Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: wd/gRwiIhchmcMKhrBufmwNxXkyxC8ZRE9xk7Ig6U/0=
Subject key identifier: BB:9A:23:A4:6E:F1:59:C1:A2:FA:5E:EC:41:AF:FD:FB:67:23:B5:DD
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019839F381A432A4917838E3B98CB574E6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1610
Signing time: Thu 24 Jul 2025 01:01:56 +0000
Manifest this update: Thu 24 Jul 2025 01:01:56 +0000
Manifest next update: Fri 25 Jul 2025 01:01:56 +0000
Files and hashes: 1: 2iawdTNRAh1zMLPtNSSUfzd99zU.roa (hash: glHA3I9GeCgeFCksuKJN4v0XXNiSd6eBOO+HCKjdMxc=)
2: D3uFNp_uUSHt1YSi-2IaHiDrRag.roa (hash: s8c53hlFJRAlFwJlOpAFaiZbwpviv1EIugwd2PuQcZA=)
3: dFUsEYWW8cUdCui6PDM05P1wfuk.roa (hash: AL/iuu9lD2lbk6JUjTvJCA4F0UIgpReIGiy6fq4g99s=)
4: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: pq46EGIMCpW3aE4P6t1pUVCn6pXmeDNdHoN7PB2eSRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:f3:81:a4:32:a4:91:78:38:e3:b9:8c:b5:74:e6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jul 24 01:01:56 2025 GMT
Not After : Jul 25 01:01:56 2025 GMT
Subject: CN=bb9a23a46ef159c1a2fa5eec41affdfb6723b5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:28:c9:d1:23:43:ec:73:58:d1:7d:e5:cc:
7a:8e:89:c6:50:60:88:ea:82:30:4a:09:12:05:93:
b4:ea:26:57:e4:98:ef:f9:64:fa:61:2b:8e:ce:4e:
8a:db:35:6d:53:93:29:d6:d2:fc:97:b3:61:33:bd:
c5:59:af:b2:9d:52:e9:1f:59:25:dd:3b:80:66:dc:
cb:ba:7b:cd:c5:1c:5a:1f:7a:b0:2e:b2:10:a0:01:
83:c9:8d:72:13:83:11:8b:2d:9a:e5:0a:c5:c5:d6:
c7:09:23:91:aa:90:d1:45:e8:5a:2d:8b:b5:83:d3:
a6:68:fa:a7:08:fb:2b:8c:b8:6d:05:25:c0:31:06:
dc:a1:ec:cf:70:22:1c:74:75:36:52:d7:64:71:81:
77:6b:45:46:6d:03:0c:0d:a8:eb:98:9f:95:2f:a4:
32:96:2a:eb:2c:c6:d7:b5:95:11:43:04:da:19:c7:
59:4e:02:8c:5e:65:ee:91:92:0d:ae:91:fe:30:35:
1a:58:91:4a:94:79:7c:80:15:39:43:3e:e2:7e:c2:
c3:9a:33:6c:a5:2d:7b:47:02:2f:5c:14:a0:a1:80:
7c:66:a4:4b:e2:9f:90:4f:fc:b7:b5:43:3e:58:70:
56:d1:e2:06:52:f3:9c:8d:cb:6d:3f:cd:6d:be:17:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9A:23:A4:6E:F1:59:C1:A2:FA:5E:EC:41:AF:FD:FB:67:23:B5:DD
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ad:98:79:45:b1:ba:5c:83:75:91:9c:90:21:cf:cf:ba:34:
af:66:c1:c6:56:a3:fd:a2:d9:d1:8c:c7:29:7f:03:84:35:10:
91:1a:3c:c0:61:8f:cc:c7:f0:aa:b6:81:26:4f:f5:ed:d2:61:
a3:24:c5:05:95:8b:f0:e6:07:55:b8:e0:4b:31:5d:67:d3:5b:
37:9d:8f:f8:d1:35:97:67:b4:87:77:c7:f0:50:b1:ab:df:3e:
fc:5c:83:cf:83:1c:12:a5:c4:99:a3:c4:13:c9:7a:8b:8d:b7:
c3:b7:49:6c:fe:89:1c:1f:ac:0b:67:8c:ec:95:e8:5c:a4:64:
89:cb:84:9b:60:24:54:6c:71:40:cb:a0:8c:94:90:9f:18:f9:
e5:50:47:51:f7:95:7b:99:b9:0c:9a:65:e7:71:14:9a:c8:75:
11:88:ef:4a:f5:3a:aa:65:33:4f:b0:f6:b0:d2:6c:b5:83:88:
3f:58:35:72:cd:f7:57:95:bd:8b:3f:97:f3:bb:88:59:d4:39:
61:42:bb:84:d7:60:31:8d:e3:04:50:0e:f7:f3:17:79:24:aa:
17:9a:c8:df:2b:00:0e:3f:b8:25:df:2f:a1:1d:87:bc:fb:28:
18:09:a1:ca:93:89:34:94:93:9f:bf:72:b3:b2:4d:e6:b3:fa:
57:e9:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:13:38 2025 by rpki-client