Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: 2jdOo9WwpWuTF3C9ZscWcjFxXHOAEFE8RGRcjmL0Q9w=
Subject key identifier: 68:95:AA:AC:A4:51:4B:19:64:04:FD:1C:68:41:9F:80:C6:5B:A0:88
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 01984C6674EDDFF32FDB57DDF36050681A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 14F7
Signing time: Sun 27 Jul 2025 15:00:39 +0000
Manifest this update: Sun 27 Jul 2025 15:00:39 +0000
Manifest next update: Mon 28 Jul 2025 15:00:39 +0000
Files and hashes: 1: 8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa (hash: 6ZZJ4QGkpbcq3hIOVhgvm79JeONPbl5ojVu1zQKUgnU=)
2: LiZI8DHKt2cl3ZGAwMQs7hzSWLY.roa (hash: YZv7B4YQ18wMpKvjotc88oKaw7AFVr3K3Ln8F9meSnc=)
3: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: gef3/S7lpEsPoqm5WwgH3YW/Z0UauOqRhzdpOoQXlj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:74:ed:df:f3:2f:db:57:dd:f3:60:50:68:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Jul 27 15:00:39 2025 GMT
Not After : Jul 28 15:00:39 2025 GMT
Subject: CN=6895aaaca4514b196404fd1c68419f80c65ba088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:3c:f0:95:b5:0a:d8:bc:a8:84:68:85:b0:
57:e8:3e:e6:5c:1c:1f:46:d7:1d:7c:ea:06:ef:11:
2a:c0:43:d0:f7:66:69:0e:b0:06:53:61:a0:e6:15:
d0:bc:13:a1:dc:2c:e3:02:ed:8a:e6:0e:1c:d1:b9:
a6:2f:58:e9:9f:e9:60:a8:a0:6c:d0:f5:f8:6c:0a:
9c:64:52:ec:0c:00:f4:4b:5d:cc:86:f5:85:05:61:
9d:b9:48:20:b5:f7:03:30:e9:f3:8c:a2:c7:59:94:
85:dc:d5:3e:67:27:29:96:76:7b:38:1e:17:f0:47:
aa:31:36:6d:ca:69:07:64:26:5e:c0:93:3b:9d:6c:
1f:db:ac:70:52:ba:97:a8:d4:a5:9e:7c:56:77:4b:
66:9c:dd:04:f7:4b:0e:1f:29:7e:3f:dc:4d:73:93:
d1:1c:8c:bf:75:11:9c:76:d1:bf:6e:8d:2f:0f:9c:
c4:88:de:13:d5:89:28:26:e8:12:96:e7:62:e0:3f:
a0:09:df:33:d5:ce:be:ab:c2:9a:a3:78:ee:47:d6:
75:37:0e:e3:b3:a9:24:ac:dc:0e:c2:18:d3:f1:27:
f0:14:f7:69:18:2a:6a:53:51:3b:05:75:8f:63:e8:
bc:94:12:b4:b0:0e:a9:54:49:97:2b:4f:97:0a:31:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:95:AA:AC:A4:51:4B:19:64:04:FD:1C:68:41:9F:80:C6:5B:A0:88
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b4:3e:fc:a5:35:40:e1:f9:9a:94:03:1d:e7:dc:4e:a1:84:
1d:05:6e:ab:4c:f0:ab:88:3d:7b:85:01:a1:c6:4b:96:e4:70:
d6:66:c0:0f:77:83:5d:e8:73:f7:ba:6e:e4:f4:ec:b0:42:49:
14:1d:42:4e:59:93:51:d3:eb:ce:4f:2c:59:0b:20:3e:5a:66:
4e:a1:0c:ee:98:6c:1e:83:57:2f:4b:69:c2:f3:45:af:9f:cb:
5f:45:eb:47:55:fb:37:8e:f9:9e:65:86:f7:e8:dc:a4:e9:ef:
f1:59:65:cd:a3:fb:5c:1c:74:80:f9:62:d0:6e:78:88:b7:91:
ef:ba:7e:8c:2c:38:33:2e:c1:84:15:05:75:b5:f5:9d:f4:f1:
2e:cd:fa:57:a7:d1:87:a8:fd:5f:4d:f8:ed:f9:80:3f:7f:22:
a4:b9:f9:5d:d1:cf:d5:24:e2:a3:b2:a9:89:12:01:11:b3:55:
b1:29:9e:12:58:a7:22:a6:d7:6b:46:f1:e2:ae:44:d4:97:b1:
f6:4e:f9:2e:47:e9:d8:58:e6:47:75:97:e0:c8:de:5c:c9:41:
bd:f8:f8:f3:78:4a:2a:45:53:1d:cf:99:45:1f:a0:e8:b0:c2:
99:36:0a:d5:e3:07:22:61:7b:d2:5d:b9:b7:79:30:52:b0:f3:
2f:93:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:31:33 2025 by rpki-client