Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier: tnCqQTR3i2cD9hqK4uZiJiYjDNmPRY0qlQNrnRO7qac=
Subject key identifier: AD:11:D3:BC:33:8B:DB:9C:6F:1F:C4:CF:0B:B7:DF:43:68:7A:D6:18
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial: 019851C38FBA1B09CA398BC76E486E439E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number: 1599
Signing time: Mon 28 Jul 2025 16:00:27 +0000
Manifest this update: Mon 28 Jul 2025 16:00:27 +0000
Manifest next update: Tue 29 Jul 2025 16:00:27 +0000
Files and hashes: 1: C_zGKKe9EmjFWVKBb9utgZ7LvBo.roa (hash: DBtQlC6QblgPpVW+sAN+YH267kvW3kiRyXFujtkor/8=)
2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: DtmnnkVX0b6pypve75vhTUj2zvvrZP0YfQnHWy2hYsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:8f:ba:1b:09:ca:39:8b:c7:6e:48:6e:43:9e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Validity
Not Before: Jul 28 16:00:27 2025 GMT
Not After : Jul 29 16:00:27 2025 GMT
Subject: CN=ad11d3bc338bdb9c6f1fc4cf0bb7df43687ad618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:d0:3d:1b:21:80:3b:27:88:74:5a:cf:70:
3b:b3:9c:73:5a:2d:6f:66:1b:a7:bc:a2:0d:4d:cb:
d8:95:b4:bc:bb:09:c6:ac:55:44:ba:13:96:a7:d9:
dd:aa:69:0e:1d:91:4b:1a:11:54:f5:02:0d:10:1f:
9b:04:aa:f8:2d:99:b2:a7:92:e2:a8:90:de:63:38:
63:5a:fc:b8:5d:92:14:f6:8a:d4:33:d0:51:4f:75:
ba:42:2b:52:27:74:2d:81:e6:2b:76:f1:a8:c9:9a:
c0:97:64:f9:63:96:d1:3f:49:10:f2:d5:c6:70:f1:
4e:2b:b4:c0:d2:f0:55:61:54:d5:6a:ff:7c:d7:b5:
6c:86:2d:bc:38:ad:b6:03:42:02:ad:19:59:b4:ba:
70:26:44:dc:11:d3:e8:f5:47:64:e3:e8:2e:08:b4:
3c:13:25:82:c6:5d:b7:a6:5e:7e:ab:73:fb:2f:67:
65:5c:70:6a:86:e0:37:cf:4c:8f:c4:e8:26:76:94:
30:e2:81:6b:95:3b:d0:91:05:e3:97:c5:a5:16:c6:
ff:38:55:93:19:fd:1b:cc:3a:a6:ca:e3:c9:81:db:
7d:ee:ba:ad:e0:33:56:95:d4:76:1c:c0:e4:94:d7:
36:96:0e:47:fe:6d:94:0c:c3:e5:89:2e:3a:36:44:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:D3:BC:33:8B:DB:9C:6F:1F:C4:CF:0B:B7:DF:43:68:7A:D6:18
X509v3 Authority Key Identifier:
keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b0:18:fc:b3:f3:c9:09:12:ea:b9:d1:e5:27:ed:2f:fc:d9:
4e:54:af:a9:45:2d:ee:86:a2:b8:bc:8b:0b:ae:d8:5b:d2:2d:
6f:24:f7:ba:97:45:83:57:74:b1:e3:ec:e8:dc:5f:e9:40:c6:
ec:d9:c0:af:a7:a2:ef:f5:1a:8d:f9:32:e8:e8:48:ea:7b:ec:
7d:71:07:09:09:39:62:6f:f6:f0:ac:fc:fa:4c:42:02:09:1f:
8c:d5:9e:b6:d8:50:08:72:93:53:25:28:ae:8f:ea:7b:c9:e6:
f8:b7:49:d3:c3:be:61:eb:c6:e8:24:47:d7:dd:4e:25:d6:80:
37:de:dc:8f:df:1b:d0:7c:f7:0b:3c:bc:35:f4:00:17:68:ff:
7c:3e:8c:95:de:72:79:90:c9:07:65:44:d4:f4:dd:45:4c:6a:
af:d5:e5:51:53:81:54:07:00:56:c4:7c:78:f1:85:18:4d:1c:
ff:1a:e4:d0:3e:79:a5:a2:27:73:ce:03:25:2e:d3:98:b6:fe:
b7:38:35:4c:8b:2d:c5:29:6e:52:05:d0:35:be:43:0a:9a:8e:
1f:fe:87:f9:d7:59:d3:b3:99:95:f9:03:71:b5:79:a8:db:35:
2b:c5:7e:fe:f3:89:ae:49:53:54:24:e0:1f:aa:29:0e:d3:13:
2e:7d:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:43:50 2025 by rpki-client