Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: 3+GC3NDje44sWm9pn0k37EPdVGbNsG35l9V2gOVPbtM=
Subject key identifier: 13:7E:41:81:1F:95:ED:B1:ED:A5:D3:EF:F5:45:48:1F:B0:52:0E:10
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 01988166BB8467125B35F5333E03FD1AC76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 1246
Signing time: Wed 06 Aug 2025 22:00:50 +0000
Manifest this update: Wed 06 Aug 2025 22:00:50 +0000
Manifest next update: Thu 07 Aug 2025 22:00:50 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: HIyJloZAALYbpii68z3cTqjtnBlUCZNL/7fdwWRfkpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:bb:84:67:12:5b:35:f5:33:3e:03:fd:1a:c7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Aug 6 22:00:50 2025 GMT
Not After : Aug 7 22:00:50 2025 GMT
Subject: CN=137e41811f95edb1eda5d3eff545481fb0520e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:69:ce:89:42:af:ab:a9:86:45:17:63:06:
84:01:c1:15:59:26:08:c7:b0:4e:0b:02:dd:40:e7:
d0:2c:77:a0:28:0a:83:44:fb:04:4f:2e:47:c1:99:
14:74:d8:c6:4a:8b:30:a8:42:de:43:08:34:25:f3:
85:40:56:5d:1c:85:5e:15:c0:81:dc:10:93:27:e8:
5b:1b:97:f5:ce:77:f9:ab:8c:53:cb:cf:31:33:e4:
51:ed:56:7a:e1:5a:0e:be:2d:bd:ae:81:fe:c4:4e:
6c:73:0d:13:d8:41:ef:27:f3:ea:4e:b0:ae:4f:3f:
b4:a0:c8:aa:fb:d0:9d:70:96:17:2e:c6:85:dd:19:
51:09:76:c0:ff:cc:dd:4e:c1:43:6d:dd:75:49:d1:
43:8a:9a:7a:cb:1f:de:24:9a:17:48:eb:15:f0:e5:
68:33:36:47:8b:8e:0f:47:2b:2a:98:45:ec:5a:b4:
2b:7b:1a:38:82:86:28:4c:2e:21:a9:49:75:2c:68:
07:7f:64:ac:3f:08:36:34:99:c1:99:7e:59:6f:55:
3d:c1:66:3d:f1:8f:af:75:ce:f5:54:79:62:99:77:
e8:76:4f:6f:e4:de:53:4d:95:e8:9e:06:cc:c4:72:
d9:15:14:72:21:c4:b1:ab:07:cd:0a:8a:e5:48:d8:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7E:41:81:1F:95:ED:B1:ED:A5:D3:EF:F5:45:48:1F:B0:52:0E:10
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c9:39:78:14:48:04:a8:7e:8c:5b:55:93:52:c6:69:1a:b6:
ae:13:db:33:55:0f:5f:37:f4:16:a1:b8:99:ba:76:fa:5f:73:
63:96:4d:89:a7:de:4d:26:f9:cd:0a:75:40:15:da:af:c3:19:
57:cd:64:3f:c6:71:7b:7a:f8:87:aa:07:8e:7d:bf:1e:ce:00:
fe:1a:22:b3:8d:16:70:7c:c6:6d:b7:42:87:0a:7c:c4:01:0c:
16:40:e2:be:b6:91:67:d9:d7:1e:15:f9:04:ca:fe:39:e7:20:
28:05:2a:fe:c7:71:15:2b:45:c3:c9:7d:0e:3c:83:19:14:db:
0c:15:0e:bb:52:03:8e:3c:bf:c3:01:9d:9a:53:1f:44:53:b5:
21:26:d2:32:0f:8e:f2:7e:c5:9f:f3:5a:14:36:5a:76:3a:3b:
6a:4b:5b:e9:94:a7:1d:4d:92:20:e9:17:35:3f:f1:4c:ae:8f:
f7:69:43:21:a3:77:aa:5f:e1:63:60:46:23:a1:da:42:cf:a7:
e8:bd:55:12:da:57:65:2c:f0:a9:67:c9:bd:64:f1:fd:4a:22:
9e:6e:c4:ea:a2:99:12:44:6e:8c:27:07:00:d7:43:c6:ca:b4:
16:65:5f:16:87:a6:07:9f:a6:60:e5:6c:fa:ee:76:7e:e5:74:
08:cc:7d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:34 2025 by rpki-client