Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
File: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft (raw, json)
Hash identifier: S3Xnns/p+HfGGYrde1x6Fo1M14ittfdAYFuNduBchBM=
Subject key identifier: 98:9E:5A:D8:2F:4A:95:A5:12:D9:FB:6A:2D:B6:20:FA:29:6B:EB:55
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 0199225534DECCBE2DDFCFAA59F558B0C672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
Manifest number: 0F42
Signing time: Sun 07 Sep 2025 04:00:33 +0000
Manifest this update: Sun 07 Sep 2025 04:00:33 +0000
Manifest next update: Mon 08 Sep 2025 04:00:33 +0000
Files and hashes: 1: JyWi5BFZcLnbfEzmECOIrpo9WqY.roa (hash: BGeaCEXgvEq5NNxKl+Ag2+yFWkLD9Y1n05TPe3xR8kw=)
2: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl (hash: JmmtQnoo17N8e2wru5RICfHK7hEKt+O4qv2zF3PXtN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:34:de:cc:be:2d:df:cf:aa:59:f5:58:b0:c6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Sep 7 04:00:33 2025 GMT
Not After : Sep 8 04:00:33 2025 GMT
Subject: CN=989e5ad82f4a95a512d9fb6a2db620fa296beb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:c0:b1:a2:0b:c7:14:85:1c:db:0a:33:64:
0f:f1:73:92:ff:fc:62:a1:da:4b:1f:7a:1a:bd:5e:
9a:c4:c5:f4:40:49:47:eb:4b:1d:d8:ed:4b:db:ca:
a3:18:19:b4:53:88:fb:c3:4f:ec:24:a2:97:37:c1:
97:53:96:8f:f7:fe:33:f3:18:14:56:4f:18:6c:d2:
30:ab:37:1e:51:3f:47:88:b2:84:e6:25:d3:2f:95:
ab:79:be:30:c7:8b:b1:16:6e:cb:cf:3d:69:4b:b2:
d8:09:5e:be:1c:a8:21:4d:e3:87:8b:67:e0:23:f9:
ab:6e:f6:cc:ef:02:c2:72:ff:b5:00:95:e9:93:49:
8f:e3:b2:e4:22:cc:80:50:ed:be:ad:af:f9:43:ef:
7c:48:a9:ba:f0:23:56:f7:be:48:fa:4f:ce:41:3a:
a9:a8:ca:ee:f9:ca:c0:39:d8:06:46:5c:0a:23:f7:
f4:e1:ce:b0:54:9f:19:7b:92:3f:5d:98:8b:e0:7b:
da:25:6d:ab:3c:66:a1:b5:b9:02:66:ac:04:de:a4:
5b:63:31:f5:2c:32:ac:b2:68:e8:3a:14:59:fc:fe:
41:46:2f:da:0f:19:26:51:15:14:ed:f2:26:c2:14:
b2:a9:be:56:3b:5d:4b:b7:92:1a:24:1d:76:7a:08:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:5A:D8:2F:4A:95:A5:12:D9:FB:6A:2D:B6:20:FA:29:6B:EB:55
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ef:20:d2:c2:0f:dc:2e:03:d6:5b:11:34:12:a6:8c:b1:ac:
dc:3b:48:9e:1b:c9:ee:b1:25:ee:40:47:f5:7c:5d:e6:8f:0c:
41:76:98:7b:75:14:91:28:7f:36:90:9b:05:e4:4f:a9:24:f3:
29:ec:b3:fe:9c:3a:bd:0e:03:90:ca:e7:65:42:50:50:7e:0d:
d8:81:9b:c0:71:22:46:fb:a1:45:d8:bc:dd:a4:6c:80:89:05:
87:9c:13:1b:8b:27:fd:46:2a:68:16:f7:08:9d:df:c5:27:cb:
42:34:e0:6c:90:e2:e4:65:9d:ef:67:0a:61:65:f8:e0:58:a5:
83:1b:04:76:99:15:51:8e:cd:03:66:15:86:1b:f5:36:87:d5:
cc:44:ec:f5:af:f4:bb:8f:91:27:0e:10:3d:81:16:d4:34:1c:
91:4b:81:15:cb:61:40:ab:df:20:6c:95:40:72:38:a9:ed:f5:
3a:90:99:36:1a:ef:40:5f:5d:81:a3:11:d6:f8:b3:3f:ab:d0:
bc:35:7e:90:19:8e:52:98:04:6d:4d:fd:d9:95:e1:65:85:c7:
37:59:59:c3:fd:30:51:23:98:5f:9f:4d:5a:42:8a:90:6c:c1:
a2:78:df:56:5c:97:c0:90:2b:b5:cb:9b:fe:7d:97:73:c9:34:
79:75:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:34 2025 by rpki-client