Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: RDcUJOcIhQ/is70ZPDeQfcCQpb3Bvl2kiTB0qZ9HAZE=
Subject key identifier: F0:52:96:69:9F:26:40:DD:B1:D9:5A:95:BF:36:C0:C1:31:B2:8A:12
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 019893A3E231152D91EF302271C7B6AD4547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 11:00:47 +0000
Manifest this update: Sun 10 Aug 2025 11:00:47 +0000
Manifest next update: Mon 11 Aug 2025 11:00:47 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: dRozT2LuRwPuRkjhR7HWm22Jy2/KnWRRNKMnqUm+HEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:e2:31:15:2d:91:ef:30:22:71:c7:b6:ad:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Aug 10 11:00:47 2025 GMT
Not After : Aug 11 11:00:47 2025 GMT
Subject: CN=f05296699f2640ddb1d95a95bf36c0c131b28a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:43:bb:a1:34:41:c3:3f:28:0e:30:60:dd:
96:c7:a8:88:aa:6f:3a:ab:ea:a3:67:ae:8a:2a:1a:
cf:05:e1:e2:af:38:01:e2:d7:7d:a6:7e:07:5d:17:
56:b6:3d:fe:3e:d0:1e:91:bb:4a:5a:b1:e3:69:4d:
06:3d:49:d6:95:fc:52:e4:00:d8:1f:64:82:05:70:
42:78:0f:80:ad:09:7f:bb:35:67:89:ef:9b:c1:92:
b6:b6:36:52:a2:80:7b:2b:82:86:99:2c:04:97:ee:
a5:4d:95:8c:46:5a:b5:87:88:58:da:53:2c:9d:b7:
5c:7f:78:c6:f1:21:6e:93:10:b1:1b:b3:9f:be:a7:
2c:34:d2:3e:75:ee:ba:56:16:2b:20:99:fc:62:57:
5d:48:a3:3f:e7:b6:50:a0:5c:b3:ae:e7:9f:01:90:
ad:1a:c5:91:f0:43:44:92:c7:36:d1:cb:fa:2b:d4:
f9:f4:26:f4:2c:2c:dd:2e:e6:00:55:ae:7e:32:0e:
3d:b9:12:62:55:e0:35:fe:aa:ab:32:0b:8d:e8:46:
4b:76:00:81:63:1b:6a:61:07:f8:00:70:ff:63:7e:
dd:b1:19:81:53:04:f6:58:85:01:ac:88:e5:1d:62:
82:6d:98:77:85:b0:b5:d0:18:fe:fb:6b:5e:98:16:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:52:96:69:9F:26:40:DD:B1:D9:5A:95:BF:36:C0:C1:31:B2:8A:12
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:42:d8:fa:fd:ea:05:29:41:7a:ec:99:03:85:ac:b4:5f:48:
7a:78:a1:1a:72:bc:45:26:b7:aa:bf:ec:d5:1f:81:d3:3b:f9:
5d:c8:fa:9c:25:25:89:b2:e1:62:e7:4f:20:80:db:b2:a4:b5:
ae:15:b8:ee:7e:ac:a1:26:e3:f6:77:ce:c1:14:2d:66:82:c5:
43:00:9a:20:e3:f8:b0:32:b0:58:cf:15:31:53:3d:95:5d:dc:
c2:19:cd:fb:c6:35:03:a2:12:2e:61:78:0b:4e:dd:ad:a8:5b:
8d:11:ef:f2:06:cf:ce:88:ac:99:4d:53:3f:d1:9d:ad:2d:9e:
b4:91:79:15:de:e6:26:06:d0:3e:a1:3f:cf:50:e2:11:ef:8d:
df:4e:17:5b:3e:57:67:89:99:6e:2b:d8:63:4e:89:8f:e4:be:
f8:39:23:0b:71:64:2c:31:da:73:2c:71:b1:50:74:39:5d:11:
1f:2d:fc:8a:d8:90:0a:33:3b:4c:b8:50:9d:80:28:3e:ea:8b:
90:dd:b0:6b:84:2c:01:6a:fd:76:4a:02:82:87:b4:2c:c5:aa:
e3:75:0a:ec:85:51:c1:cf:a7:77:ed:cb:6b:5b:55:a9:c6:a3:
b6:93:b9:31:fe:6d:53:0d:e5:3f:a9:fb:c8:23:64:9b:f7:43:
98:e7:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:21 2025 by rpki-client