Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: qrrY+Bg/4BKkJ7sun3clznG9lfVY86T/+0KvKqzliKI=
Subject key identifier: 2E:DB:A2:14:8A:E2:F0:D0:2A:C6:78:19:F3:56:86:4A:25:84:41:80
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 0198499BF853C05FA2C2783FA5EC8C44CAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 02:00:14 +0000
Manifest this update: Sun 27 Jul 2025 02:00:14 +0000
Manifest next update: Mon 28 Jul 2025 02:00:14 +0000
Files and hashes: 1: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=)
2: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: 6yc8tlH12jOCFx11ILqlrWPzDHejP4tORXt1DWzJ8c8=)
3: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f8:53:c0:5f:a2:c2:78:3f:a5:ec:8c:44:ca:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jul 27 02:00:14 2025 GMT
Not After : Jul 28 02:00:14 2025 GMT
Subject: CN=2edba2148ae2f0d02ac67819f356864a25844180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:7e:ad:3a:88:6f:80:86:82:e3:9a:e6:46:
a1:f3:f0:16:33:42:b7:0e:f7:99:a9:61:b7:43:78:
93:2a:6d:24:34:11:e7:4a:b9:dc:39:a4:49:8a:2d:
5b:1e:4f:e9:07:73:8d:13:02:f0:65:33:a6:aa:aa:
19:4f:4d:48:3a:3d:31:d8:ad:b4:e1:41:b6:e0:0d:
a1:3a:38:3d:87:7d:fa:31:31:89:b9:fe:5c:24:5e:
92:a3:c8:10:c5:1a:66:dc:50:c6:57:cc:1a:9a:34:
72:49:8f:c8:24:21:56:0d:1e:c6:d8:b0:da:f5:8f:
78:d4:f5:34:d4:9a:a3:fd:01:c8:13:8b:01:32:c6:
18:b4:67:79:f6:ae:59:71:59:30:99:e2:2e:4a:ff:
91:1f:1a:c3:94:7e:29:fc:ad:91:9d:42:b2:22:91:
91:8c:d4:8f:35:f5:44:1e:6d:41:f1:cd:70:50:a1:
46:1b:14:00:2d:02:ee:9b:2b:a6:0a:b6:13:2c:cb:
b0:ad:a4:af:fd:43:a9:e8:68:3b:2a:d6:09:59:f6:
7c:a8:e6:11:62:0a:f1:03:b8:a6:12:dc:a0:55:10:
b0:be:23:76:a9:32:88:02:22:21:a2:d1:bf:97:9e:
df:78:6d:bc:68:7a:63:ce:c5:b4:dc:05:2a:c0:0f:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DB:A2:14:8A:E2:F0:D0:2A:C6:78:19:F3:56:86:4A:25:84:41:80
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f0:38:4e:fb:8b:be:ba:4a:b7:2e:05:49:5e:18:01:6d:31:
b2:f8:44:34:5f:a9:35:84:71:e4:ba:6e:ba:8f:d7:5f:14:b2:
28:d4:a1:73:5c:a3:f1:30:fa:2e:a2:8f:34:72:64:7d:13:60:
1d:f4:54:89:91:9e:bb:26:04:39:30:33:03:77:f2:f7:86:b6:
e0:80:45:fe:c1:c2:9e:7e:dd:a7:76:7e:40:7c:d2:44:99:b2:
ab:9b:a3:22:fe:dc:90:4c:a0:8a:ea:5b:77:26:ea:a1:66:dd:
3f:70:b1:0f:a0:d8:a4:33:65:df:e7:9a:6e:4a:cb:fb:cb:19:
5f:65:85:6e:f9:9f:df:7a:70:17:fb:db:56:b5:9b:b6:85:16:
fa:7f:d4:3a:bd:69:8b:bb:ba:51:91:6f:1a:f1:5c:e0:7f:b6:
bd:80:72:e5:3f:76:1d:b6:fe:2f:ae:8d:52:2e:97:1e:11:42:
08:17:8b:af:5b:a4:58:28:b0:76:ae:50:53:85:3f:30:1c:89:
aa:6e:b9:f9:cb:05:e3:f6:57:1a:6d:b5:f4:e7:8d:fd:4c:30:
ea:aa:45:54:58:30:bb:7c:6d:89:d2:2c:96:6c:f9:b9:ce:e8:
60:b6:3e:b9:ee:46:fd:e5:8b:01:e5:78:9d:b3:a1:f0:c3:dc:
b8:ff:78:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:19 2025 by rpki-client