
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
File: oI5By_3vrQuw4pckeswaIB0t9KA.mft (raw, json)
Hash identifier: FjdruW8YpH2fA1m89BUuAwHIz73YdSiXxfhk2nqFy5Q=
Subject key identifier: A8:DC:F3:CF:D0:63:9E:25:96:21:2D:5E:2F:C6:A0:01:91:78:ED:24
Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Certificate serial: 0198A0F1C663C509AA7D370B25EFC0790DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
Manifest number: 11C2
Signing time: Wed 13 Aug 2025 01:00:56 +0000
Manifest this update: Wed 13 Aug 2025 01:00:56 +0000
Manifest next update: Thu 14 Aug 2025 01:00:56 +0000
Files and hashes: 1: kaGph50MrnZk9_Ae5Md0JZHkmEM.roa (hash: KOuavh84jne4Oayx4KsSyaMHm/sNkEEba6rU0bPnEbc=)
2: oI5By_3vrQuw4pckeswaIB0t9KA.crl (hash: JirI9kmdyj+XIoyzL4FepjtqqgFXbOikvp4U2i6PzVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:c6:63:c5:09:aa:7d:37:0b:25:ef:c0:79:0d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Validity
Not Before: Aug 13 01:00:56 2025 GMT
Not After : Aug 14 01:00:56 2025 GMT
Subject: CN=a8dcf3cfd0639e2596212d5e2fc6a0019178ed24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:f2:24:79:25:3a:cf:54:de:7a:76:e0:c5:
42:f3:2c:e2:53:69:75:4c:8b:3e:65:f0:26:b4:81:
4e:07:4a:20:07:ac:8e:ec:ee:6a:a7:fa:42:e3:73:
ed:aa:b7:37:83:3f:ff:60:15:dc:71:eb:ef:88:3b:
2e:90:43:86:8a:55:77:e2:f4:4a:60:27:49:4e:5c:
86:69:b3:75:8f:7f:14:31:62:0b:05:1e:ae:a4:20:
87:0f:a3:19:fc:27:2f:32:60:bc:b4:45:bf:37:8d:
58:95:77:46:aa:8d:04:69:6d:55:f7:8e:1c:88:f1:
e3:ce:1a:07:66:86:64:33:41:4f:1c:97:0b:a8:3a:
78:c3:e4:1c:b4:24:51:ed:93:8d:f8:76:4a:d4:65:
06:90:4d:ee:99:18:76:f7:56:57:62:08:32:88:f2:
87:c6:84:7f:ed:3f:46:bc:b9:62:f2:4f:19:de:a8:
ff:c9:e4:f3:1f:64:a7:1d:41:12:81:25:d3:33:73:
2b:f0:a7:3c:13:53:50:78:0c:78:a6:6c:26:e3:9a:
66:22:7a:28:eb:7f:57:3d:32:1c:21:41:c2:26:c6:
6b:2e:11:6b:11:d8:dd:a9:20:3c:40:e4:bd:58:ff:
cf:f2:6e:02:6c:54:5c:c4:f8:85:d0:e7:34:c3:c2:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:F3:CF:D0:63:9E:25:96:21:2D:5E:2F:C6:A0:01:91:78:ED:24
X509v3 Authority Key Identifier:
keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b4:bd:a0:1c:1e:13:4d:bc:be:39:e5:30:e6:b4:db:d5:fd:
5a:5d:a8:b0:b4:cc:16:05:54:73:5a:2b:7f:73:41:4b:7a:96:
99:f3:36:5c:83:6c:27:86:2f:db:43:06:ff:11:18:01:ef:60:
45:aa:43:7b:45:07:4f:02:24:2a:b5:8d:4b:fc:a4:53:d9:c9:
6e:97:8f:8b:c0:70:11:29:dc:7b:8e:42:08:77:4a:23:0a:7e:
dc:91:37:e8:9d:e6:23:53:b2:11:09:2b:24:a4:19:9f:25:61:
49:e4:4f:94:5d:d3:f5:c3:9c:3e:e0:a5:a4:87:22:ba:bc:00:
aa:33:5d:96:c0:ab:8d:c3:2c:4d:1a:66:28:7d:7f:c4:11:71:
2f:85:af:85:25:c9:5d:af:75:b2:ea:1d:21:c4:4e:b4:96:a2:
d9:71:bf:ad:db:fb:7b:d2:10:75:fc:c3:e9:e0:a3:f3:ce:3a:
aa:71:96:88:15:c2:53:56:75:c1:89:fa:6a:09:d2:92:6c:10:
e7:79:14:3d:24:1b:70:bb:f7:01:c0:a3:af:b0:04:94:da:17:
20:8e:a2:9c:54:a3:a0:e9:c9:66:b3:c3:41:17:f6:f7:2d:f8:
93:aa:5e:20:dd:1a:b0:d3:e5:a5:17:6d:96:62:ee:d1:46:bd:
24:ed:df:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:00 2025 by rpki-client