Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: pz1xXa9IEdLcebvb0f9diyAhRhJoimz/nQzcFxubL/I=
Subject key identifier: 3C:9F:05:8C:FE:1A:38:20:F8:84:8E:E1:A8:AF:44:E1:BD:84:21:65
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 0198477842A4B4ACBBCBAACCFFADD9A5C4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 16:02:00 +0000
Manifest this update: Sat 26 Jul 2025 16:02:00 +0000
Manifest next update: Sun 27 Jul 2025 16:02:00 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: eKxhV2MzRT99BSD/+81zqQaIjlHsfs8pXvvRhtkO+bw=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:42:a4:b4:ac:bb:cb:aa:cc:ff:ad:d9:a5:c4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Jul 26 16:02:00 2025 GMT
Not After : Jul 27 16:02:00 2025 GMT
Subject: CN=3c9f058cfe1a3820f8848ee1a8af44e1bd842165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:9e:fd:cf:d5:f3:e1:f3:f9:dc:95:72:3f:
bd:4c:41:d2:97:2a:5f:9a:24:43:0a:38:1d:d8:9d:
98:3e:33:ff:df:f0:53:d7:5e:9b:99:bd:0e:f1:2e:
1b:ca:c7:68:d6:63:33:63:b4:a0:19:c3:8b:b3:17:
0c:af:18:8c:37:89:72:2e:d2:37:b2:48:16:fd:f4:
e4:8e:b0:8a:2c:84:49:a8:c7:97:5d:6f:88:e3:a8:
a0:48:53:ea:cc:c1:93:98:7d:51:b3:11:b4:71:be:
55:d9:aa:c2:57:cd:ad:6c:06:b2:83:40:98:bc:1a:
6c:33:59:3c:cb:42:00:5b:bb:37:e7:21:6c:4f:24:
26:88:b1:29:cd:b5:bc:04:8f:2f:8d:6f:1e:71:03:
11:62:d4:40:ba:23:7d:25:af:2c:67:5e:27:42:dc:
0a:c4:a2:3d:93:06:1c:10:e1:10:9b:46:b8:8a:0b:
93:f4:f6:3f:3d:23:b4:85:bd:71:f2:90:33:5d:0f:
a9:16:f7:89:eb:a1:13:70:44:1f:61:ee:19:a7:cb:
68:e7:d6:86:5f:23:31:fe:0f:51:5c:94:e3:9a:39:
49:14:87:93:6f:9e:f2:e9:2d:e9:24:8f:56:fa:c7:
2c:d5:71:bc:3f:ed:87:75:81:52:c1:03:ff:97:6f:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:05:8C:FE:1A:38:20:F8:84:8E:E1:A8:AF:44:E1:BD:84:21:65
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b0:6f:4a:ac:0d:9b:7f:db:60:02:f8:14:34:f7:6b:71:dc:
11:e1:20:97:95:fd:44:22:7c:d0:7b:a8:1a:74:39:e3:e0:47:
7c:c3:2c:c8:3a:ab:c7:40:58:7f:9b:48:1f:e6:22:6e:87:5e:
20:ff:17:52:09:e0:b0:04:cf:6c:60:fa:b1:b2:2d:33:34:45:
63:0a:dd:e4:84:69:62:dd:f9:c2:ec:43:fd:f5:f0:01:34:89:
f0:04:9d:f7:d0:34:06:45:72:2c:e6:7c:ce:af:d7:ee:bb:db:
85:0a:81:15:9a:ea:a8:22:af:61:81:51:b1:f5:3f:56:00:8a:
e4:75:9b:08:58:16:6b:2a:84:c2:bc:ca:e8:23:81:41:ee:9a:
57:57:af:5b:40:83:c0:c8:e5:ad:8f:a6:de:b8:1e:0a:c6:8c:
38:c1:ba:08:13:d0:34:82:43:83:6c:0b:c1:fe:51:ef:d4:d6:
b2:31:ba:62:45:6c:09:e2:71:7b:03:df:a9:67:bf:e0:1b:04:
1c:33:cb:b6:78:e8:e2:68:d4:e6:47:47:16:0e:e5:64:36:12:
48:a4:84:89:0c:d8:d1:7c:ce:b6:f6:29:71:52:ee:2a:9b:67:
b5:50:29:9f:e0:86:89:6d:78:61:1f:ff:0b:29:57:08:60:5f:
62:5a:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:57:28 2025 by rpki-client