Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: YPv/xv2wek9kjMEITCMIIl5N6tLIVFc4trTevPcLZwU=
Subject key identifier: 7D:C3:5E:24:90:B2:02:1F:3B:19:67:81:82:27:3D:3E:6D:A3:77:6E
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 01988B7CBD293788A1E338A5CAB48D663513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 1061
Signing time: Fri 08 Aug 2025 21:01:04 +0000
Manifest this update: Fri 08 Aug 2025 21:01:04 +0000
Manifest next update: Sat 09 Aug 2025 21:01:04 +0000
Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: W1gf9Ho4BFfWss/VUAAaFZSnyS5w/HrvtBXlOQS+WOo=)
2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:bd:29:37:88:a1:e3:38:a5:ca:b4:8d:66:35:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Aug 8 21:01:04 2025 GMT
Not After : Aug 9 21:01:04 2025 GMT
Subject: CN=7dc35e2490b2021f3b19678182273d3e6da3776e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:b9:c2:24:dd:ba:d6:1b:9c:35:51:50:6a:
79:8a:3f:f4:ce:30:cf:a4:ef:c4:4a:e1:46:de:05:
8f:4f:bd:68:2a:36:e2:96:b2:e5:48:ff:ec:2c:cb:
9d:18:2e:2b:5b:f3:f6:78:a3:35:98:fb:de:a9:98:
b5:fc:11:ae:48:3f:26:d7:fe:58:03:63:93:8b:5a:
75:03:52:24:68:3c:90:50:0b:f3:93:5c:08:f4:d7:
20:21:4c:51:9f:17:52:7a:f0:ea:1d:7a:77:d6:dd:
a2:8c:62:69:0c:29:e5:98:25:ec:d7:55:ec:9b:86:
38:06:be:ab:23:61:0f:64:01:63:13:04:18:b7:a5:
ea:ff:54:88:88:ed:e5:03:b0:53:5c:a2:54:6c:a2:
86:d2:f8:18:ea:a0:cd:f4:ff:21:e4:f5:41:f1:6a:
bd:c4:1a:0a:e8:32:40:04:99:89:e5:39:8d:79:4f:
5e:be:1b:47:35:26:e4:d2:4f:33:ba:36:f5:a9:40:
4b:5f:68:03:40:73:71:c7:bd:21:7b:47:85:4c:0e:
6d:f0:bc:93:64:b3:05:e1:9d:46:9a:47:0a:d3:12:
c3:4d:72:7c:ac:10:64:0e:94:01:58:98:aa:2b:6f:
7e:b0:21:b3:c8:c6:39:cf:a0:cb:a0:6d:f4:6f:87:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C3:5E:24:90:B2:02:1F:3B:19:67:81:82:27:3D:3E:6D:A3:77:6E
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:60:62:41:1d:12:14:42:f3:ff:11:61:bb:8a:d2:62:39:c6:
ca:df:22:04:a5:f7:2c:86:c5:6a:38:56:5b:8e:a3:49:94:6a:
ee:a1:fa:6f:58:cb:e1:c7:6f:ed:87:dd:bc:b9:bb:5e:70:70:
0e:a5:8b:4e:75:2a:28:9f:b1:e4:f5:20:e1:83:1f:ce:61:5f:
04:29:fb:53:42:bd:82:5d:4b:ce:1c:bf:c8:91:63:76:2a:5a:
3e:ef:b4:f3:85:cf:1a:5c:50:e2:b1:48:93:b1:53:e0:6e:0e:
ae:94:07:44:72:d0:09:03:c6:f4:bd:4c:bd:22:a5:f8:fb:52:
61:b1:33:2f:92:1c:8e:80:c9:ce:93:a6:45:3a:0d:df:96:95:
3f:ad:58:8d:9b:2f:95:74:fe:3a:b4:db:d8:f1:ad:90:9b:7f:
d5:8a:4a:1f:d2:b7:0d:ef:63:ce:b9:35:ca:a2:ce:e1:c6:34:
39:9e:e3:96:78:c0:84:5b:71:b1:6c:44:4a:45:41:07:d1:2c:
97:6b:68:dc:d9:92:6c:e6:c0:1d:bc:e8:40:69:cb:44:88:3f:
a5:cb:7c:2e:99:69:a3:f9:5d:e1:11:73:79:59:cf:53:7b:a5:
06:13:0a:c2:76:22:da:45:86:5c:0a:ba:fb:b2:73:58:60:f5:
bf:c0:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:15:10 2025 by rpki-client