Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json)
Hash identifier: mFN6LWnvvGlS5/DQ7yM3MmLhKGLZ0ttG4orrmVFaE3I=
Subject key identifier: 70:90:C6:6B:F8:59:B7:7F:44:DA:B9:76:3B:D1:1A:EB:0C:7D:B7:63
Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Certificate serial: 0198741954A0616C427559A360CB8AFB5512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
Manifest number: 0289
Signing time: Mon 04 Aug 2025 08:01:13 +0000
Manifest this update: Mon 04 Aug 2025 08:01:13 +0000
Manifest next update: Tue 05 Aug 2025 08:01:13 +0000
Files and hashes: 1: KVGzhURun_Z2Cbls6jKq8-siUnI.roa (hash: ICdbcaL6JuM+fFFA7u9Ui1orbNqbZysTahR0X2YtQkM=)
2: hSxuqdFakuVuEvKUogCcsFaigPs.roa (hash: Xj6H7DBsScqxHUyFTpNMVSRKFfZSSLZGI1xOM2DNsyc=)
3: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: 2DRqNLT/dZCTUwSWlgHf9OlAD6YIJJAbJarRwLYvbI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:54:a0:61:6c:42:75:59:a3:60:cb:8a:fb:55:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Validity
Not Before: Aug 4 08:01:13 2025 GMT
Not After : Aug 5 08:01:13 2025 GMT
Subject: CN=7090c66bf859b77f44dab9763bd11aeb0c7db763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:68:ae:9f:44:61:19:a9:a3:25:bb:94:93:
2b:77:6b:40:a7:63:d3:66:45:d1:26:42:de:c4:02:
e5:c1:5d:88:eb:e2:38:c5:1a:d0:f3:e9:d8:fc:91:
42:ee:75:4f:0c:bb:9e:70:4f:5c:99:ac:3d:ee:50:
71:06:30:86:1b:fa:12:29:5e:09:fe:06:c5:f6:e0:
71:b1:9d:ff:6c:fa:5c:6e:37:4b:88:e3:54:af:6e:
94:c8:a7:cf:fa:6f:b0:a5:28:e1:e5:7f:7f:e0:f1:
b0:16:7f:95:0e:8b:ce:c9:d5:14:74:74:25:a3:87:
ed:00:f0:c0:88:68:df:e8:4e:68:46:b6:ab:c4:15:
a4:9a:d0:90:43:43:eb:79:7d:89:b2:e9:bd:cb:0d:
4d:0c:f7:cc:e1:b6:14:b0:56:5f:98:bf:6c:3b:0c:
63:0e:16:10:56:74:8f:4d:b3:33:28:63:ef:1c:8f:
33:89:c7:82:96:65:95:9b:ed:35:57:08:f3:c2:8c:
72:ba:16:34:ee:4b:28:78:46:01:ab:44:74:82:68:
84:10:33:cb:7c:de:91:ae:61:8c:0d:82:b6:ea:a3:
a1:cd:95:57:8b:ff:63:78:f9:bc:0e:1f:19:bc:69:
68:22:cc:bf:9b:d1:b6:c2:51:16:15:3a:31:de:31:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:C6:6B:F8:59:B7:7F:44:DA:B9:76:3B:D1:1A:EB:0C:7D:B7:63
X509v3 Authority Key Identifier:
keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:41:ed:c4:04:3f:fb:3d:b9:2f:83:b7:d7:1d:0c:76:9f:f1:
70:82:78:ea:4a:b4:98:ec:af:15:30:f7:61:3a:b8:ef:b1:32:
3b:74:4c:fe:05:18:f4:4a:4f:94:68:98:90:a9:17:4e:9f:2e:
91:60:10:dd:83:29:ac:27:75:fd:fa:b0:c0:fa:0b:fd:bc:cf:
8d:34:3d:06:d5:38:7c:7d:21:b7:98:d3:ad:cf:06:d5:13:f7:
1f:d5:cf:a9:bd:d4:bd:ae:55:75:19:47:90:64:47:18:16:03:
c0:fd:15:ba:33:2f:05:e7:22:a0:fd:32:ef:ec:28:3b:1b:da:
7b:67:f3:30:91:de:3e:0d:b8:a9:7e:cb:a5:f8:c8:e7:a4:83:
ee:4b:55:88:e0:a4:73:a0:50:e1:9d:2c:23:3a:61:8f:2c:b5:
d6:bc:35:4c:0f:cf:23:59:be:4b:78:c1:96:f0:d5:5b:6f:dd:
5d:b5:7c:94:ce:a4:88:8d:c3:c1:ac:69:06:77:83:23:22:40:
45:32:dd:47:39:c4:ba:5c:a2:92:7d:6e:b1:eb:6a:04:0a:c6:
bf:99:db:1b:b1:1f:fb:8e:28:39:d7:de:1f:bc:cf:29:43:56:
1f:7f:63:a1:63:93:10:65:6d:9f:9e:99:53:d8:90:06:ac:9e:
6f:8b:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:58 2025 by rpki-client