Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json)
Hash identifier: SHkSSZc7mwhgwMwu5kTiUmY1/RbXoXYsCDoV5HPXvio=
Subject key identifier: CB:94:B5:9F:1C:43:3A:E9:00:76:C5:C1:EF:49:7B:07:C8:A7:06:07
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 0198745027AD2BCC2F9BE870DC7E914239A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
Manifest number: 05A4
Signing time: Mon 04 Aug 2025 09:01:06 +0000
Manifest this update: Mon 04 Aug 2025 09:01:06 +0000
Manifest next update: Tue 05 Aug 2025 09:01:06 +0000
Files and hashes: 1: 4Knn2Ld5egn1camg9bhppId4Qlo.roa (hash: A8w1HB94c5M9H4eQOiI6lWSCTjnLMlfowVXvZM3dO6s=)
2: 5bwrov9Q4TKzJTBo9upY3XK0THU.roa (hash: TYWC6rWZltrX891RQlcpPW39DIbNZYI93ECjvUJPd18=)
3: S_FCvdfbH_ZK63a0stUMhU8oaw8.roa (hash: eXZV7SJ3ck6L3XgOeiX3iX+u0/ekcILrG+TMmUo1bYY=)
4: UXFnULRGQ9zt1V-SkMYjnZH0aX8.roa (hash: hvtnqOC4PJ7xkfHCQl1PdGQcbPT0pkEqxG9iEFd/GZI=)
5: YsXyfEzn_ZKBLDMzG1UU4GMwlcI.roa (hash: +hKZsJUinqgBcHuQ7dq/U5cKUb4tJ0uT1WCFtVOANwo=)
6: gOWYAyjzxIKRFcUZmXLFPZZQLAE.roa (hash: uorrOksjaGfolUbfcHF+KBKk6xKRTaR+l4ir2v0cUaI=)
7: g_ElxkrC5OfOyHZzsFQIM1AuuFQ.roa (hash: s9+zwcgiFmScc9IvVxtLII47fLB+BQdFtBCLqfaDxwU=)
8: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: 1Ex2Gz0YrMYU3RkAGGWcUfsPYLc1sNwGFj/0c8tjovM=)
9: zvXh2JmULYTuuJGfZa88vbAc7K8.roa (hash: XQvzCYYY2c/DWeWDz/HVl73sGmFpwXBX4BVFr0eF6dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:27:ad:2b:cc:2f:9b:e8:70:dc:7e:91:42:39:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: Aug 4 09:01:06 2025 GMT
Not After : Aug 5 09:01:06 2025 GMT
Subject: CN=cb94b59f1c433ae90076c5c1ef497b07c8a70607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:36:32:ce:28:51:a5:e9:75:19:28:ee:75:
38:fa:58:43:85:e6:68:b7:9a:39:c8:93:e8:1e:a9:
ed:1e:5d:94:2b:c9:7e:27:19:6b:42:1a:65:49:e3:
94:3c:c9:4a:b7:ce:11:41:2c:fd:d6:80:d6:a4:9a:
33:fa:50:4d:1d:2a:2e:ac:59:28:46:b3:be:33:b3:
c3:32:47:18:b2:7f:ce:ab:7d:91:09:90:99:79:bd:
6e:e4:ca:09:b5:7e:0d:99:1e:bb:04:58:4a:ed:dc:
83:2e:df:eb:6e:ed:8e:67:76:41:a0:08:3d:f9:f1:
8b:92:18:3a:84:98:63:4c:07:d7:e9:49:b6:10:0c:
3c:b2:6f:49:5e:27:42:f4:f3:2a:3d:35:a1:0d:94:
f8:47:fd:7b:54:6d:8d:4a:ee:49:f5:50:0e:ea:aa:
70:69:de:45:a8:b6:97:ad:7f:d6:bd:a2:39:34:3a:
0b:55:c3:0b:5c:c2:9b:dc:dd:be:43:3e:e1:fe:62:
1d:c2:06:ed:31:f4:1d:2c:69:7a:2d:43:01:1f:ab:
5d:6e:e0:0b:13:99:ff:cf:00:cc:10:5d:98:39:a2:
10:f8:4a:92:5e:6c:06:1f:51:9f:18:a5:91:81:0b:
91:82:0c:5e:12:e3:07:59:5f:ee:ed:c6:22:8e:7a:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:94:B5:9F:1C:43:3A:E9:00:76:C5:C1:EF:49:7B:07:C8:A7:06:07
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:13:da:1b:63:17:d9:a3:25:37:a2:a8:98:71:cf:9a:c1:f3:
f3:47:6d:39:56:a4:30:5e:a3:b7:54:53:53:a5:e3:20:36:83:
62:3b:f6:81:2c:63:b4:c1:68:9a:16:d0:5a:61:6d:67:59:61:
b8:fd:7d:0e:a6:f3:9b:74:58:3c:1e:fd:b0:8e:36:20:1f:e1:
cf:84:23:5b:ea:3b:8b:d6:ed:01:f7:29:e7:f4:0d:d0:ba:b7:
cb:5f:8c:7c:cb:9a:29:3d:7f:84:71:de:7f:27:82:af:f2:23:
82:8e:95:c8:c2:fb:db:e3:c6:b9:36:2c:73:04:7b:c2:d2:90:
65:a0:24:9b:bf:3f:2f:00:c5:17:b7:92:e5:1b:42:95:44:c8:
35:64:a5:c0:c7:a4:b4:9a:80:eb:f1:74:ab:fd:6e:ed:18:1f:
26:9f:9b:48:f2:3d:e9:f6:5c:55:80:7f:1c:86:0f:1b:24:1f:
88:4e:2e:d6:fd:15:66:22:c6:9c:8b:15:c4:4a:7b:dc:81:86:
e4:41:7d:33:57:86:45:47:50:88:b7:0e:fd:50:ab:7a:cb:ce:
53:fc:f3:a5:1c:60:a1:ef:ad:2d:e0:bc:84:08:e6:56:ef:32:
fe:75:21:20:9f:c7:06:86:84:6f:1c:47:0e:dd:b8:ad:6a:31:
aa:21:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:33 2025 by rpki-client