Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: gPhEs3axxYjVPZfcqUTM+Vkzxog7zDhz5qKxbCYmz4w=
Subject key identifier: CC:2A:93:15:A8:76:6C:9F:0F:3A:27:DC:B8:01:4C:95:9F:5F:D8:90
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 01986581F583359CB2F75DA2B9BE7381FF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 1534
Signing time: Fri 01 Aug 2025 12:01:12 +0000
Manifest this update: Fri 01 Aug 2025 12:01:12 +0000
Manifest next update: Sat 02 Aug 2025 12:01:12 +0000
Files and hashes: 1: 4GMh7fIw13Bz3DUcceuO2FBtK6M.roa (hash: E9IDQ7QjcqjZJIn5bDeaHNVCqS2wv2WqYXLU0FEPSXU=)
2: XJGEpCzB4loh5ef0k98ZvXtkA5A.roa (hash: ln2eCgW4Lb0/Z2WnRMYRLGIC+qtaz3YxPhhlJZ12csI=)
3: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: VYw2vZlwjRZJtcmVuN1PSxMvA9z6K8lMrrKf93F7/KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:81:f5:83:35:9c:b2:f7:5d:a2:b9:be:73:81:ff:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Aug 1 12:01:12 2025 GMT
Not After : Aug 2 12:01:12 2025 GMT
Subject: CN=cc2a9315a8766c9f0f3a27dcb8014c959f5fd890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:0c:62:ce:28:3b:69:64:a3:0c:7e:4b:d5:
e1:1d:4f:fa:22:89:64:da:b3:28:d0:51:05:ad:9a:
24:e7:5f:8b:07:09:b4:ba:62:b1:91:d0:72:90:3c:
4f:bf:f3:d3:f1:16:58:83:bf:d7:48:23:3a:6b:78:
b6:ff:93:5c:ca:56:ce:3b:34:d8:60:db:24:33:a5:
85:5c:08:28:01:0d:2f:6d:ae:48:e2:87:82:25:3d:
99:c6:d2:23:78:09:8e:07:26:12:2d:0d:09:bd:2c:
71:89:69:f2:81:91:51:59:ab:4a:67:60:61:01:db:
ac:e8:59:a5:f4:f0:b0:01:ef:f4:6a:fd:90:c1:78:
ef:8d:e5:91:51:66:35:d4:e9:aa:89:b6:64:b1:1c:
08:e8:9a:33:47:d7:94:18:fb:06:75:9c:6e:2b:4e:
e8:26:0f:53:8a:ec:98:a5:d0:09:97:94:2b:19:05:
d2:9b:8f:34:53:99:08:b4:34:79:0e:6e:b2:87:5c:
1b:06:e4:73:1b:31:4b:ac:75:3c:3d:70:c4:9e:5f:
ef:e6:2d:88:92:58:4e:1f:40:de:da:1d:e9:ef:bf:
ad:5d:bc:c1:ce:72:3e:85:6e:8d:f3:f8:64:8b:1b:
4c:a8:c3:f7:bf:d3:d6:96:99:97:71:6c:07:81:24:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2A:93:15:A8:76:6C:9F:0F:3A:27:DC:B8:01:4C:95:9F:5F:D8:90
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:59:a7:df:b1:3a:ab:b1:9f:76:e0:ea:95:03:f4:cc:e6:cf:
2b:41:e8:3d:d5:c1:7c:63:fc:63:e4:cc:cb:e2:a5:a5:b2:b0:
7a:ad:94:ad:8f:ef:d8:c6:87:cc:76:91:32:55:0a:f8:13:00:
68:b2:a6:99:81:3a:f3:23:bb:44:c9:6d:f5:b7:9b:a7:ac:7a:
66:6b:2e:a7:7d:64:90:0a:7d:70:3d:17:c7:bd:d7:2a:63:f2:
2f:77:79:6a:bf:51:28:0d:3a:b4:24:52:ad:9d:7b:4d:df:0f:
0b:00:7b:8c:73:c5:1c:b6:73:a1:ff:6f:12:6c:64:9e:19:14:
33:24:54:e8:3b:36:04:6c:46:16:6e:83:5f:42:e7:92:0b:2a:
e1:07:e8:41:ef:58:56:3d:e7:8c:2a:84:d7:a7:d0:b1:3a:84:
56:2b:63:c3:ae:68:35:af:b8:74:7c:f6:a5:0f:0f:c1:ef:f9:
06:17:67:31:1e:43:54:aa:c9:43:a6:61:46:cd:40:c2:53:e4:
96:6a:25:4b:43:a2:04:ed:e7:11:71:13:f9:60:10:9d:ed:d7:
ba:cb:60:0b:e9:51:d0:07:36:18:56:b6:94:7d:c7:f7:f8:c0:
5b:18:9b:2e:18:2c:82:75:17:73:e6:50:91:4f:59:f6:ce:f6:
30:46:32:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 19:04:24 2025 by rpki-client