Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: 1wjPVFE4AnbVrPZgqshAKAPexPs7wugN0byx84csZBU=
Subject key identifier: E0:38:80:91:DE:21:82:23:0C:24:C8:0F:1A:19:84:66:01:50:7C:F6
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 01989DB9BDB7ECF5D74D36FBF30A62814D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 1134
Signing time: Tue 12 Aug 2025 10:00:52 +0000
Manifest this update: Tue 12 Aug 2025 10:00:52 +0000
Manifest next update: Wed 13 Aug 2025 10:00:52 +0000
Files and hashes: 1: RDMJmsptAt79z1bZNxCRYGoDbOA.roa (hash: psHiDB3pvgN7EOgCxCvfgOl6kkNmShVGm0R8glPdahE=)
2: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: 9rTYh8VABj7nuCVqpXSSdv+qKNt2NeJkH9GwzDohuqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:b9:bd:b7:ec:f5:d7:4d:36:fb:f3:0a:62:81:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Aug 12 10:00:52 2025 GMT
Not After : Aug 13 10:00:52 2025 GMT
Subject: CN=e0388091de2182230c24c80f1a19846601507cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:8a:81:03:12:d3:f3:69:2b:05:35:3f:1d:
f1:f2:a9:5d:43:aa:dd:23:d4:ac:7d:b7:30:49:71:
80:5c:a2:6c:dc:ec:e2:ce:a0:b3:60:53:c4:f9:ca:
5b:e2:3b:bf:9f:62:29:a8:13:6a:5f:ae:a6:47:36:
a8:67:67:7f:f2:3a:82:2d:06:84:d4:b3:04:a3:eb:
92:5a:6a:2f:f2:f8:4a:38:91:fb:d0:44:d0:c8:ce:
51:83:cd:4b:8a:9e:72:16:75:3c:57:d2:cc:a7:0a:
f8:ff:eb:8f:a2:3e:54:91:6e:2d:ed:f0:ad:d4:ec:
7d:0e:36:0a:13:60:70:33:2a:ad:59:12:e6:95:59:
2f:5b:6d:0a:1a:08:3e:e3:fa:29:1a:dc:ac:9f:54:
4c:a5:8c:07:28:c1:05:97:a2:61:54:d2:2f:f5:f9:
74:16:44:40:e0:09:09:c2:19:75:35:d5:ca:6b:24:
dd:70:5e:7c:52:22:bc:7c:bb:75:a5:c0:da:73:eb:
f8:08:2c:14:50:c8:aa:0e:31:6f:1b:bd:43:89:69:
a2:9e:df:4b:09:f4:11:9e:63:ff:26:2a:81:df:93:
f2:44:eb:b1:bc:a5:dc:78:4b:93:bf:44:ca:6e:85:
63:86:a1:d3:47:93:8f:57:c8:df:b2:1a:02:55:3c:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:38:80:91:DE:21:82:23:0C:24:C8:0F:1A:19:84:66:01:50:7C:F6
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8c:ab:34:3d:75:eb:ca:36:0d:c0:e5:fc:2e:20:f1:94:c3:
e3:d2:00:2e:f2:33:5d:08:2f:95:5b:44:9b:84:07:a8:e5:ca:
30:35:ec:bf:64:71:19:4f:30:e9:38:35:b3:13:db:75:07:41:
15:d3:7e:d2:68:01:27:01:d1:5f:20:ac:e1:dc:fa:3c:c9:92:
ca:dc:7b:69:e8:14:0a:23:2b:96:66:49:d0:3b:60:83:f8:5d:
46:96:e4:0d:8e:f3:5f:22:20:1c:bd:78:e0:d7:fd:bb:36:91:
9a:c9:77:f0:f5:80:72:02:28:68:16:58:8f:e1:6e:71:05:32:
46:8f:71:7e:dc:f5:e4:ac:3b:28:69:ff:f1:0b:7b:e8:63:f4:
40:69:95:2f:a0:cd:d8:95:eb:32:a6:4c:09:fe:06:c0:36:59:
b6:79:31:63:cf:3a:02:ee:85:ec:2a:14:dd:f5:e9:a4:3a:59:
31:5a:1d:72:8b:3d:8c:31:7e:e9:b6:4c:ab:1a:b2:cf:eb:5f:
a1:86:23:39:74:7e:ba:2a:32:de:76:5c:96:f3:25:4b:19:51:
b7:2d:36:e2:8d:8f:19:1f:e5:2b:2a:14:4d:84:f6:9f:3b:33:
dc:26:c2:8c:d8:ad:9d:eb:d1:98:b8:69:26:97:be:17:d2:3d:
f5:88:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:53 2025 by rpki-client