Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: oHn21P+PWQmoCi9933kqHMHe7Mpr5MMCzkqfuOyrfqE=
Subject key identifier: 2B:04:E3:78:A0:43:AA:0B:92:DF:48:E1:39:6F:52:AF:CD:97:C0:27
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 0198458919263FB60B69471A26F52CE13126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:01:09 +0000
Manifest this update: Sat 26 Jul 2025 07:01:09 +0000
Manifest next update: Sun 27 Jul 2025 07:01:09 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: Yb/bfR+WCnKYISzAtMRAnsVoPlA+bh0iOMMwefW1NP4=)
2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:19:26:3f:b6:0b:69:47:1a:26:f5:2c:e1:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Jul 26 07:01:09 2025 GMT
Not After : Jul 27 07:01:09 2025 GMT
Subject: CN=2b04e378a043aa0b92df48e1396f52afcd97c027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:72:24:e0:d7:7d:6d:7c:ab:9d:8c:eb:fd:
bd:78:ec:b9:49:a3:ff:77:58:fc:d3:a3:93:87:82:
a1:69:10:2e:c7:bc:66:c1:23:13:df:39:4a:26:42:
1f:04:21:b5:ef:84:e8:be:ad:6c:81:6c:fd:0d:a6:
5a:96:ee:a7:09:6a:4d:34:5e:57:08:56:1e:f2:a3:
f4:f1:c0:43:77:bd:88:9e:48:df:51:0d:f8:64:45:
4f:18:50:fe:28:96:d0:76:f6:0a:ae:4a:2e:d7:39:
71:6e:cd:00:4b:ee:60:a1:30:01:68:22:ba:96:87:
9e:d0:b3:ee:47:17:60:90:e5:94:14:c5:65:26:96:
67:9b:24:8d:2e:f7:ec:3b:1c:7b:30:fd:24:e2:5a:
27:5f:60:0b:15:1d:91:75:f0:18:95:1f:ee:6a:e3:
14:ae:23:64:23:6e:4b:19:ac:6a:90:aa:a3:1f:18:
3b:c4:2e:e2:80:11:58:f7:ae:2e:2c:b5:b8:f8:e4:
b1:72:9a:f9:53:02:87:45:00:91:4c:ec:86:10:a0:
33:b4:52:23:38:39:a1:65:66:67:b9:f3:45:c3:97:
b9:6e:6a:1d:8e:91:00:74:99:c2:c9:5f:bb:6f:bb:
49:e8:cf:07:72:ac:f2:97:9f:46:75:e5:ea:1b:b4:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:04:E3:78:A0:43:AA:0B:92:DF:48:E1:39:6F:52:AF:CD:97:C0:27
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cc:ac:e7:ab:00:71:b7:f3:e2:00:3d:63:d7:9e:36:b7:0d:
d8:b2:f4:21:9f:2f:18:e2:4d:88:55:5b:31:a8:b5:ed:67:22:
3f:c3:f6:35:a7:13:fb:19:57:6d:d4:ec:b0:d2:1b:22:94:c1:
e0:92:88:db:ef:ab:75:82:98:34:24:3b:46:48:2d:7a:22:c4:
f1:71:d3:18:7b:8c:27:68:eb:e0:71:e7:0f:f5:7b:cb:60:72:
86:6b:3a:b2:cc:5d:6b:3d:ab:4f:8a:fd:6c:de:d3:61:fc:67:
62:68:69:a3:23:2f:c6:2f:61:2b:a5:8b:80:8e:c8:54:ff:f3:
b9:da:19:79:93:1b:d8:70:00:db:08:3f:50:8c:e9:7c:82:dd:
26:fc:c7:de:50:24:f1:e8:43:15:3d:2e:5b:c4:3f:bd:b2:49:
79:0c:25:4a:17:36:5b:ad:75:29:0e:e9:60:e0:8e:2d:93:a6:
5c:46:f2:eb:49:c7:66:80:96:2e:6d:d0:b4:7b:30:96:5d:87:
fc:e8:88:e7:50:f2:16:c4:1e:41:cd:71:30:65:50:f7:fa:25:
44:57:8d:4e:ff:e8:5f:1a:0d:da:82:ee:d1:6e:c4:f6:28:71:
45:af:ed:ae:dc:fb:ca:3e:33:f0:d5:c1:4f:52:5a:c8:ee:09:
88:a9:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:25 2025 by rpki-client