Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
File: oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json)
Hash identifier: mAF6JT77Za39oPcJ0/2kyQ9GCPRL7Q9dBBIc4pnwQVE=
Subject key identifier: E4:85:4E:4F:A1:F1:06:A0:6F:42:43:E7:DA:F7:D4:6D:CF:A8:A7:C3
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial: 01989FDF57C1EDC83F0D8962464EF7A07A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
Manifest number: 10C8
Signing time: Tue 12 Aug 2025 20:01:10 +0000
Manifest this update: Tue 12 Aug 2025 20:01:10 +0000
Manifest next update: Wed 13 Aug 2025 20:01:10 +0000
Files and hashes: 1: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (hash: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=)
2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: xXDsAlzZAcNffWbOShP0nsyUl1yoiNqc7D4aHaugyRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:57:c1:ed:c8:3f:0d:89:62:46:4e:f7:a0:7a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Validity
Not Before: Aug 12 20:01:10 2025 GMT
Not After : Aug 13 20:01:10 2025 GMT
Subject: CN=e4854e4fa1f106a06f4243e7daf7d46dcfa8a7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:84:ed:23:98:3b:33:e7:58:4e:7f:bd:df:10:
b9:31:f6:54:3d:3e:1a:87:43:31:46:21:80:d6:28:
56:61:d6:e2:ef:c3:e9:6d:0b:bd:33:aa:b8:29:8c:
ab:88:3a:9c:e7:bf:e2:37:e3:ab:a8:45:5a:72:ea:
0e:f7:8c:05:1c:8f:1c:a6:08:65:0a:57:39:da:32:
8b:29:d2:69:9a:8e:d7:07:31:0f:a1:e7:7e:17:20:
7d:e9:ac:78:ac:8f:8c:3e:10:9a:36:20:62:ef:89:
a7:09:6a:01:12:d7:32:69:75:b4:6e:78:a2:51:89:
73:6f:c9:8b:6f:dc:df:3b:50:ad:66:eb:63:9c:18:
87:41:ec:93:db:20:49:04:2d:8d:2a:41:86:97:67:
93:86:25:92:19:57:52:a5:b6:90:d6:9d:18:a1:ce:
dd:2d:58:a1:63:ec:dc:32:40:d3:1d:0b:07:7c:a7:
f3:cb:16:f6:29:04:85:71:51:5b:c3:ce:1b:58:8c:
fa:fc:c6:00:c3:d9:9d:19:53:b9:8c:13:53:61:a8:
90:35:73:bc:54:28:b3:de:8d:94:51:71:2e:45:f4:
89:f2:81:4a:f4:92:18:4e:fe:31:4c:7d:2b:07:b8:
a1:5e:e0:42:da:1d:0a:45:dd:37:a4:bd:95:4f:a9:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:85:4E:4F:A1:F1:06:A0:6F:42:43:E7:DA:F7:D4:6D:CF:A8:A7:C3
X509v3 Authority Key Identifier:
keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e9:95:2d:81:20:0d:c9:91:ec:95:db:58:55:cc:ca:6f:b1:
75:25:49:18:d4:ae:e4:10:40:6e:d9:4c:ed:e3:81:f3:21:83:
b6:c9:43:a4:6a:32:a8:35:b3:8d:20:31:2f:88:69:83:33:1d:
23:43:47:c0:63:12:65:bb:5c:5d:80:9b:05:16:81:da:83:c8:
05:ae:bc:9d:57:93:b0:c6:32:c6:25:a9:17:50:aa:15:3c:3d:
13:e7:66:d8:cb:6d:05:41:ee:db:2b:42:b2:bf:dd:f0:52:8a:
f2:2d:41:73:25:df:a5:f8:5c:32:b6:80:75:c3:62:00:1f:01:
7b:92:ab:90:b4:16:5a:84:3b:b0:fd:e0:40:db:d4:8c:9e:d9:
df:03:c9:8c:4a:76:66:69:1c:bb:bc:b0:37:55:22:08:94:f3:
68:9c:c1:40:55:fc:af:ca:d8:2e:0e:b8:35:9f:3d:17:7b:53:
e2:ed:5c:a9:31:bf:e0:88:8a:1d:1b:d1:81:ed:6c:e9:15:34:
18:90:63:8c:26:25:b3:7a:e1:5e:6b:d1:f9:b2:dd:b7:ff:78:
80:52:87:87:c6:be:03:a0:b1:e4:55:0d:a2:14:21:aa:22:a5:
87:75:ae:cc:75:9d:3c:d6:c8:f4:81:a6:99:dd:d9:a5:a7:3e:
bd:85:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:15:29 2025 by rpki-client