Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: z3qa+YH0z2KfUj6jqACYpRGo2jliDoze61/rM+5+aFg=
Subject key identifier: E0:D3:70:1A:96:8A:EC:BD:C0:91:0A:AA:81:BF:71:F6:02:64:DA:73
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 0198537BA789EACC6213501B0229DED9B9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 160D
Signing time: Tue 29 Jul 2025 00:01:09 +0000
Manifest this update: Tue 29 Jul 2025 00:01:09 +0000
Manifest next update: Wed 30 Jul 2025 00:01:09 +0000
Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: K3f+uGP6IqzIVsG7JeLBN/nx/1S0wGF6cgyABr6siu4=)
4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:a7:89:ea:cc:62:13:50:1b:02:29:de:d9:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Jul 29 00:01:09 2025 GMT
Not After : Jul 30 00:01:09 2025 GMT
Subject: CN=e0d3701a968aecbdc0910aaa81bf71f60264da73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:31:d2:2f:e0:60:95:6e:12:48:5e:cd:ea:
fd:c6:ce:35:09:53:89:37:dc:79:b8:8a:6b:f4:9f:
c7:f7:5d:e1:6a:e8:cd:59:db:e6:b7:8b:ee:af:a0:
ae:33:26:7f:15:6c:2f:6a:9c:68:8a:d1:3f:89:47:
60:1a:85:e5:23:88:df:4b:a5:61:70:eb:a5:d3:66:
fe:9e:a2:78:b6:31:10:1c:7e:af:c2:a4:7c:c3:21:
26:d1:f7:0d:f8:c6:46:1d:e0:9e:bb:4f:71:82:b0:
1b:07:33:d2:78:77:20:f8:b9:66:75:2b:61:90:d8:
df:03:ff:72:a3:f2:35:a6:45:50:8a:c9:d3:c2:3b:
9b:9a:84:39:33:ad:fc:cb:d5:5a:51:0d:93:e9:96:
f6:77:7c:83:4a:91:b5:46:ad:fd:56:18:29:2d:77:
03:a1:bf:ac:82:d1:7a:ee:1e:da:82:a6:d0:5a:9b:
59:a8:72:58:ab:b4:92:11:e6:47:6f:9b:15:ac:a6:
e7:e5:1e:90:ea:84:9d:ac:b6:b4:28:26:49:bb:fe:
c1:ed:64:79:e0:0a:24:cb:23:4a:f3:1e:34:5f:43:
58:57:8c:d9:6b:60:92:f5:ef:47:60:02:37:b0:38:
4e:e3:12:b2:91:10:2b:d5:ed:9f:ce:f8:5e:ea:36:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D3:70:1A:96:8A:EC:BD:C0:91:0A:AA:81:BF:71:F6:02:64:DA:73
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:27:37:c0:52:d7:f2:8b:94:54:5b:0e:1b:9d:92:75:ba:e7:
c4:89:62:72:64:75:c9:e0:06:ff:1f:69:e3:27:c6:43:8f:3a:
4f:d8:00:90:5a:1e:c8:d6:ad:20:b3:a3:23:8c:03:9e:2a:33:
d4:58:63:0c:42:c8:5a:24:95:25:96:5b:99:53:a5:56:fa:3b:
2b:b0:3f:7c:9b:c0:54:f4:2b:96:fc:87:ff:11:ae:27:66:ca:
23:10:aa:5f:7f:68:26:94:fa:e3:87:fd:20:7d:20:78:0f:7f:
2f:60:82:d4:93:bc:77:ae:97:56:af:bd:87:5f:2b:23:6d:94:
de:03:99:c9:64:3b:f3:e1:7a:da:ac:d4:0a:33:cf:ef:e9:67:
12:cc:76:48:1a:54:e5:96:fa:ea:39:a3:ac:5c:26:17:f0:bc:
9d:6a:de:97:ab:11:5f:66:40:db:d6:64:71:3c:42:f0:5c:bb:
e0:c5:b4:26:92:99:8d:0a:6a:e2:56:28:97:29:30:c2:c7:f7:
13:a6:ba:ab:22:9e:c0:39:27:b3:fb:cf:b4:63:81:cb:1d:14:
d5:55:fd:73:07:33:02:e4:05:2f:f9:8a:2c:bf:83:8c:15:3e:
85:83:08:35:57:cf:bd:67:5b:6c:7a:ad:06:5f:73:e7:d0:90:
c9:f4:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:11:54 2025 by rpki-client