Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: SUhdW1MWJy0W2Y5gYVh8HyWVsW2plQAZrm71Gf5BRSw=
Subject key identifier: 06:FF:E5:DE:EC:A2:DE:79:10:7F:DB:0F:5A:27:63:DF:FD:A0:6F:10
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 0198499C5F352668F9F1D61ED8F095867ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 02:00:41 +0000
Manifest this update: Sun 27 Jul 2025 02:00:41 +0000
Manifest next update: Mon 28 Jul 2025 02:00:41 +0000
Files and hashes: 1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: D+gfL8qdMQVnBoUSwpBDya05a0K6GgPzmrc8b3r/3oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:5f:35:26:68:f9:f1:d6:1e:d8:f0:95:86:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Jul 27 02:00:41 2025 GMT
Not After : Jul 28 02:00:41 2025 GMT
Subject: CN=06ffe5deeca2de79107fdb0f5a2763dffda06f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:56:b0:10:52:a0:fb:d9:2e:38:c5:1e:5a:
0a:5c:3a:ba:b1:54:05:77:76:3d:fe:8e:a9:da:9b:
e0:69:b5:70:21:2e:a9:1a:e3:b0:e6:94:33:3b:45:
89:7b:10:9b:5a:c9:33:fb:69:43:e4:78:1b:08:8c:
5d:0d:5a:3e:da:a2:c6:41:5f:90:4f:9a:fa:c0:1c:
7d:00:d1:d2:0e:fb:fe:d8:7b:39:ed:a5:fa:b3:b2:
e6:10:71:a9:a8:3d:cd:28:c2:56:82:23:c5:1c:18:
1e:f3:89:c6:36:d5:d4:3a:41:47:dc:d2:03:61:59:
a8:66:11:0b:27:00:11:a8:e4:38:1e:69:71:4d:d7:
fe:c1:17:2e:f9:52:db:54:a6:55:d2:77:3d:44:97:
3f:92:aa:82:33:07:75:3c:54:e1:fc:8a:a6:2e:52:
dc:1f:c2:a0:0c:d4:88:92:9a:bc:ea:72:51:99:86:
47:57:cf:aa:af:b3:80:86:c1:77:0a:54:aa:2f:0f:
e6:a4:3b:a0:22:bf:f3:fe:2e:c0:e9:11:d9:99:3b:
97:e0:73:de:d9:b7:04:9a:a6:36:d9:fc:b5:e0:af:
4e:31:3c:9d:c9:52:47:8a:9e:ec:26:d1:2e:0d:b7:
6d:e4:b1:8f:62:c4:c0:73:fe:d6:a6:ef:80:ae:89:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:E5:DE:EC:A2:DE:79:10:7F:DB:0F:5A:27:63:DF:FD:A0:6F:10
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:16:5b:4a:83:b5:48:34:87:39:15:24:7d:27:f7:40:92:e7:
86:2b:57:2d:69:97:83:0f:51:76:26:45:9e:ac:db:c0:f3:b2:
20:3d:e9:1f:06:3e:35:5e:80:a1:cf:9a:0c:6e:ab:41:3b:c7:
a5:13:b9:eb:c2:75:07:49:97:fb:ee:79:38:97:c1:11:4e:20:
c3:4c:0d:2a:86:b6:84:cf:e2:e2:11:fe:ad:11:59:f9:20:fc:
de:9f:fd:85:4f:de:39:63:bd:ab:1b:02:dc:1c:95:09:87:45:
5f:fb:47:19:39:1e:8e:0f:fd:34:a8:92:45:66:c2:cf:47:6d:
35:a4:da:40:b0:af:ee:ec:83:c2:96:69:52:af:fb:a8:f7:d0:
49:51:69:c6:6b:45:e1:80:51:bd:2f:5e:91:67:63:0f:df:e3:
1a:ad:7b:0e:f8:1f:c9:c0:8f:97:d9:41:f8:c2:e9:7b:30:5d:
6f:da:0e:e8:fa:f5:f1:20:13:c3:6f:d5:5d:a8:00:c7:12:ca:
a7:0c:f4:7e:b6:a1:bb:bb:b3:00:f9:1a:1c:fc:61:8a:27:a4:
0c:43:6d:bc:f0:8e:9f:af:e7:a4:0e:46:d3:78:77:a9:4d:2f:
f5:cd:b8:53:f0:e7:ef:b4:e0:0f:3a:e7:bc:b1:ba:f5:0b:73:
83:14:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:04 2025 by rpki-client