Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: 3OwgOFTXmoaoZggw4wxjudHkUHPsS7I40suJpABnQOY=
Subject key identifier: F4:5D:6B:11:28:7D:8A:A8:09:5C:D4:71:57:C7:36:85:8B:63:18:3C
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 01984BC1EA038113E59BEC37FC7C3BE10321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0B48
Signing time: Sun 27 Jul 2025 12:00:56 +0000
Manifest this update: Sun 27 Jul 2025 12:00:56 +0000
Manifest next update: Mon 28 Jul 2025 12:00:56 +0000
Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=)
2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: 0NqtcCeOmnHOuY98jdXtbEoj+1/Kg/6ReZ3jCFr46Gk=)
3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:ea:03:81:13:e5:9b:ec:37:fc:7c:3b:e1:03:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Jul 27 12:00:56 2025 GMT
Not After : Jul 28 12:00:56 2025 GMT
Subject: CN=f45d6b11287d8aa8095cd47157c736858b63183c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b0:a5:d6:58:95:bb:40:34:8f:cb:8e:53:22:
83:4d:a7:28:10:3e:8e:d2:26:00:f7:9a:f6:fe:1f:
9a:13:a4:03:57:39:04:c9:25:17:c2:ce:72:47:d8:
61:aa:62:21:55:b5:38:b1:e5:76:d1:10:6e:14:ac:
99:23:34:2b:c6:e4:bb:ce:60:c6:22:55:d9:de:eb:
2c:da:09:6d:16:79:15:d6:73:42:95:c1:68:f2:3c:
d3:74:2d:49:71:8a:90:19:af:59:07:d4:cb:7e:0a:
4f:c6:70:a3:8a:d8:43:24:bd:25:a1:6a:cb:d3:33:
0b:ef:20:28:05:2a:9e:7b:eb:b2:18:3d:7a:80:a7:
bd:60:4c:e9:61:c8:11:00:43:e5:f0:d4:0c:d4:a3:
c0:b0:af:9b:b9:97:b5:ae:dd:43:a5:b2:90:0e:bb:
ed:58:d8:0b:80:d6:f3:44:b3:cb:87:e4:e1:9d:1e:
13:37:60:d8:76:0d:93:c7:e7:1d:bc:10:32:a0:97:
bb:3a:0d:c8:b0:92:f9:5d:de:1c:51:c8:91:89:2d:
07:5a:61:26:46:9c:35:e4:74:f7:3d:39:1f:18:e1:
23:e7:3f:02:13:f2:00:5e:52:2e:43:5c:58:91:46:
51:dd:89:57:bb:32:e5:ee:4e:65:bd:77:79:47:34:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:6B:11:28:7D:8A:A8:09:5C:D4:71:57:C7:36:85:8B:63:18:3C
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e2:95:3b:2d:f5:ea:6e:b8:86:99:7d:d9:4f:c4:f8:55:ad:
a7:e3:3c:1f:a9:47:2a:93:2e:52:e3:60:ff:05:4b:11:97:17:
03:47:ea:73:83:33:f7:eb:37:8a:27:c6:7d:bb:0a:a9:29:66:
28:e9:bb:48:bb:a1:a0:91:25:e8:5d:b6:6c:c1:fd:d7:14:bc:
76:d4:4b:5c:41:b3:3c:8d:4c:b3:ad:87:9c:a2:58:fb:5b:5f:
bd:01:6d:e3:de:b7:19:3a:e9:c6:a0:bc:db:de:ea:15:6f:e6:
c3:2e:1b:1e:a3:04:d7:32:1c:49:61:ef:06:70:67:af:3e:09:
12:6b:95:c3:28:ef:fe:0c:20:b3:50:52:f2:67:21:51:36:9f:
cd:c1:77:9e:48:2e:47:55:c4:b8:cf:ce:3e:4d:5c:03:c0:ba:
dc:9b:8c:92:dc:79:7a:f7:71:ad:28:30:78:ba:28:19:d1:f4:
dd:82:c2:63:94:f7:87:b4:4f:48:7e:5f:e4:a3:49:91:ef:2b:
b9:6b:d0:98:4d:98:6a:df:12:5d:3c:6a:2a:3b:84:b2:db:d7:
39:c2:3d:63:fc:76:78:dc:6d:5a:ce:23:a9:7d:a6:61:c2:9e:
de:15:a6:36:51:98:a3:a0:26:02:b1:84:35:a0:f3:06:a7:85:
04:6c:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:51:58 2025 by rpki-client