Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: w3x4Qrv8xDFdcAY33oGUbG/SEA2U0JrKBo33er0a5VI=
Subject key identifier: CF:C9:50:1D:B2:61:95:EA:10:88:AF:DB:77:D1:42:6E:1D:E3:57:61
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 0199183FB34395C02671BF2B992C66E101AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 028E
Signing time: Fri 05 Sep 2025 05:00:51 +0000
Manifest this update: Fri 05 Sep 2025 05:00:51 +0000
Manifest next update: Sat 06 Sep 2025 05:00:51 +0000
Files and hashes: 1: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: VOcTznecEU7o7bnuYUln9iDX7G4Sq5TReUaXPeyNW18=)
2: YqC2VTxiSf6N6CH_T6N3pCLJERQ.roa (hash: a8gYqeVoJseoS34lomrK7Ci6A3BwLLCYd0bHvL6Bj+I=)
3: v7E-tTxflPnqxg3MpmR53F2Z6QU.roa (hash: Ghunk7sqbhHZuCust1Ewo+nGVQQe1Aek1JX2tRRm0JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:b3:43:95:c0:26:71:bf:2b:99:2c:66:e1:01:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Sep 5 05:00:51 2025 GMT
Not After : Sep 6 05:00:51 2025 GMT
Subject: CN=cfc9501db26195ea1088afdb77d1426e1de35761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:73:17:0d:5a:69:eb:54:60:69:42:48:77:
1a:be:f9:23:dc:26:6f:4f:1d:ec:88:03:f4:c4:14:
6b:db:86:b4:c7:c6:c5:b0:5b:03:5a:c1:5f:4b:03:
9f:a6:a5:12:68:1d:9b:c7:48:39:e7:b6:98:b0:1e:
c2:4f:f7:d3:ea:8c:40:5a:b3:2a:8b:a9:02:d8:e8:
eb:cb:5e:47:f2:8d:ac:87:42:b8:7c:28:0e:91:cc:
10:62:41:86:d5:70:ab:49:fc:14:1a:0d:08:38:97:
99:82:44:a1:e6:76:82:63:23:14:d6:e0:28:2f:36:
ee:fd:ac:8b:2f:0a:22:ac:ad:04:8e:a3:d8:a4:77:
40:5d:62:b9:01:f0:55:05:7f:3b:c7:22:3d:fd:ec:
66:af:0e:7a:11:5d:d8:cb:c0:96:43:fb:1d:4d:60:
cc:7e:ea:fc:52:c0:e3:3a:d5:4d:d0:5a:65:81:1f:
60:dd:27:27:61:61:c6:95:f0:e0:98:1e:a9:e4:38:
15:78:c5:2d:b7:ac:ec:ff:5b:12:b1:88:55:90:06:
79:45:7c:bc:de:65:74:ec:c0:9f:8b:6e:54:33:74:
5f:e7:14:55:4c:d5:66:fc:4d:2f:1d:e9:7a:58:10:
de:5b:93:da:68:22:e3:27:3a:69:a6:b0:dd:a9:ff:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C9:50:1D:B2:61:95:EA:10:88:AF:DB:77:D1:42:6E:1D:E3:57:61
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4e:7b:1d:04:6f:a6:c0:8d:6f:fa:d6:9e:42:fe:7a:89:a6:
52:e6:03:98:1b:dc:92:9a:8d:9f:90:12:ae:94:8f:6b:10:ff:
66:8d:a4:50:8a:23:03:ac:da:e8:d1:9a:f5:68:6b:c8:2b:14:
e4:5c:5f:d3:ae:6d:3a:27:f3:5b:06:b5:f7:6b:a4:d9:83:5c:
82:ba:6a:9f:f7:93:56:89:83:dd:9d:5e:86:c0:a3:01:d0:91:
a9:be:b6:68:c8:49:76:4b:62:da:2c:b8:5a:0a:12:59:3b:85:
fc:86:81:b0:56:24:18:7b:07:e5:d2:70:69:9b:eb:d6:b9:ac:
f4:86:29:ff:1c:cf:f2:40:70:cf:16:a3:9b:ac:4f:42:d4:31:
84:2a:c8:fb:6c:c1:ab:85:43:14:a8:47:5c:45:fc:c8:b3:b3:
d4:2a:d1:69:c6:98:aa:c2:d0:c3:11:59:12:c9:1d:13:4c:de:
40:8d:ef:17:a2:f9:d8:80:30:ae:57:d7:bd:26:cf:44:61:3c:
89:e9:b7:58:06:5f:65:bb:73:33:60:fa:9c:db:39:7d:74:d8:
b4:c2:d3:c8:17:30:67:ed:a4:d2:df:5f:9b:ab:56:4a:48:6a:
4c:6f:e6:25:56:f2:bc:ec:7b:24:fd:f4:82:a3:96:7b:7e:69:
fa:5a:ff:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:19:49 2025 by rpki-client