:e8:82:01:9f:70:b3:92:ed:fe:53:4b:
6e:4c:44:76:1f:40:2e:2d:d1:54:7f:92:01:94:77:2c:26:80:
58:14:8a:52:b3:23:8b:cb:34:b4:3d:05:e6:cc:ca:65:e9:84:
e4:22:d1:04:64:60:91:66:24:cd:09:80:f0:31:57:be:93:48:
9c:9c:9f:7d:02:24:1e:9c:ed:89:dd:25:d2:d8:71:56:1e:d1:
c8:29:fa:94:31:8d:c3:81:e7:fc:e7:0e:05:2b:f1:f0:50:e7:
c1:76:28:fb:f9:c5:e6:56:78:52:59:6a:fb:95:c5:15:7c:09:
57:28:82:f1:b6:48:41:48:78:ce:6b:df:bd:63:28:5b:f0:00:
ad:fd:86:d2:d5:05:f1:be:d5:02:d4:93:21:2c:3d:b5:5f:5b:
bb:11:eb:d7:f9:6b:7b:52:8f:fd:04:c1:2f:5f:7d:dc:6e:d1:
5d:d3:bb:ae:fa:63:20:8b:10:13:f2:6f:f0:b2:45:14:72:be:
7d:7f:a0:58:72:a4:9a:7b:74:82:d6:cf:34:6e:ee:8e:c4:bd:
5f:6d:fe:fb:5b:5c:ba:38:2b:4a:de:aa:b0:28:93:04:52:d8:
d9:e0:73:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:58:32 2025 by rpki-client