Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: 8IX+TSkhg9Hmg96akvORxhzHQDepWX8hraPo+6LaFWw=
Subject key identifier: 91:5A:B1:6B:17:D3:4A:AD:0F:3E:34:DD:8C:39:F5:99:D2:5D:DC:10
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 01987A895DDD4816DF6CB32E4D90E077E2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0D29
Signing time: Tue 05 Aug 2025 14:01:19 +0000
Manifest this update: Tue 05 Aug 2025 14:01:19 +0000
Manifest next update: Wed 06 Aug 2025 14:01:19 +0000
Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=)
2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=)
3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: GJh05RtdDq353vH1uwwFAAvY47VZP/fmdCLj1zqMtjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:5d:dd:48:16:df:6c:b3:2e:4d:90:e0:77:e2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Aug 5 14:01:19 2025 GMT
Not After : Aug 6 14:01:19 2025 GMT
Subject: CN=915ab16b17d34aad0f3e34dd8c39f599d25ddc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:95:75:f0:6b:8e:d1:83:98:9c:28:52:53:
c9:21:db:b3:83:73:02:bc:85:0e:11:8a:cc:1e:9c:
d3:82:04:83:90:b2:08:3c:82:d3:8a:fd:bc:c6:0c:
f6:f9:55:bc:c2:32:68:d2:a6:d3:21:a6:c7:c3:a2:
4f:54:3f:9b:ec:b7:5a:b3:27:3f:10:90:61:84:f1:
57:1f:bd:81:50:09:6a:6e:82:1a:15:62:cf:b0:bd:
f4:55:df:02:c2:7f:ff:63:33:3b:83:ab:23:f9:fa:
e5:b5:ae:c1:ee:41:38:0e:75:66:df:fa:e8:6b:33:
2b:82:b2:7e:bd:d3:90:59:8e:6b:ab:c6:2c:88:0d:
4d:40:33:38:a7:ed:12:ef:0a:3d:24:55:12:f6:d8:
6a:75:71:f8:1e:7e:84:8e:99:a9:e8:7e:b1:56:73:
ec:20:6b:bb:99:71:cc:cb:86:54:de:db:7c:da:57:
0f:e0:c3:ca:0d:e4:ee:aa:20:97:c1:bc:21:22:7d:
58:fb:d3:26:16:41:29:e4:b9:11:2c:c9:49:8e:4d:
51:7f:ed:82:ca:00:95:6b:3e:a6:d2:09:46:5f:12:
66:00:10:18:5e:12:6a:f3:b5:f9:94:99:f9:69:0d:
84:71:f7:67:ab:bd:55:41:71:bc:aa:fe:cd:63:da:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5A:B1:6B:17:D3:4A:AD:0F:3E:34:DD:8C:39:F5:99:D2:5D:DC:10
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5e:d7:eb:8a:2f:0a:de:4d:3e:90:c1:15:8c:ca:e3:6c:a1:
41:f5:c9:e8:58:87:70:ea:d7:e9:d4:ae:0e:91:35:2c:20:83:
f9:f9:c2:e5:04:fd:6e:98:40:dc:0f:1b:d6:4b:d3:9e:02:a9:
8d:3a:c0:b2:92:1e:d9:3d:6c:08:81:58:97:50:ce:31:0e:66:
6b:f5:7b:ef:ab:5a:9f:34:e4:80:9d:7e:30:47:88:88:4e:c7:
cb:0e:c3:7f:5a:9b:b3:6c:c0:70:9f:bc:5e:e0:1a:62:8d:c4:
6b:31:33:fa:6f:94:30:e0:c2:6c:f3:a4:da:e6:c5:da:5c:b9:
b2:3f:19:a6:a4:d9:ee:23:34:b4:83:e7:6f:fa:9d:01:52:1a:
0a:4b:62:d7:bc:aa:72:29:e9:eb:25:b7:60:e2:6f:8c:fa:40:
4c:d7:42:1d:8b:a2:33:e0:d1:61:6a:9f:4e:25:f9:55:1f:d2:
47:b5:0f:41:13:30:02:3f:01:0e:e0:24:b9:d9:1e:f4:c1:9a:
22:f6:8a:a0:b3:a9:71:d3:22:04:af:1b:9e:bf:d9:ab:a5:1c:
b7:90:d2:a7:83:dc:01:a2:65:52:86:55:31:2b:ea:c9:ae:a5:
f2:b1:91:76:a3:36:24:9b:a6:c8:39:b8:43:92:22:2f:40:1c:
4d:ec:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:10:46 2025 by rpki-client