Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
File: oNPtV5U0igTn7NFy12QvqWIJcoc.mft (raw, json)
Hash identifier: 1ev/ieiBvjYoqQfGOC5SSP6+OKpTU8+uZs3KHr2/fuo=
Subject key identifier: AD:17:8B:7B:31:F1:46:61:A0:C1:F3:FB:53:E9:B8:18:D8:11:A4:29
Authority key identifier: A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
Certificate issuer: /CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Certificate serial: 019848529C19640829AC11BCC51FB918125C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
Manifest number: 02E7
Signing time: Sat 26 Jul 2025 20:00:30 +0000
Manifest this update: Sat 26 Jul 2025 20:00:30 +0000
Manifest next update: Sun 27 Jul 2025 20:00:30 +0000
Files and hashes: 1: _Z612WlN8ZfOi7lH-p4HrmdXgXQ.roa (hash: QscoaDsHFH3nysubWrv1ADSV365kESJ9Bam6CnFtw2M=)
2: oNPtV5U0igTn7NFy12QvqWIJcoc.crl (hash: k6MA+ws6DKnbGLP4xpJgHwOpkkPTNuKF3ZGUFbKAG7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:9c:19:64:08:29:ac:11:bc:c5:1f:b9:18:12:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Validity
Not Before: Jul 26 20:00:30 2025 GMT
Not After : Jul 27 20:00:30 2025 GMT
Subject: CN=ad178b7b31f14661a0c1f3fb53e9b818d811a429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:d6:eb:b9:07:9f:ef:5e:6d:23:d4:48:d2:
ff:b4:13:b3:f9:c4:26:17:2f:97:98:5a:48:90:9d:
da:2f:79:6a:21:f4:83:8a:91:06:df:ba:f8:9a:22:
d0:e7:23:c1:63:99:9a:18:91:b1:2e:27:ff:eb:c4:
e5:16:50:7f:ec:b3:6f:5a:bb:15:68:0c:fd:a3:3d:
1a:54:0e:65:2a:be:0a:cb:4a:83:5e:96:35:20:0b:
12:d4:73:f4:19:87:0d:d6:99:f8:7c:d2:66:06:0e:
56:61:bc:67:4e:7c:22:8d:d3:b3:70:71:3a:66:b3:
a9:9b:d6:b0:55:da:45:b7:79:b4:f4:c1:52:ae:30:
30:5e:d8:04:dc:98:71:06:24:8b:4b:2d:53:d0:36:
25:d8:78:4f:f0:6a:d7:6d:4f:2a:9c:d3:32:3f:f4:
ae:ae:e2:25:c0:e1:d1:f2:ba:34:29:97:fc:a9:7b:
13:5e:96:53:57:f4:b2:00:2a:d8:99:89:de:a5:90:
81:e4:a2:60:3d:3e:1c:e2:80:e7:70:f6:4c:c6:b2:
b6:1e:cf:33:e6:24:80:4d:92:69:87:90:62:fb:a0:
70:80:99:1d:72:de:61:a9:67:3f:3c:6f:20:b3:a6:
39:d5:9b:38:1f:2b:40:36:ad:13:94:8a:b0:aa:33:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:17:8B:7B:31:F1:46:61:A0:C1:F3:FB:53:E9:B8:18:D8:11:A4:29
X509v3 Authority Key Identifier:
keyid:A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:67:03:75:16:c5:6e:a1:f8:76:10:ed:f4:d7:c8:6a:09:9c:
20:99:64:01:e7:1b:a4:9f:b6:04:65:b1:87:b6:71:d7:97:d7:
22:c1:28:17:24:cb:dd:76:79:58:39:26:ea:45:1d:8d:76:c5:
a4:f3:04:ea:f6:17:98:67:4e:7b:d8:c1:d0:cc:3f:96:28:30:
28:b3:46:f4:cc:b2:06:3f:5e:6a:84:ae:78:ba:35:91:af:4f:
7c:15:11:3c:c0:bc:bc:8c:5d:37:71:00:88:47:b3:a9:39:a0:
02:7e:3b:70:a7:fa:0f:39:ed:fc:17:6d:60:27:4e:f9:c7:74:
cf:1e:b4:51:af:8b:83:c1:bb:46:11:37:6e:0b:2b:1d:71:6e:
0e:b6:18:ea:f3:0b:94:29:75:9f:13:70:4a:33:cc:56:e5:b9:
f1:67:19:51:d5:d2:1b:63:48:ad:a8:62:a5:a8:c3:33:62:04:
79:e7:c8:28:cc:c2:ee:57:ed:4f:02:97:bf:b0:08:c3:2c:08:
9d:31:5e:ae:76:3f:87:ad:66:4d:59:c6:95:e2:4b:83:39:fc:
dc:86:ea:17:63:ba:93:7d:78:be:21:cd:e6:47:6e:51:9d:9d:
d4:55:ba:93:6c:d0:ad:03:d7:0c:f3:b7:3a:75:c4:b4:95:a6:
22:2d:2f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:05 2025 by rpki-client