
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier: ZNdATWCx7oSrk12ExqDSsDnc9YrLcdsUktfU8HQ/x70=
Subject key identifier: 53:B2:7D:BB:31:AD:91:EE:1D:AB:78:A4:EA:AF:03:6C:9D:0F:8D:14
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 01988EEB42DE90A4F751EE8ABE3D13968196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 13:00:39 +0000
Manifest this update: Sat 09 Aug 2025 13:00:39 +0000
Manifest next update: Sun 10 Aug 2025 13:00:39 +0000
Files and hashes: 1: VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa (hash: E6B6Bl1mDcetd5EsaNvc0boHcTeWIhqXRqGoFPj9kUc=)
2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: PmMz8nL8P6LIGfe8ddcw1r6odvyw93x1uaBnriEu7vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:42:de:90:a4:f7:51:ee:8a:be:3d:13:96:81:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Aug 9 13:00:39 2025 GMT
Not After : Aug 10 13:00:39 2025 GMT
Subject: CN=53b27dbb31ad91ee1dab78a4eaaf036c9d0f8d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:c7:50:d0:9c:4e:b7:d3:ce:e1:66:1a:0e:
08:2a:d1:35:3b:7c:39:98:66:b7:4f:91:fd:12:2e:
58:0a:e4:6a:60:82:f8:7d:28:d0:02:53:55:57:3e:
71:71:2a:72:fa:13:fa:af:33:6e:32:6e:a2:29:3a:
27:87:5c:5a:4f:83:ca:7d:56:1f:e3:b0:cc:57:59:
f7:42:ec:d2:5d:3f:c9:6f:76:34:36:a3:e9:5a:c3:
46:af:e0:dd:31:25:e9:01:3f:2d:e4:fa:48:65:fe:
37:19:a0:19:3c:a5:33:05:41:64:1e:9b:8e:97:89:
50:96:48:dd:c9:bd:6a:42:4f:c5:23:3a:fe:5b:1c:
95:c9:52:f6:5b:b4:75:f2:ea:07:5c:ff:ed:d2:fc:
81:80:ac:3b:fc:a7:1d:c3:52:80:19:9f:a2:41:6f:
94:bf:7a:8a:a5:fd:07:25:ed:30:39:c6:58:b2:87:
5f:3b:06:5d:52:55:40:c9:3c:23:1f:00:ca:03:ca:
4e:95:3d:ae:9f:ce:78:c3:80:47:98:54:6e:1c:35:
73:f2:c2:03:b7:1f:a5:d4:7a:9f:29:31:dc:eb:01:
ed:08:7a:1f:65:cf:93:88:22:9d:6f:81:e4:6a:98:
4f:d8:aa:bb:13:eb:10:1e:73:f4:2f:4c:be:5f:dc:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B2:7D:BB:31:AD:91:EE:1D:AB:78:A4:EA:AF:03:6C:9D:0F:8D:14
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:da:51:ff:8c:29:9b:79:fb:fa:03:a1:9e:ff:be:c5:26:72:
f4:bf:1e:b1:69:4b:9f:83:72:92:4f:22:dd:d2:95:3e:95:4b:
cd:d7:8b:03:62:28:79:00:56:8b:fb:6f:76:1b:27:11:c4:45:
80:c1:a8:9b:06:62:e3:a5:94:d0:fc:80:8d:3b:d8:ab:79:b9:
41:de:28:61:b9:c9:16:2e:4b:73:32:6b:dc:91:e0:c2:62:ad:
5d:96:87:d7:11:d5:01:20:1e:17:d7:03:bd:85:d4:7f:df:e0:
50:1b:d3:0c:f3:56:7b:b5:94:1b:c3:1e:83:ab:6d:29:9d:84:
b7:f1:84:ac:8f:2d:8c:3f:df:09:0e:f6:0c:a8:b1:36:ea:01:
6f:7d:d4:44:3a:a2:15:30:ff:15:cf:c7:79:b7:d9:b4:b8:e0:
62:fe:49:d2:89:e4:f8:f6:b7:51:52:75:8e:b5:db:66:f2:ab:
e5:95:d7:f2:03:d1:5e:08:18:01:f0:d4:a4:5f:05:c0:b4:64:
c5:47:3a:41:da:15:ed:6b:c1:f6:0f:6a:92:9a:fb:00:2e:e3:
da:f4:38:b1:b9:9a:6e:a0:a8:c7:02:8f:40:49:f2:3f:07:15:
10:64:9a:4b:22:23:af:f2:23:8f:a7:74:37:d2:40:37:0b:1a:
19:ae:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:12:55 2025 by rpki-client