Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: KB/rDAB/Xt+1QfUxWnjABFoHcq58JMjZUbIw3c64R5w=
Subject key identifier: 8A:1D:84:1D:B5:BC:8C:D2:C5:C9:D0:D3:8F:D9:3C:B7:63:7F:A9:3F
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 0199312461D7F55451A96D876D3B25994F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 11CE
Signing time: Wed 10 Sep 2025 01:01:31 +0000
Manifest this update: Wed 10 Sep 2025 01:01:31 +0000
Manifest next update: Thu 11 Sep 2025 01:01:31 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: vOl1TyWM2drwy30vZESqwDapo7SZLBCSA8ox6mncKAY=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:61:d7:f5:54:51:a9:6d:87:6d:3b:25:99:4f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Sep 10 01:01:31 2025 GMT
Not After : Sep 11 01:01:31 2025 GMT
Subject: CN=8a1d841db5bc8cd2c5c9d0d38fd93cb7637fa93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:a0:d1:2e:1d:1d:8b:81:01:7e:09:e0:fc:
8b:be:b7:4a:80:62:08:2e:0f:a9:d6:e4:89:d9:5e:
2d:3c:a2:b2:3b:fe:31:82:e2:86:07:7d:b2:04:62:
1a:cd:6b:d7:04:d4:b3:51:92:a2:40:e7:2b:72:2e:
8a:ec:10:fb:2a:b8:da:08:36:56:4d:ec:b1:dc:83:
38:7b:14:18:20:a1:3c:41:78:99:af:4b:bc:72:ff:
d5:4b:3b:4e:fb:82:ec:33:81:a2:fc:7a:df:33:07:
e6:86:aa:76:03:01:fb:b7:26:12:6f:44:48:8b:fd:
02:0c:50:72:1a:55:e8:55:aa:31:8d:9e:b7:64:2c:
30:be:28:51:04:31:ec:1b:0d:f0:02:e6:6a:d5:53:
3f:de:1b:22:a7:c1:01:2e:d2:76:24:86:72:c5:07:
41:15:2a:f6:d6:9c:67:69:5b:c1:02:1d:45:83:f4:
90:c0:a0:ba:ed:39:51:39:06:aa:59:ab:58:3c:e5:
23:94:98:76:32:2f:a7:e2:69:9e:84:18:6a:24:b1:
e4:0f:b2:ea:de:1f:21:8b:05:50:c2:d8:79:6f:0e:
63:27:dc:4a:d9:fe:23:4c:e9:ca:bb:d1:da:3a:7c:
6e:95:f1:3b:fb:aa:f7:42:60:28:55:ad:17:c0:cb:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1D:84:1D:B5:BC:8C:D2:C5:C9:D0:D3:8F:D9:3C:B7:63:7F:A9:3F
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:38:02:e2:65:b8:42:bd:79:f8:e9:48:6e:b5:b4:4d:91:b3:
ba:e4:33:e6:95:d9:52:3f:36:60:06:3c:1b:17:c5:6b:1c:ba:
2b:a5:66:9a:45:b9:f1:8c:05:a4:75:33:b5:f0:c5:5d:8d:af:
61:68:2f:1f:bb:ae:35:4a:34:c3:cb:0e:69:d2:ef:2f:3d:76:
f4:7d:19:a0:62:07:3e:92:00:71:fc:dc:d5:ad:8c:0d:fa:34:
9c:56:6e:b7:54:af:84:fb:bd:36:39:7d:e7:2e:bf:49:2d:b6:
71:0b:f7:df:9d:7f:04:c1:51:a8:e0:8f:73:8c:79:f6:eb:e1:
45:9e:cb:8c:a9:74:94:81:24:df:d0:21:15:cc:04:7b:b4:18:
a0:21:2b:76:ae:8c:c6:fd:e1:d1:1e:57:8a:61:fc:40:37:7a:
8b:27:d8:3b:ad:50:88:af:d4:e6:f0:08:4a:28:97:cf:8a:69:
e4:d1:3c:f4:74:6d:5e:97:7d:43:b8:a6:07:a6:88:f5:ea:b3:
d6:48:24:ab:5e:76:61:df:20:97:1e:36:fc:6c:69:54:1a:4d:
5a:9b:3b:97:55:9b:e2:a6:e1:00:9b:1c:11:f2:5c:13:7f:cc:
97:c6:01:51:b1:82:00:2e:1f:11:2f:75:d9:04:93:96:ef:3e:
9d:22:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:03:09 2025 by rpki-client