Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: vFGv2q6bg1+xeWpqdG3Ew1YZ+qmYDSpswiNNCZlnAVg=
Subject key identifier: 50:D0:9D:C2:38:61:19:1A:CD:51:4B:D4:5D:1A:D3:78:B1:16:1E:21
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 019926D6E48657799EC5554A4EF48362C5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 154A
Signing time: Mon 08 Sep 2025 01:00:41 +0000
Manifest this update: Mon 08 Sep 2025 01:00:41 +0000
Manifest next update: Tue 09 Sep 2025 01:00:41 +0000
Files and hashes: 1: 7BUAS9lNIJKrmgyqitmt4vjUchs.roa (hash: ZW63wkZvkBfaNmwpw8bvuYCpTs0W+QW7Uv70+dpsljM=)
2: 7DO8E30RGY4vAe7tIWHKTeq95P8.roa (hash: wO6AvUEPcj/+yaf4lye0oLqn75BJbLzeCB1mL+qhuus=)
3: Dc_MqXVzSSK77uzNogE5HgnhLwg.roa (hash: O7xD6oauj5YnrNkfW6IbaFJNVQOfp627wKoUhUJUb+c=)
4: F_q5_Z07qZI9DXW4KcpMFI_8MOY.roa (hash: UA+1oifvamJJirFIBnTAGXQVq0QT81TJRyTJ7BTxetg=)
5: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (hash: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=)
6: QHGx9rBcGUaJTuZl4OFvkzmjZVA.roa (hash: ZZjwJdlY+j59oAR5+dW/8zpKf4al08hvm5qlRq5DDsA=)
7: iL0fpiq0g7Tpl8O9Cr71bc0UOYU.roa (hash: +0HQwj7rpV4acr+qdH/U1EOSgBMGpBNUkpCPoAIrOlE=)
8: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: yvWnvQqNnQzGY4PyGatTtRbB+STEysIJYpxt2lWVl0s=)
9: xmfrzoBs6Rhbg64vPzeCbbD4I6U.roa (hash: X1lH5bbTPug3DKbEg/bKjT6QG10Inw9lELIZLmoF2Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d6:e4:86:57:79:9e:c5:55:4a:4e:f4:83:62:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Sep 8 01:00:41 2025 GMT
Not After : Sep 9 01:00:41 2025 GMT
Subject: CN=50d09dc23861191acd514bd45d1ad378b1161e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:39:8b:d0:77:d2:88:96:f6:05:3f:fb:d1:
89:ab:8a:65:2d:f1:9f:36:32:3c:cb:1b:03:c2:5d:
fe:db:12:87:23:e6:8a:a6:5b:0a:e0:21:65:60:b0:
0f:b4:ed:a2:8b:35:a8:71:f1:35:5a:1e:3c:be:57:
72:80:1e:d5:14:46:a8:18:8b:dc:5e:0c:47:10:bc:
0f:f4:2b:4b:a6:3c:b7:5e:cc:b4:c8:61:2d:81:e3:
1c:d1:fb:d6:77:2c:87:67:b9:49:57:e2:72:06:7f:
cf:00:93:b7:b2:9e:11:31:19:36:04:66:74:42:7f:
92:4d:6d:2c:25:e8:d0:ee:b9:68:6f:32:4e:dd:5d:
d5:46:e8:77:2d:dc:94:6a:fa:9a:a2:2c:a9:02:ee:
6f:a7:53:08:c4:94:bd:70:95:d8:8b:e7:fa:ea:2d:
7c:49:c2:e4:49:5b:39:01:a3:36:52:be:84:a9:b3:
7a:ce:4d:25:df:b8:73:4d:48:fd:c5:b8:f1:b1:ca:
c8:1a:c1:4d:12:6c:dd:bd:2d:43:eb:b3:70:36:f4:
76:12:af:70:01:c6:77:bb:34:e1:17:7c:63:a9:f3:
a2:c8:0e:29:fa:e0:94:af:da:e5:da:d8:c6:a4:38:
5f:6b:1f:4f:cd:e9:d5:7d:73:8d:af:1a:51:a5:be:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D0:9D:C2:38:61:19:1A:CD:51:4B:D4:5D:1A:D3:78:B1:16:1E:21
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:09:da:d3:6b:f7:7d:99:cf:6e:ca:34:87:d0:69:e7:fa:4e:
a1:f3:48:6d:9e:5f:98:2b:a5:e6:1c:4f:90:d8:91:eb:5d:64:
eb:ea:30:26:1e:4b:90:27:2b:48:7f:40:48:20:ea:b8:21:9e:
e8:d4:56:c0:f8:c9:e6:ed:40:89:13:50:6b:d7:bc:a1:53:5b:
54:a0:1a:94:b9:7f:bc:a9:c6:2e:a4:f1:49:f3:96:54:48:06:
fc:36:25:ed:37:e0:ff:1a:57:28:e3:cf:99:71:04:61:80:8e:
b3:46:2a:50:66:13:18:ca:e1:00:16:9d:89:37:48:b2:e5:5f:
d2:7a:1d:b1:1e:54:c5:a2:c8:5b:c2:57:b7:a4:4c:ad:7c:14:
0c:35:70:45:4c:24:6b:37:f0:b3:27:78:7a:47:33:cc:57:c7:
84:19:e3:d7:e2:6a:9c:22:3d:3a:bf:c1:7d:ee:d4:67:73:56:
dc:6b:5a:22:cc:e2:8b:f9:40:bc:04:de:28:95:8d:d1:64:8f:
ad:5d:2d:8e:13:17:9a:03:89:04:58:5a:bd:da:70:03:f9:68:
95:be:76:67:77:de:e8:36:fc:5f:15:3d:e5:76:15:1b:a3:0d:
e0:b6:9d:56:8a:78:53:1a:e5:eb:d4:37:48:a4:83:5d:df:44:
da:6f:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:14:24 2025 by rpki-client