Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
File: ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft (raw, json)
Hash identifier: pl9Ug9MriDP92TVao7VPLFQRQHB8RTepyGVM6sOYxX4=
Subject key identifier: A0:81:F4:96:B0:81:58:E0:B7:93:34:BA:7D:FD:B1:03:80:CF:0B:D3
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Certificate issuer: /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial: 019950E5418776D2D1AB8DFA5FB46EB4C56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
Manifest number: 1688
Signing time: Tue 16 Sep 2025 05:00:25 +0000
Manifest this update: Tue 16 Sep 2025 05:00:25 +0000
Manifest next update: Wed 17 Sep 2025 05:00:25 +0000
Files and hashes: 1: e-gDJNXzm0Ybkz_ors_9mzoknFc.roa (hash: EmVgkp+dxUqbi6FSU/qMEIRuJJb2TeTwsYYhWoEauko=)
2: ghlEwsQZQs2UcsGEnGv2GYmqozE.roa (hash: IupvEzCg2+AgoEqXLEZo9g4xmShB4z81Opbof+wzS0A=)
3: mEEdwwEWwRFuOQjXEE0GqAJtD6g.roa (hash: 9OEXXQKo0v2yF8ajNKcSoh8Qu8qa2iGEylM4hM3dSfo=)
4: ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl (hash: raj9vf44PmFrCQlTtJY2ewM6TEejJJjIjqCr77+GGQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:e5:41:87:76:d2:d1:ab:8d:fa:5f:b4:6e:b4:c5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Validity
Not Before: Sep 16 05:00:25 2025 GMT
Not After : Sep 17 05:00:25 2025 GMT
Subject: CN=a081f496b08158e0b79334ba7dfdb10380cf0bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:07:8d:ae:68:9b:e4:ea:6d:05:8f:6a:9a:
a6:ea:ae:d7:04:18:7f:3d:3e:cf:21:ff:96:d5:b8:
68:d0:d2:fa:e2:0c:5d:b0:8d:ec:ea:47:be:4e:3f:
76:e0:29:dc:39:41:f9:0c:44:75:12:f0:3d:1a:f0:
ca:d5:0a:3c:3f:c9:59:82:b5:51:21:08:68:3b:96:
ac:f6:a8:17:a6:8a:52:6c:1e:22:20:28:8e:83:e5:
67:23:5f:89:1e:11:dc:89:2a:7b:d6:5b:a0:e4:11:
f2:4d:32:ff:7f:b3:29:cc:2d:3e:2f:80:0e:f3:b9:
55:e8:b4:ae:16:fa:54:a1:ff:3a:f1:54:e0:2a:47:
47:f1:f7:96:98:6d:06:cc:56:b4:d5:4f:c6:da:fa:
67:9d:07:43:85:d0:b6:ef:df:20:bb:a6:2d:67:a7:
14:8b:5a:ba:8c:7e:52:ea:77:28:c9:3e:33:a8:34:
2c:92:a3:2a:fd:ba:46:06:26:aa:0c:07:00:c8:64:
41:51:ce:46:d4:59:4d:ed:c9:22:ef:d3:d9:ab:04:
5a:2d:58:71:fa:db:11:05:b4:05:d0:00:19:dc:69:
f3:71:39:54:62:10:ca:fd:63:2f:8c:1a:31:f0:e0:
c2:f6:f2:9d:8e:60:6e:fc:98:dd:36:e7:f7:8b:c1:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:81:F4:96:B0:81:58:E0:B7:93:34:BA:7D:FD:B1:03:80:CF:0B:D3
X509v3 Authority Key Identifier:
keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:c5:72:a2:ee:64:3a:63:17:33:11:8e:3c:66:3e:da:ed:19:
1a:33:86:99:0d:f8:29:73:4c:7f:7b:2a:93:a9:b1:92:d6:7c:
67:0c:0a:f3:92:4c:de:1b:10:dd:98:80:5e:ce:3a:94:2e:93:
69:02:70:57:7a:b8:68:38:23:33:16:2a:b9:be:dd:98:26:de:
17:34:81:8c:fc:63:da:40:3b:49:6d:3f:52:44:9b:e5:09:06:
95:fc:fd:d2:f8:ec:35:19:e0:a4:8d:e0:33:46:db:f4:01:0e:
68:98:e0:d2:da:19:92:f4:e4:12:2b:8c:f6:96:af:b6:e3:ee:
07:cb:9d:09:d4:1a:26:65:ed:ee:d3:89:5c:63:44:f7:63:a4:
22:ef:e3:98:79:5a:0b:7c:ec:5e:fc:da:41:cf:3e:04:a4:60:
84:b7:a6:55:3d:aa:dd:6c:b4:8c:a0:a8:11:1b:3c:00:8e:39:
b1:b1:93:ff:da:dd:6c:e3:c9:7f:4b:fe:07:59:7a:e6:14:27:
09:45:5b:fa:45:eb:df:f5:75:8d:aa:79:a0:03:02:62:aa:eb:
24:92:da:d4:85:94:59:30:95:4f:fb:f3:9a:b2:d5:36:6b:3f:
fa:b7:c8:2c:c1:12:73:54:5d:64:ff:31:4d:6c:c2:56:bf:49:
f8:a2:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 11:21:41 2025 by rpki-client