Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: ewGvSAFR9tR7B3x8ceXILCdOskJFGvNCT1C8vHOF5Mk=
Subject key identifier: E5:D3:8F:90:56:6D:82:53:AD:6F:C8:1A:8B:72:0D:00:7C:7A:95:11
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 01987306774CCF5BD56F3C9141CDBD92EF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 0186
Signing time: Mon 04 Aug 2025 03:01:00 +0000
Manifest this update: Mon 04 Aug 2025 03:01:00 +0000
Manifest next update: Tue 05 Aug 2025 03:01:00 +0000
Files and hashes: 1: 6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa (hash: c/B6n5T0x8EmEsvZEc0l8JbZU1xcXl0cLbnUAdZI57M=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: bKuBKp3BxGRl/Fz+bISyfs17PxSQe96G9wbGoUsyFXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:77:4c:cf:5b:d5:6f:3c:91:41:cd:bd:92:ef:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Aug 4 03:01:00 2025 GMT
Not After : Aug 5 03:01:00 2025 GMT
Subject: CN=e5d38f90566d8253ad6fc81a8b720d007c7a9511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:4b:1e:0c:b3:9a:f8:06:22:24:51:9c:a4:
14:a6:89:68:40:f1:62:21:4e:9a:41:c4:3a:38:79:
9b:0b:8c:f6:68:f7:8f:36:77:db:f4:9e:50:71:62:
31:a1:0c:92:e1:0a:33:6a:a4:d8:01:de:31:05:50:
ba:8a:de:ff:5b:89:93:da:a5:32:a4:1c:f7:fe:63:
9e:29:b1:59:ea:3a:1e:45:f9:1c:98:76:26:87:cf:
6d:f4:d9:22:08:f7:5b:d9:33:f9:25:f4:63:cf:6c:
4f:84:55:b0:80:9a:bd:68:cb:ca:3b:86:c7:a8:ce:
d4:41:15:4e:6f:1c:dc:1d:1e:83:19:4d:9d:98:82:
e1:eb:13:14:44:e0:c9:2f:c9:e2:73:6b:7c:4e:c4:
36:d1:e6:99:22:c4:62:23:2c:a9:bd:f7:60:74:b4:
61:8f:89:b5:de:c2:a5:0a:d1:6b:61:24:33:b0:25:
88:fa:23:ca:c0:42:7a:67:20:4f:6f:6a:18:43:c9:
a5:3e:7c:73:7e:23:e8:d5:d9:cf:1a:de:99:e0:c1:
1a:4c:10:d2:93:1d:1b:13:36:a6:a0:70:ee:ba:b8:
c1:05:d3:ad:e0:03:da:f1:54:b5:b4:13:27:39:69:
e7:5a:38:73:b6:c2:0a:d9:f1:16:e3:9b:51:bc:08:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D3:8F:90:56:6D:82:53:AD:6F:C8:1A:8B:72:0D:00:7C:7A:95:11
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4c:2f:1e:c7:cc:51:d5:ea:c2:fe:43:38:d2:7d:39:93:5a:
36:d4:c2:51:ba:0f:10:e4:cb:1f:d9:a8:b7:ae:f9:2c:c4:d0:
97:5b:06:a5:0d:18:af:ac:bd:64:ff:e9:a8:75:25:48:f6:da:
67:f4:40:b7:bc:d0:06:77:b2:19:81:11:26:2a:cf:fb:56:26:
6e:cd:07:2b:5f:cb:09:fe:c1:9b:87:80:54:6e:36:5e:91:b4:
41:98:4e:55:bf:5e:85:21:9d:79:42:61:b8:99:c7:da:be:20:
77:d3:a5:50:66:dc:8e:83:34:ec:42:8e:d4:95:1d:f8:5d:15:
d8:13:b9:44:f2:40:aa:88:41:1d:f6:dc:aa:ae:35:c0:cd:73:
ca:6a:c6:50:d3:3d:16:f6:da:cb:da:72:eb:1d:4e:62:23:4f:
80:ee:1b:70:a0:ec:4d:19:60:e4:20:b0:9e:cc:56:b3:cc:c8:
cb:92:d2:e5:3e:f2:48:74:e0:67:5a:4f:aa:7c:2e:ca:af:25:
e6:0f:9e:a4:a6:cf:10:fb:e0:87:56:3e:34:fd:97:88:d8:0b:
0e:1f:7a:48:80:ee:e8:39:ef:c7:b0:b8:75:3c:8a:25:c5:c0:
f5:72:38:23:30:b9:88:cf:d0:8f:9b:80:d2:78:7c:7b:a8:26:
f7:57:06:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:01 2025 by rpki-client