Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: AvQ364iSfwq+xAV1j/NsWSsJOxFTDPR9G3XX8YH2+4k=
Subject key identifier: BD:F1:CA:2B:2B:03:1D:14:91:B6:57:18:E6:79:5A:63:25:FD:DD:64
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 01985420053D906FC9F40C6913058C68F94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 0819
Signing time: Tue 29 Jul 2025 03:00:41 +0000
Manifest this update: Tue 29 Jul 2025 03:00:41 +0000
Manifest next update: Wed 30 Jul 2025 03:00:41 +0000
Files and hashes: 1: KGkiu_v0VLQmN7S0ksdeT71QkrU.roa (hash: JLkvT5B6nB370rTNimZvN5bMsuGtWZVcc7r812WnkMQ=)
2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: 8f8fZZ2+18iQkoG0c+iwxEfY0M5MMqFH+rFVyZRFDPM=)
4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:20:05:3d:90:6f:c9:f4:0c:69:13:05:8c:68:f9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Jul 29 03:00:41 2025 GMT
Not After : Jul 30 03:00:41 2025 GMT
Subject: CN=bdf1ca2b2b031d1491b65718e6795a6325fddd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:a9:d4:53:99:34:86:74:4d:b8:a9:18:13:
0e:46:72:92:99:2a:3b:91:ad:d5:d8:75:61:a0:c9:
7e:c9:a4:3a:fe:be:8e:dc:9d:a3:6c:4e:31:55:ee:
c4:2e:25:59:a9:8e:36:53:64:21:eb:68:45:28:45:
77:0c:ed:6e:2a:b1:30:c0:42:63:42:a5:49:dc:35:
13:19:df:a6:71:a7:fd:a7:93:b8:a6:fe:15:02:13:
28:b6:ac:fd:da:b3:a6:ad:b5:c9:49:0c:b3:71:aa:
a2:c4:b6:68:a2:26:86:94:cc:d8:c2:b2:89:1b:ec:
9c:42:02:c1:b4:66:b5:9d:42:ea:8f:40:c5:a8:6a:
9a:96:05:eb:3f:4f:58:52:64:3a:a4:14:3c:2d:b9:
ba:ce:69:0d:04:f1:bb:58:c4:1d:34:e0:e5:65:74:
9f:e1:45:f3:ee:fd:0b:0e:26:ca:d7:91:5c:de:a5:
cf:8e:2d:94:02:23:67:da:8d:25:32:ec:b0:89:66:
23:be:89:e8:37:19:cf:a3:3c:8d:7e:f4:5d:6d:11:
78:a2:67:84:09:01:a2:40:dc:db:cf:3c:5b:eb:7d:
ad:82:f4:fd:df:04:e6:0e:0e:ed:05:6d:14:56:c2:
a3:76:9d:d7:11:69:df:28:b3:19:33:0f:1a:61:8d:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F1:CA:2B:2B:03:1D:14:91:B6:57:18:E6:79:5A:63:25:FD:DD:64
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:33:7f:a8:7a:18:c3:54:93:a2:58:20:c3:ab:93:58:8f:
39:7e:66:f9:eb:6d:47:5b:15:3d:8e:61:52:47:c8:0c:8e:11:
cd:f0:24:3c:a4:cd:19:1b:1b:3a:7c:13:d7:ff:a4:64:82:31:
d1:02:59:bc:1f:4a:cd:48:38:7e:61:08:fd:41:4e:0b:f6:23:
b8:b7:66:99:17:ac:f9:a5:0e:ae:db:18:ce:7b:d3:78:b8:33:
38:de:48:40:1e:49:a7:71:a7:7d:f0:f9:e1:fc:e4:41:d8:eb:
13:b0:da:13:24:75:6f:75:aa:f8:56:fb:80:e3:84:50:75:d1:
14:60:69:e7:e0:11:8b:37:92:d5:95:09:a8:59:1b:2d:75:9e:
81:c6:be:22:38:0f:56:70:f6:50:50:89:91:88:35:58:8d:25:
f2:59:b0:d1:3e:26:6f:80:fd:14:27:95:80:4e:f3:6b:68:de:
b1:77:8d:95:6e:53:41:24:bf:6f:01:5b:5e:d3:ea:c0:0e:e7:
29:0a:63:26:1a:fc:8e:5a:76:65:ee:35:48:da:36:ff:f6:05:
ae:34:c4:5a:b6:32:58:54:96:c0:a6:dd:6c:dd:28:26:70:e3:
01:07:0c:87:7b:37:66:01:d6:06:d9:18:06:bd:c5:ee:00:d4:
f3:3b:fe:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:42:23 2025 by rpki-client