Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
File: oQIHcvYouPtR80dRNrd_60smmL4.mft (raw, json)
Hash identifier: eYK14NFxepAy94SfP7s7RCVFgzbF7cVLJqyqB+YoTtU=
Subject key identifier: C7:ED:C7:92:6F:A3:BF:2C:DC:4A:5C:01:A9:C9:21:89:BF:35:78:58
Authority key identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
Certificate issuer: /CN=a1020772f628b8fb51f3475136b77feb4b2698be
Certificate serial: 01988C8F5534970CFE012CD7B9549279F9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
Manifest number: 126C
Signing time: Sat 09 Aug 2025 02:01:00 +0000
Manifest this update: Sat 09 Aug 2025 02:01:00 +0000
Manifest next update: Sun 10 Aug 2025 02:01:00 +0000
Files and hashes: 1: Xn7HlAmazqZObEY4Svfv4ZbMChM.roa (hash: 900LVbegyuqsxm1Su/VFGub5Wi1DlW68cWbr8g1USwo=)
2: oQIHcvYouPtR80dRNrd_60smmL4.crl (hash: L6YCpPzRFpQYtDIbFQTpGEqcpRZzdBRnVtDJbkO28js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:55:34:97:0c:fe:01:2c:d7:b9:54:92:79:f9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1020772f628b8fb51f3475136b77feb4b2698be
Validity
Not Before: Aug 9 02:01:00 2025 GMT
Not After : Aug 10 02:01:00 2025 GMT
Subject: CN=c7edc7926fa3bf2cdc4a5c01a9c92189bf357858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:6d:da:1b:6f:29:b8:44:95:21:7a:56:ca:
f0:8e:3e:af:9c:d3:94:bd:c5:4f:91:dc:cb:19:7b:
15:7f:7d:87:d3:50:5d:a0:3b:10:6a:a2:14:47:da:
34:db:3b:1e:a3:4b:a3:7a:54:7c:e6:2a:ef:37:29:
95:e9:3a:11:96:ba:84:fd:d2:2c:4f:74:88:b2:3c:
c2:c7:50:ae:dc:c4:5c:18:f1:00:aa:1e:0a:99:a2:
19:56:64:cc:60:e0:ed:bf:4f:7b:ee:9e:5d:14:ca:
91:29:1d:5a:b5:1a:19:01:a1:a8:a8:35:6b:2d:d4:
d1:28:a7:92:41:80:9d:0b:70:f6:ec:b6:87:eb:ef:
93:ac:eb:4d:5d:38:41:3c:75:27:4d:30:91:c1:07:
c8:bb:f9:9b:e5:1f:e3:08:93:a9:77:25:c7:bf:07:
df:15:7e:f8:e5:63:40:9e:53:24:6b:6e:09:1f:9b:
12:cc:17:f3:08:61:c0:9d:4f:49:b8:93:aa:04:05:
f2:9e:60:cf:81:d8:ac:cd:7a:e4:8a:25:02:1f:3e:
ab:36:2c:c0:02:6c:2e:86:b3:2e:42:74:27:22:e6:
88:42:f9:92:17:e0:cc:ec:91:f9:52:cc:1b:26:a2:
34:27:c4:9b:d6:c0:77:9b:32:5d:ef:85:63:0f:2c:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:C7:92:6F:A3:BF:2C:DC:4A:5C:01:A9:C9:21:89:BF:35:78:58
X509v3 Authority Key Identifier:
keyid:A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:43:ed:84:84:7f:44:92:ba:38:9d:4d:95:c9:b7:2b:c7:c7:
5b:4f:c1:26:28:d3:de:cc:a8:c3:73:5c:bb:b7:96:43:77:93:
dc:ea:e8:6f:2b:9f:06:36:51:80:1e:55:a5:0a:48:d4:6c:b5:
6e:1e:da:42:40:2d:56:7c:14:fa:25:df:79:d0:0d:f5:00:ca:
b6:5e:3e:44:75:cf:86:fe:62:95:34:fb:20:80:89:e8:d8:45:
37:67:31:4b:09:de:32:8b:13:85:7d:ab:16:c6:1d:e7:f2:39:
4b:0e:7a:11:4d:5b:b9:4b:f1:66:d1:05:c9:1f:f9:65:a5:c1:
99:05:c9:02:91:01:20:a6:86:d7:52:19:b3:3d:e0:68:40:87:
43:33:f7:99:8b:79:7b:70:15:9f:2e:3b:6e:3c:72:eb:77:b4:
c1:4c:51:a3:e5:43:18:40:05:fd:3e:7b:a3:fb:ed:4a:85:c3:
f2:7e:d9:f7:ce:c9:a5:48:59:96:2d:e3:3f:e8:48:47:39:5c:
56:b8:d8:86:ac:3a:bb:18:f3:39:7a:5d:61:fa:b1:6e:bf:8a:
d4:11:d7:76:3f:3e:0f:6f:6f:5d:40:c3:e6:cb:8d:e7:0e:db:
ca:3b:62:99:5e:f9:0a:65:51:ef:4d:4c:44:ca:93:94:c5:f2:
d3:a3:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:18 2025 by rpki-client