
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
File: oixSeMS7sCbhL_12C-rFn8FV_CU.mft (raw, json)
Hash identifier: dpvK+uxaxA5mgoksh7FEwp31KLVoiTRwak7xp13Ssr4=
Subject key identifier: 27:92:72:6E:3F:CA:D6:02:46:7C:79:09:D8:7B:AA:1F:7D:C6:A7:0D
Authority key identifier: A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
Certificate issuer: /CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Certificate serial: 019875D19B948412943A6EE0B43504B6CD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
Manifest number: 0A84
Signing time: Mon 04 Aug 2025 16:02:07 +0000
Manifest this update: Mon 04 Aug 2025 16:02:07 +0000
Manifest next update: Tue 05 Aug 2025 16:02:07 +0000
Files and hashes: 1: P8h8nlnz4dD4fkTghoS9unFyKig.roa (hash: MYpmJNo5HIfucuzKcNdlv0aQadbbtMqL8vbh/XHclWY=)
2: oixSeMS7sCbhL_12C-rFn8FV_CU.crl (hash: B8z/q1cowvMkPs6L1tuI3B2K/fhnXcnCChh9SSnzCLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:9b:94:84:12:94:3a:6e:e0:b4:35:04:b6:cd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Validity
Not Before: Aug 4 16:02:07 2025 GMT
Not After : Aug 5 16:02:07 2025 GMT
Subject: CN=2792726e3fcad602467c7909d87baa1f7dc6a70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:ff:0e:32:1e:dd:86:f7:35:88:8c:a6:56:
3c:e5:61:c8:1f:f6:c5:2b:a2:42:99:57:31:0a:31:
c1:96:67:1f:5c:4a:4e:83:05:bb:4d:cb:06:5b:eb:
e3:23:36:0d:c8:41:4f:28:18:66:76:a4:a0:0a:b2:
c3:96:52:3c:2a:b9:84:f5:84:fe:99:1f:0b:6b:c9:
63:79:08:af:a5:67:c7:de:34:41:73:e5:26:fd:34:
de:ed:c5:69:69:94:48:c6:4b:d5:01:ca:ac:af:18:
f6:28:18:d8:f6:db:26:67:69:03:9c:b3:c9:03:c0:
d9:09:dc:39:3b:ba:57:d6:79:f3:4b:38:5b:c6:25:
02:2d:de:38:70:15:8a:b3:60:c3:eb:07:45:5f:84:
f1:7f:d8:55:19:df:21:d3:c9:cc:0d:37:25:e8:ec:
0c:83:45:d8:6f:34:d8:a4:b7:f6:c0:a1:76:b9:5e:
a9:88:96:6f:99:8b:86:94:8f:cb:11:10:fd:9a:f8:
43:ba:e0:ce:e7:25:af:77:4a:6b:81:47:1e:09:88:
02:36:ac:85:0b:34:3c:d1:01:ad:3a:92:78:8c:8f:
cd:46:32:86:58:b5:fa:75:57:26:e1:f5:c4:2c:46:
74:c3:39:8c:70:31:c5:07:b1:0a:55:62:74:08:c8:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:92:72:6E:3F:CA:D6:02:46:7C:79:09:D8:7B:AA:1F:7D:C6:A7:0D
X509v3 Authority Key Identifier:
keyid:A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:00:4c:6d:1b:42:84:08:2e:d9:5d:6a:0a:01:43:d2:28:fb:
94:1d:9e:e3:67:97:1b:8e:22:3f:87:84:b9:18:4e:cb:e4:de:
11:3a:83:7c:36:a3:67:1a:a7:bc:c6:48:04:55:17:5b:e6:3a:
c0:04:05:7d:d5:18:e9:cb:98:18:4c:93:d1:d8:42:c5:89:b8:
6d:81:1f:2c:51:79:6d:2c:66:a0:66:f8:53:be:27:13:45:93:
a1:a9:6a:08:c0:00:e4:ec:4d:a8:40:ba:7d:89:ff:1e:59:48:
35:1b:57:3a:27:35:4c:82:00:f1:a9:89:6b:ce:9e:15:ad:06:
9e:e4:24:1f:60:9d:29:79:3d:0d:49:a1:69:d0:f5:e9:89:b1:
04:c3:c3:78:93:b5:3e:79:8c:a1:b7:5d:c7:fa:69:24:de:2d:
c6:7f:e1:22:b8:69:5c:58:91:b9:0f:7d:c8:57:b9:d3:6a:38:
84:3e:21:d5:ea:3a:e9:38:19:4d:c6:4d:db:ec:aa:8c:f7:77:
20:80:b6:53:ec:ca:6d:d3:92:56:09:49:16:a9:b6:8e:86:73:
54:b0:a9:dd:49:c0:52:be:f7:95:95:5d:84:a5:77:30:04:1a:
ec:ce:50:7b:70:45:dd:59:fa:20:d1:c0:b8:7e:c9:85:19:c1:
e0:2e:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:32 2025 by rpki-client