Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: B9IjhNJPn2A0aJfCFHiBWeYdhNNcXVVov3pZ5Im45tw=
Subject key identifier: 0E:A6:93:0F:9E:95:00:2B:CE:93:5B:46:82:D3:CA:A9:6E:80:EA:52
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019835034388B9F23801F0DF291E7B089FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0D05
Signing time: Wed 23 Jul 2025 02:01:02 +0000
Manifest this update: Wed 23 Jul 2025 02:01:02 +0000
Manifest next update: Thu 24 Jul 2025 02:01:02 +0000
Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=)
2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=)
3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: pyoDDQn96mIl9jom/PZjMaX8RLv/gDJ8x0cMizZJB28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:03:43:88:b9:f2:38:01:f0:df:29:1e:7b:08:9f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Jul 23 02:01:02 2025 GMT
Not After : Jul 24 02:01:02 2025 GMT
Subject: CN=0ea6930f9e95002bce935b4682d3caa96e80ea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:21:77:d7:f9:a5:f6:e5:98:d8:38:63:bf:
49:d7:83:6e:7a:43:39:6a:8a:54:0e:95:29:5d:c3:
06:15:54:4c:05:a1:4e:6b:b0:f2:99:34:a9:87:e3:
d8:e3:5b:37:a9:38:d5:cf:61:81:3d:85:0e:c6:b1:
d6:92:47:27:d3:f8:26:e3:f0:f8:a0:7d:73:e9:35:
e9:49:0f:0b:fd:fc:34:7d:31:ca:69:b6:24:9f:f7:
61:4d:a9:d2:68:4d:5a:35:8c:e3:e2:97:ee:82:16:
32:27:6a:79:f6:e6:f3:26:bf:5c:c0:b2:e3:de:5a:
1b:28:8a:26:ce:62:a2:36:7c:2d:27:98:5f:62:83:
27:31:38:1f:11:45:c5:ae:af:8c:77:ea:55:49:aa:
e9:f5:b0:e5:8f:c0:85:16:4b:1c:b9:b6:76:54:e8:
37:c1:e0:92:ec:2f:62:77:d2:fb:81:bb:93:24:3c:
f9:2d:50:ed:27:22:e3:46:19:65:9d:f8:1b:f6:a2:
ff:f5:76:ee:3c:6c:c1:9f:c3:90:18:50:f6:6d:17:
6b:18:ec:b0:88:d5:ec:6e:6b:9a:ad:12:9f:58:00:
31:32:e0:0c:1d:d5:11:ed:ad:be:31:e6:6e:0f:95:
bf:a8:e0:a0:d2:96:d6:ce:af:27:3e:b5:11:cd:32:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A6:93:0F:9E:95:00:2B:CE:93:5B:46:82:D3:CA:A9:6E:80:EA:52
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ed:f0:b1:ac:49:2b:6a:46:26:a0:8d:98:3e:5f:c8:36:db:
2f:4f:9b:bf:96:2b:d7:e5:2f:eb:09:46:eb:2e:ae:7f:03:83:
3f:d2:1e:06:81:c6:a7:e4:b3:48:e5:6e:90:d6:e2:f3:45:d6:
c3:63:e2:72:c8:13:8a:f8:bc:a7:70:f0:6a:27:93:cb:4f:88:
69:35:61:3d:2e:d1:5f:27:45:78:a5:d1:3b:a2:be:78:26:3c:
97:d3:89:c7:76:2b:68:89:2e:26:0b:cd:fe:57:8b:9f:cd:6c:
16:58:ff:17:12:62:48:c4:de:b7:e8:25:06:82:9a:46:03:b0:
2a:d0:21:e2:d3:67:37:85:a2:b0:53:47:fe:83:56:93:5d:f8:
22:7a:04:09:87:68:1f:62:6e:1d:be:5b:df:19:ec:77:60:d8:
5e:9d:a2:cc:07:7f:81:e1:ac:8e:da:9e:95:be:92:68:51:e6:
c2:df:b2:86:e8:b0:d4:58:87:3e:1e:8d:fb:e5:0f:51:ca:b2:
8d:78:7b:89:90:36:7f:28:f5:a9:7e:b2:d9:88:15:72:e6:1a:
df:7b:cb:a9:52:57:7e:b7:11:d7:aa:27:c1:5b:87:86:94:58:
9d:41:22:f4:c9:03:03:0c:52:17:46:f4:cd:dd:f1:e7:a6:c3:
62:47:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:25:53 2025 by rpki-client