Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: keoFjYGhtluqmHrtgfmBNyJCEVNIH6OoMMAdha4YC5Q=
Subject key identifier: 26:D8:D4:62:EB:23:12:37:39:41:6C:AD:16:9C:45:25:B2:99:D6:A3
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 01984AE579AF366A86B603D2E4DA17CD726B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 06C4
Signing time: Sun 27 Jul 2025 08:00:09 +0000
Manifest this update: Sun 27 Jul 2025 08:00:09 +0000
Manifest next update: Mon 28 Jul 2025 08:00:09 +0000
Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: p+FX33OnO16y/luuT5JESXHBJlVCwkOcqZn3NAeOOBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:79:af:36:6a:86:b6:03:d2:e4:da:17:cd:72:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Jul 27 08:00:09 2025 GMT
Not After : Jul 28 08:00:09 2025 GMT
Subject: CN=26d8d462eb23123739416cad169c4525b299d6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:44:6f:f2:f9:d6:10:35:4c:22:65:6c:18:90:
d5:c3:e1:f9:3f:6b:18:5b:f3:ba:69:30:ad:c5:df:
da:a7:f3:c1:98:ee:5c:a9:75:c0:b0:ed:2d:85:0e:
4e:33:df:56:28:ca:0b:a0:11:f1:fc:a2:14:9d:bc:
e6:3e:46:b4:64:63:0e:43:42:d7:59:1c:8a:d4:38:
84:e6:d4:d7:95:4f:77:83:4b:3a:82:f5:50:5c:95:
f5:03:22:ce:aa:37:f7:74:8e:17:09:c2:7b:b7:7a:
7f:90:5c:32:89:78:05:0f:44:be:e2:bb:28:6a:34:
03:0c:45:2e:92:82:bb:85:7c:67:45:2d:5e:c8:15:
8d:0f:61:ab:2d:bd:8e:3e:d5:eb:f5:00:4e:be:c5:
f6:39:f2:47:72:b4:f6:cc:d0:2f:e0:af:29:33:36:
4c:47:a6:29:e0:40:c8:5e:cc:12:63:10:93:a6:0f:
dd:0d:2c:23:a4:8d:f3:ab:cd:87:e4:29:25:f6:b0:
8b:b6:21:25:d7:25:b9:ef:4c:82:8b:9b:ed:f2:c3:
6d:6c:0d:89:25:9d:fd:05:cb:7d:dc:83:6e:04:d0:
ee:8a:4a:b3:f3:fb:e4:18:ac:7d:e8:63:7a:56:cd:
81:06:ad:9b:f3:b2:a3:93:f3:85:ff:f3:8b:31:f3:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:D4:62:EB:23:12:37:39:41:6C:AD:16:9C:45:25:B2:99:D6:A3
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:dd:81:ea:9f:f2:fb:dc:e9:f4:d5:06:8d:1c:ce:05:af:16:
ae:48:18:6b:6d:48:4e:3f:7e:9f:70:37:8a:3a:db:4a:73:93:
5c:34:62:ee:ce:43:1b:68:e5:89:23:fb:1d:0a:54:29:30:0c:
2e:c7:36:47:a5:82:49:53:eb:d2:ed:b5:ea:87:e1:4b:6f:f9:
f9:b4:89:2a:58:0f:cd:30:2f:8e:46:b1:e9:71:15:27:ad:06:
a8:13:73:1b:ba:66:e3:0d:1c:1f:b9:29:16:af:2c:4f:4d:ea:
7c:c4:8a:e5:04:90:65:26:64:fb:f6:a9:2f:ae:ae:7b:be:ef:
fe:52:1b:fd:cb:11:e8:3b:d9:0d:a7:37:93:6e:a5:c0:b6:2c:
c6:7c:06:5b:4e:0f:9d:9c:b4:89:aa:94:c3:a8:2d:84:a9:52:
33:38:d3:fd:98:a8:55:f1:50:62:b8:b0:69:72:54:fc:a5:93:
d1:9e:c7:0b:b7:eb:b7:2d:6a:f1:59:17:4f:b8:82:b7:18:1c:
8c:19:4f:6b:5d:10:7d:1c:f9:40:2f:5c:5b:2b:46:e9:88:d1:
b8:89:53:3f:aa:bf:07:50:60:ce:72:4e:cb:8f:36:99:62:e2:
c5:91:89:18:ca:50:b3:56:42:02:3e:83:26:cc:1f:da:73:d6:
36:27:9d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:15:30 2025 by rpki-client