Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: T/1O+gA1rj+FJSdteIZgkKyp5JAZHn7SdEiBVw28poM=
Subject key identifier: 79:53:76:97:26:F0:D8:C8:1D:F1:AC:3A:72:66:1D:C9:32:B2:46:0C
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 01984B8A891EA5E65D38BB1D5142EFD23571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 133C
Signing time: Sun 27 Jul 2025 11:00:26 +0000
Manifest this update: Sun 27 Jul 2025 11:00:26 +0000
Manifest next update: Mon 28 Jul 2025 11:00:26 +0000
Files and hashes: 1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: 6MtVafk7P4Xx3BYI5da2s3mihxE4JauTpCBx+MS5fo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:89:1e:a5:e6:5d:38:bb:1d:51:42:ef:d2:35:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Jul 27 11:00:26 2025 GMT
Not After : Jul 28 11:00:26 2025 GMT
Subject: CN=7953769726f0d8c81df1ac3a72661dc932b2460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:32:0a:da:ca:a1:e7:e6:aa:87:b1:5a:8b:
7c:d3:cd:51:22:c1:1e:27:63:fd:78:89:56:7d:fc:
39:61:f8:14:5d:e9:f7:1c:e8:8d:51:ae:7e:9c:50:
18:a1:51:3c:0e:ea:07:31:bf:a9:18:d0:80:4e:31:
0b:e1:45:9b:02:df:11:3f:91:8a:d7:fc:59:55:f9:
c5:55:da:4b:c1:04:b6:0e:78:8a:d9:ef:55:88:b5:
87:4e:39:af:26:d2:99:1f:94:98:80:c1:49:88:3d:
a8:f0:1d:a4:70:5d:a8:18:6e:70:60:af:56:52:f1:
dd:3e:14:d6:1f:c2:08:84:27:80:c1:56:25:f4:88:
2f:7f:af:ad:a2:ed:1d:63:d4:4c:5d:33:f4:52:12:
2e:a4:a2:51:16:d5:64:bd:3d:61:c8:41:54:de:94:
49:3d:37:f4:fd:30:16:61:b6:cc:8f:4f:c5:45:cf:
28:1e:74:bb:b1:c9:68:e2:03:35:ec:29:12:46:a4:
37:36:a6:88:8c:72:f6:d3:7c:a7:83:88:11:a6:19:
6c:6c:a2:7c:fa:56:06:a7:67:80:49:e3:0f:5e:9b:
8e:09:37:7e:bd:cc:ee:54:5c:30:64:e2:a9:75:46:
ac:e8:b0:ad:c4:1b:c8:1d:05:fd:73:d8:31:ba:20:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:53:76:97:26:F0:D8:C8:1D:F1:AC:3A:72:66:1D:C9:32:B2:46:0C
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:88:aa:39:20:35:ca:20:56:83:99:2e:60:f1:77:4a:55:de:
19:85:ca:9f:57:df:70:3b:ef:a5:48:72:6b:3b:c2:44:51:58:
01:e4:9c:45:d7:64:ed:97:dc:5d:6e:9e:7e:6c:d9:71:5f:11:
17:83:98:48:c2:d8:54:3e:0e:bb:97:94:e0:8c:08:1e:c5:4f:
fa:63:57:32:32:42:0b:a1:5f:a1:89:49:17:8e:ba:5f:4b:85:
ff:09:6c:f1:4c:e0:d8:c6:3b:e7:46:87:46:ef:2f:d9:d5:c1:
6a:4d:15:ed:a1:a3:ec:15:5e:ef:92:a9:10:8c:67:2d:61:a9:
84:e5:65:ad:d0:9d:90:69:9d:39:1b:2c:c5:00:b8:d8:c5:53:
fb:68:85:ac:ab:19:bf:f3:f5:2c:66:64:2e:c7:19:c8:d5:9d:
d8:a7:2a:e5:1a:2a:83:25:35:6f:a3:d6:d2:3b:94:cd:0f:0c:
5d:f7:6e:59:78:f3:2a:c9:4e:75:a0:eb:90:d1:51:e6:7b:00:
32:44:4b:6e:8a:9a:13:5a:51:3b:51:16:a2:c4:29:09:c8:7b:
73:8c:68:8e:88:4e:2d:c2:2f:38:55:55:aa:ff:af:3d:07:d3:
0c:d1:e2:08:00:b8:94:c8:31:e8:89:30:67:cb:ea:11:6d:6e:
2f:14:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:45:01 2025 by rpki-client