Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: 8gOp1isNvX+CGqs3dnnT24aw2MtCizlYn4dxNrfzEUg=
Subject key identifier: 09:02:D7:18:06:35:78:99:CE:30:DE:EA:EE:98:96:93:BA:AC:24:36
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 0198CAC8DA72459BC6BC4062585B0F14B8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 1642
Signing time: Thu 21 Aug 2025 04:00:17 +0000
Manifest this update: Thu 21 Aug 2025 04:00:17 +0000
Manifest next update: Fri 22 Aug 2025 04:00:17 +0000
Files and hashes: 1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: PUNerc/t+auUZPVcuHoUE+8vdbt6ehzyR9ksEUKWGrQ=)
2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:c8:da:72:45:9b:c6:bc:40:62:58:5b:0f:14:b8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Aug 21 04:00:17 2025 GMT
Not After : Aug 22 04:00:17 2025 GMT
Subject: CN=0902d71806357899ce30deeaee989693baac2436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:ce:0f:6d:0c:de:5b:18:43:f3:af:7d:88:
19:34:b8:cd:d1:08:aa:f3:e8:89:06:7e:25:91:c1:
5a:4e:46:39:47:7b:f4:9b:9e:a7:48:3c:41:a0:89:
77:99:11:51:0e:44:f0:be:4e:87:1c:f6:0b:8e:47:
ff:b9:63:4c:d1:ef:13:42:a5:7a:f5:f4:cf:16:fa:
80:d1:25:ba:46:0c:b0:dd:8a:90:14:51:ba:7e:04:
62:6c:89:94:81:06:8b:2c:3a:37:a8:6a:e3:4d:54:
71:19:dd:de:d4:8d:09:59:28:7c:e3:ce:40:3f:57:
4f:ab:a0:8d:ba:29:14:c8:5b:2d:ca:e2:ee:aa:84:
d2:d2:49:bb:19:73:29:e2:97:c5:5b:f8:eb:61:c7:
ff:ff:7c:af:e0:3f:3a:79:37:67:ce:28:01:9d:fd:
e3:7d:24:60:2a:d1:3c:c3:cc:59:9a:29:6e:05:ce:
8b:55:71:6b:ac:0b:fc:8c:73:37:84:9c:4f:7c:fb:
46:3d:a0:92:3a:33:19:a7:6a:af:e2:7c:78:f8:d1:
45:b9:80:fa:38:78:f9:d2:f2:d5:0e:b9:30:0c:77:
86:1e:71:72:40:97:6f:26:82:7b:47:2d:4e:3f:3b:
c2:9b:82:47:16:7c:68:a6:55:3a:ca:a4:47:e4:d0:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:02:D7:18:06:35:78:99:CE:30:DE:EA:EE:98:96:93:BA:AC:24:36
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3f:99:64:1e:f9:62:fc:cb:cb:e1:94:1e:d8:a1:0c:49:f6:
31:87:7b:2a:fe:c0:2e:0a:08:5b:12:d8:79:2b:7e:4b:7e:14:
fa:e3:6e:d0:26:e2:0b:ee:b9:31:57:21:e6:e2:21:fe:76:0f:
21:e7:2a:27:1d:8f:72:46:ae:29:0d:6a:a1:26:b0:e1:37:6a:
fa:4b:cc:c0:2c:b1:c2:ce:27:b4:8c:a2:d1:5f:f3:a1:2b:c8:
9d:d1:11:a2:79:d1:92:24:a1:53:77:fa:fe:8e:fa:c4:01:6a:
c0:2c:9a:c2:dd:dd:b5:47:6c:a1:bb:41:87:27:6d:c9:ae:3a:
27:68:6a:71:b0:25:10:9d:cc:12:49:9a:34:97:49:68:e1:5f:
11:de:d6:08:8f:85:2b:95:f8:42:0f:df:a6:a9:f1:66:e5:08:
83:03:21:5b:47:90:67:60:21:1c:46:b3:da:7e:ef:3c:33:62:
2f:ec:51:fd:44:62:11:4e:88:d7:66:d7:c0:cb:3b:3e:6c:7c:
89:4c:1b:16:52:10:27:5f:c6:ca:01:5c:f2:72:4a:eb:60:05:
ac:f2:52:ff:b1:c2:6b:88:12:af:29:9f:11:53:ef:9a:d9:a9:
00:b3:8e:ae:9e:94:db:5b:5f:b0:7b:bc:8c:e1:d4:73:e3:77:
fe:2a:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:01:58 2025 by rpki-client