Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: Iv5rjWaO4P5Lzj/VGbAc03EkV3J2yjogU1xh8pXB4D8=
Subject key identifier: CE:F0:3A:DC:D0:95:40:0E:61:F7:CF:70:F3:80:A8:7A:7A:29:C9:63
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 0199646C99A076777B5BB040DD53451CFE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1698
Signing time: Sat 20 Sep 2025 00:01:02 +0000
Manifest this update: Sat 20 Sep 2025 00:01:02 +0000
Manifest next update: Sun 21 Sep 2025 00:01:02 +0000
Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: VNA6SpeAMvfEPui7F+cINWG8kWQaJJH3cUBz3M30ACM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:64:6c:99:a0:76:77:7b:5b:b0:40:dd:53:45:1c:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Sep 20 00:01:02 2025 GMT
Not After : Sep 21 00:01:02 2025 GMT
Subject: CN=cef03adcd095400e61f7cf70f380a87a7a29c963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:f3:dc:6d:c9:91:09:30:b3:1a:08:48:64:
86:a0:59:77:1a:2e:19:49:33:fb:fc:e5:88:4c:cc:
19:53:74:e0:93:01:11:6e:a8:db:98:5a:98:c8:01:
22:27:34:3a:fa:ce:c0:98:f7:26:d9:f9:d6:a1:7d:
00:22:4f:c3:22:d4:03:f4:b9:29:75:30:ab:32:17:
bd:37:90:ea:02:a0:ae:2d:80:b7:b5:93:43:2d:8b:
f0:2b:27:2c:9c:b5:a9:c3:11:b3:52:1b:68:9d:bc:
ed:c4:a8:33:18:06:18:a1:df:af:5e:6d:ff:1b:d2:
a4:39:16:b2:24:5f:48:d4:05:ad:42:5e:97:46:d1:
cd:c2:2a:c5:f0:84:1a:01:ce:b5:0d:60:2b:78:23:
2a:d0:25:55:24:60:20:2a:e3:17:e0:7e:0a:89:68:
4d:e0:22:e7:55:ae:6a:4d:2a:98:f9:88:cc:0f:d7:
ee:49:be:69:b1:49:50:71:cc:7b:9d:1a:b8:92:b1:
4b:8f:49:b7:6b:fb:35:4a:a0:cc:4b:78:e0:71:06:
75:e0:b1:e1:d4:9f:8e:10:5e:32:64:5c:6c:5a:31:
e8:81:6c:ba:0e:e8:a3:41:7c:ef:e9:82:9a:e8:c8:
fa:25:34:e2:9f:56:44:d3:55:95:36:cb:f3:74:3a:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:3A:DC:D0:95:40:0E:61:F7:CF:70:F3:80:A8:7A:7A:29:C9:63
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c9:20:5c:79:b1:de:ca:db:53:ca:9e:28:1f:8f:19:4c:1e:
9d:0a:9b:94:54:b6:32:3b:bf:cd:e3:c5:d4:cc:45:01:a5:c4:
70:7e:c0:9e:ac:cc:23:9e:ce:c2:ce:d2:cd:17:3f:60:3b:33:
f0:e0:08:b2:15:86:62:d8:ce:e1:31:c4:f0:fb:a0:a7:47:56:
96:11:eb:d7:bd:49:20:a6:77:8b:e5:44:93:95:2f:c3:9d:cb:
fc:2d:dd:08:ac:18:ac:65:d0:c7:c0:5a:23:93:d0:ec:59:74:
c4:2b:78:af:af:8c:a7:df:a0:21:ce:41:45:4e:5e:b2:4e:2b:
01:7e:d1:c3:20:cd:bc:a1:7d:e3:cb:fe:b1:c2:c6:71:15:c2:
43:0c:bb:ab:29:69:6e:61:44:46:2a:09:5c:5d:ca:c9:a9:77:
e6:52:45:08:8d:e7:95:a9:20:20:47:85:ec:1d:3e:41:e1:8b:
c9:ab:c4:14:3f:89:af:40:f1:07:61:64:23:31:80:97:e3:8a:
35:70:36:d9:65:a6:2a:ef:4a:6f:54:f5:f4:e1:a7:d5:1b:37:
75:76:d2:08:5c:93:2c:2d:9b:ee:61:b2:6e:9a:32:9d:3c:10:
5c:a9:ab:74:92:3d:d4:44:7c:19:8f:38:61:f5:54:dd:72:43:
9e:c3:4e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:07:54 2025 by rpki-client