Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: U+E3hTpSMzSZ+AyHaXML9PPHT77ALjh6TUcldBDRh8g=
Subject key identifier: E7:14:EA:69:D3:60:9C:F8:A9:00:4D:31:0E:73:0A:E5:B8:A4:89:80
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 01993349AAF94E2D6FAB6A8EE89E6BB3F0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 11:01:29 +0000
Manifest this update: Wed 10 Sep 2025 11:01:29 +0000
Manifest next update: Thu 11 Sep 2025 11:01:29 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: oVZBrWxhdcWsWfcoR+G78oJHBy+wAhPICh37c53WUXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:aa:f9:4e:2d:6f:ab:6a:8e:e8:9e:6b:b3:f0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Sep 10 11:01:29 2025 GMT
Not After : Sep 11 11:01:29 2025 GMT
Subject: CN=e714ea69d3609cf8a9004d310e730ae5b8a48980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:b6:f8:0a:72:aa:be:c2:8b:aa:f7:dd:f8:
5d:89:7f:d8:92:10:12:2b:57:15:d5:44:4d:c4:dd:
f6:85:ee:b2:bc:fe:1d:70:6c:91:b7:d6:6b:93:ba:
13:46:e2:cc:5e:d6:b7:f9:be:fa:aa:35:70:9c:7c:
9a:a5:aa:f2:45:92:0e:f4:01:25:df:af:19:28:ad:
f2:c9:dc:36:92:b8:e3:ba:43:06:18:38:fa:33:82:
8f:1f:10:a2:95:06:2b:ea:0c:3e:fa:ef:04:0a:85:
b1:3c:2c:a2:cf:8b:e8:9a:23:e3:72:aa:8a:08:30:
bb:c9:0a:b7:aa:b5:71:12:ad:ac:3b:f7:72:1a:52:
e4:7d:28:42:35:55:33:42:7d:46:bd:87:ca:6b:9c:
8e:a3:67:97:2f:f1:25:50:a9:a2:82:12:54:68:98:
19:47:00:1b:92:87:47:a9:ef:23:28:fb:bf:92:6a:
ad:a2:c7:ae:be:92:0e:3f:08:40:c0:8d:d4:42:e6:
41:fb:ba:3c:fd:9d:15:be:3a:e2:83:95:a2:92:0a:
ff:50:ac:c1:b1:cf:9d:de:dd:a4:61:33:cb:a6:93:
d3:35:a4:c5:54:ac:7c:70:b9:5d:87:49:c8:7f:f6:
c2:a7:50:ca:45:a7:d7:e0:43:45:06:33:62:36:93:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:14:EA:69:D3:60:9C:F8:A9:00:4D:31:0E:73:0A:E5:B8:A4:89:80
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:52:7b:c1:cd:07:6d:0a:d1:0a:1d:0d:dc:99:db:a9:be:2e:
37:cd:a6:c0:52:41:30:36:98:3b:8f:cb:2f:94:bf:91:d0:27:
de:6f:9d:15:ac:8e:86:b2:d6:a3:33:f6:96:b6:6b:30:2e:b1:
0a:ad:5d:42:8e:a8:a9:90:82:69:19:d3:e7:1d:2e:34:7c:f6:
af:1d:af:fb:8d:e8:14:8d:4c:46:12:11:f1:4b:14:83:f4:67:
61:25:70:24:59:fb:86:93:7f:a4:f6:fa:70:5c:2d:97:df:a6:
f8:1f:b2:7f:1a:72:e2:2e:e5:b0:fa:f6:bc:da:49:d5:18:70:
9f:1f:6d:3f:26:ff:79:c4:88:49:6a:6e:b8:15:dc:37:69:2c:
0b:ef:5f:c7:cf:63:db:ab:2f:4d:fb:8a:9f:a6:34:cb:5f:33:
89:06:ab:fe:4b:22:01:f3:37:4a:3a:46:43:02:fd:cc:32:62:
55:79:61:b6:a4:6d:ab:ef:6b:33:d8:bb:81:98:fa:5c:17:e4:
75:10:ea:db:55:d4:76:85:bb:6f:2f:a2:b0:da:ae:d8:b7:02:
8e:6c:c6:44:e1:92:4b:7b:0f:a1:5a:07:07:1f:3e:3b:dd:3b:
6a:f6:9c:77:65:9b:92:de:43:ab:af:cb:55:9b:43:ad:42:82:
ea:0d:d0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:11:09 2025 by rpki-client