Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: FNe2SS8UuDVVwOlzaoQ8u56pYiTyWU9TcuUhbf7rnMc=
Subject key identifier: A9:04:15:C0:4B:BA:13:9C:92:73:9A:63:48:EA:E6:80:23:D7:A1:6D
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 019874BDB5EE774151EBD01E70CAB1F2D3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 11:00:46 +0000
Manifest this update: Mon 04 Aug 2025 11:00:46 +0000
Manifest next update: Tue 05 Aug 2025 11:00:46 +0000
Files and hashes: 1: 26TbrymsKsZjBkQHIbbRRWaFR8Y.roa (hash: SWIdCtaxTysSBJj/hZn1IHZ7qzsZ9zOqjJPPtoUQNGw=)
2: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: BzzdNQ9q2hj/+BMBFkw470Ywsu/wX1wUL1npTviRXFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:b5:ee:77:41:51:eb:d0:1e:70:ca:b1:f2:d3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Aug 4 11:00:46 2025 GMT
Not After : Aug 5 11:00:46 2025 GMT
Subject: CN=a90415c04bba139c92739a6348eae68023d7a16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:77:74:5d:56:44:cc:f8:b1:7c:7a:ac:54:
92:da:5f:bf:37:ee:c4:e6:0b:1d:02:46:b7:f3:75:
6c:66:a3:d4:76:a2:79:3d:c4:98:99:a2:56:3e:4c:
47:6b:8b:7d:c8:da:66:98:2b:f3:ed:50:e2:66:f4:
bb:a1:de:7a:ea:58:72:69:e0:08:b7:d2:38:e0:68:
3c:ef:f8:0b:a4:48:39:33:3c:b5:f7:58:c5:9f:71:
b1:d2:98:2c:f3:a8:d1:03:52:c6:a1:d4:f5:cc:07:
5c:53:ef:50:76:62:f1:18:32:ef:c7:17:90:3b:2a:
15:9f:76:e8:47:77:58:18:a5:4d:ce:86:19:74:31:
6e:39:52:e9:a0:cf:92:27:f9:9b:b2:84:86:f7:b6:
84:fd:08:42:53:54:2e:7c:4b:01:4d:a7:ec:10:8a:
12:a7:07:4d:3c:8c:36:31:57:8f:12:95:cc:4b:1d:
d6:74:b8:5c:b3:58:29:eb:b8:25:5b:b0:54:a0:32:
8d:60:f9:74:57:00:3c:d5:60:a2:b5:21:3a:f0:20:
ca:b0:8e:f9:84:4d:d6:a3:c7:e1:82:a2:f6:66:4e:
6e:65:62:7f:37:0f:f0:32:2e:3a:1e:99:83:e3:7f:
76:39:70:eb:36:33:68:34:28:44:9d:b4:65:8e:3c:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:04:15:C0:4B:BA:13:9C:92:73:9A:63:48:EA:E6:80:23:D7:A1:6D
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:36:1d:dc:8c:19:fd:0f:c9:2c:de:5b:9b:6a:4a:e2:42:22:
92:6b:e1:dd:47:74:5d:39:3c:e9:bb:33:8c:e6:1a:ff:19:f1:
45:91:cf:ad:45:64:d6:15:e5:1b:28:5c:2e:51:cd:e8:98:4f:
2f:72:22:7b:f2:1d:ec:eb:3e:1b:4f:e8:b7:0a:fb:89:29:d7:
4a:11:45:ad:ab:d1:e6:6b:7c:24:e8:e8:7d:bd:57:c9:7b:b1:
13:72:19:29:ba:78:ec:08:0b:99:01:97:12:3b:de:a4:05:ef:
6f:2f:1d:a9:c7:97:05:07:a6:20:e4:c3:6b:54:18:f8:9c:a6:
67:be:22:fc:89:a0:06:3b:fd:75:0b:84:99:13:6e:6d:38:a7:
fd:cc:d7:b2:d0:08:c6:41:c2:f7:66:d7:2f:34:09:fe:1e:a8:
b7:fc:9e:75:b0:74:53:e4:fd:48:98:3c:99:3f:fa:b3:d4:9c:
86:f2:0f:e1:f7:65:de:49:6b:78:54:28:15:b3:f9:25:c3:33:
64:f0:c5:8e:5b:95:c0:c5:dc:02:01:4d:68:58:0b:16:b3:0d:
33:21:4e:d7:5f:89:b6:ec:ee:94:e7:10:b8:a7:b7:79:a6:8a:
f2:2d:01:82:6f:0a:40:d1:b2:5b:0b:28:e5:d8:09:87:2a:83:
73:64:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:19 2025 by rpki-client