Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: 4DDzSqsKqaVcnMacAsqelLhbTEt0hX1MgsrkrKExxpo=
Subject key identifier: A1:3C:6F:E4:B0:7D:1E:2C:34:18:FF:D0:CF:91:DB:35:7C:93:52:6E
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 019921B26798EEF56B78C81B77D14CA49340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 1299
Signing time: Sun 07 Sep 2025 01:02:43 +0000
Manifest this update: Sun 07 Sep 2025 01:02:43 +0000
Manifest next update: Mon 08 Sep 2025 01:02:43 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: 4+bEVfP+OIDuZNmsd6zpOizQE744XDkb71OOnu5Bhc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:67:98:ee:f5:6b:78:c8:1b:77:d1:4c:a4:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Sep 7 01:02:43 2025 GMT
Not After : Sep 8 01:02:43 2025 GMT
Subject: CN=a13c6fe4b07d1e2c3418ffd0cf91db357c93526e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:3a:35:20:a3:0e:d1:9d:24:b6:d3:a6:63:
29:04:a3:60:41:64:5a:44:32:ca:11:4c:dc:6c:6f:
2d:49:75:60:b1:37:c1:53:4b:ec:af:63:6e:ee:e3:
e5:a5:56:8c:a7:79:09:5d:37:8c:44:68:0d:23:b7:
8d:dc:f6:ce:97:7a:71:8a:37:ef:fa:91:6f:c5:54:
71:99:a8:3a:cc:22:34:3b:c6:53:0b:92:2f:05:6a:
08:4b:aa:a7:de:29:78:28:b3:01:61:57:05:23:6a:
af:9f:71:6d:77:af:fe:26:1f:1f:47:59:cc:55:2a:
d6:d4:95:e6:80:bd:31:d8:38:43:79:ee:28:8a:a7:
97:5b:89:d3:26:31:89:f6:c4:5d:53:fe:57:4c:0a:
14:5b:f4:02:c1:a7:62:46:38:5e:ea:92:4c:a7:a8:
36:e4:24:1d:ed:5e:36:55:8a:36:b2:7d:c3:22:c4:
69:69:cf:54:c1:94:10:94:5b:74:4c:a8:13:89:d0:
a8:f7:f6:4c:bc:f1:13:d1:e7:10:bb:11:d9:47:24:
12:52:39:a1:14:95:19:fe:5c:b0:a2:37:75:fa:22:
99:5f:ab:09:60:4a:3e:e2:1d:af:f2:5d:2c:78:39:
8e:c4:16:70:21:48:ca:38:ec:3f:21:01:10:59:f3:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:6F:E4:B0:7D:1E:2C:34:18:FF:D0:CF:91:DB:35:7C:93:52:6E
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4b:65:11:d6:c1:1c:fb:37:2b:c0:0b:1a:05:f3:15:8e:60:
66:c1:a0:5f:70:35:bd:a1:64:8a:e8:fd:c6:b5:ff:80:1a:61:
61:66:2a:20:8a:4e:e8:34:9f:e2:6a:62:2d:aa:42:35:0d:26:
cd:bf:ae:e6:24:4a:ec:84:b3:a1:90:ed:f6:43:24:fe:cd:21:
87:5c:d6:8e:98:a4:b7:1a:02:76:f0:58:5d:0d:a5:43:dd:20:
c9:7e:6c:05:0c:00:ea:9d:14:81:6a:2d:7f:a0:8d:49:43:75:
23:c4:e2:9e:6d:a1:f5:01:93:39:99:a8:f7:1f:28:00:4b:41:
92:73:af:49:ad:6c:9b:9c:78:a8:5d:35:d7:2d:ea:5d:bf:0e:
1d:a2:01:39:53:37:cf:e4:26:87:13:0b:12:e2:bf:43:51:9b:
61:49:df:63:bc:a0:54:e3:1b:2d:7d:54:b0:bb:da:fb:ef:ac:
ae:46:30:cf:42:42:51:35:8e:d8:f0:74:f9:57:5f:0d:bc:e8:
b1:9c:f5:38:e9:ed:f5:8c:20:14:9b:4d:45:76:d8:65:e9:ce:
01:56:9b:0c:38:7d:ac:2d:d4:f8:0b:27:f2:a1:38:a3:67:c1:
41:a0:f5:d8:35:02:7a:eb:7e:7d:f3:57:5a:8f:5b:e3:28:4e:
5b:92:d9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:11 2025 by rpki-client