Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier: szKqawHfVeaSYinfYnlAYcofI/QewxWdaZBeOCQS7EM=
Subject key identifier: 8F:C6:EE:19:90:C8:77:8C:52:B4:87:C1:8F:CB:DA:85:FB:B0:CF:9E
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial: 0198733D777FFC6DD841CC54BC0DDED7508C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number: 11E9
Signing time: Mon 04 Aug 2025 04:01:04 +0000
Manifest this update: Mon 04 Aug 2025 04:01:04 +0000
Manifest next update: Tue 05 Aug 2025 04:01:04 +0000
Files and hashes: 1: 1-rpUgw0W3sKSFdW3yshaE1HCCc0.roa (hash: c/Tt5N/pZWiN2mpptC/U9LHYusWW/dCE4lcNMT3U+WE=)
2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: AgZvaeC7LdxeTArHeh2XWVQVQzp+EHDIbm2lTZqy1Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:77:7f:fc:6d:d8:41:cc:54:bc:0d:de:d7:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
Validity
Not Before: Aug 4 04:01:04 2025 GMT
Not After : Aug 5 04:01:04 2025 GMT
Subject: CN=8fc6ee1990c8778c52b487c18fcbda85fbb0cf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:1b:6c:b8:6d:70:48:e8:15:c1:c1:a0:86:
92:b0:a2:7b:f2:e7:c4:61:d3:77:6e:6c:dd:ac:02:
05:52:73:8c:dc:96:64:22:2b:21:57:55:99:70:b0:
72:8d:75:7c:d5:93:fd:f1:79:a7:7d:ef:d5:1b:12:
d8:27:47:98:43:93:2e:10:dc:61:d9:cc:fb:9b:57:
72:77:a7:a7:9b:49:0c:7b:75:6d:0e:9e:7d:3a:10:
86:84:70:50:dd:c3:62:c0:74:18:2f:d3:68:10:80:
8b:f2:99:96:fa:29:dd:56:d9:ac:e0:0f:83:d8:7d:
6b:90:8b:be:a6:02:df:8d:f6:74:56:1b:93:e5:57:
2a:10:18:2f:2e:8e:a0:dc:24:a6:e9:ff:8c:fe:93:
37:4e:91:f4:f4:a0:4a:e0:07:f6:be:0a:98:1a:fb:
69:16:da:1f:9b:97:4c:30:91:9f:6a:57:a7:ad:b4:
e8:d5:3f:40:66:be:8e:cb:52:aa:dd:78:60:8f:e8:
9c:a1:2c:47:a4:4d:b1:e7:43:b3:a9:70:93:ba:0c:
4c:70:29:b8:c0:44:5b:d3:d9:39:97:61:7c:21:cc:
25:de:3a:10:88:85:ec:f5:2c:b1:86:b3:25:b9:5c:
e2:41:8e:45:27:a4:ba:ea:ff:47:74:cb:ec:8b:36:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C6:EE:19:90:C8:77:8C:52:B4:87:C1:8F:CB:DA:85:FB:B0:CF:9E
X509v3 Authority Key Identifier:
keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:80:9f:8e:2b:99:9f:67:f9:42:f2:c1:23:b1:19:18:06:b0:
7e:84:f1:22:30:28:a6:19:fe:18:ea:26:11:eb:fd:bb:70:ce:
f0:0f:b9:fa:4a:b2:9c:08:34:e8:54:66:ac:40:8b:f1:a2:6f:
0c:20:ca:b6:32:59:33:6e:99:53:5a:36:af:11:d2:5e:a8:68:
a0:cb:c4:1c:92:7c:83:95:09:ac:ce:fa:48:3b:85:3d:51:94:
21:5b:30:12:91:75:5b:54:c8:2e:17:32:92:0d:d2:1c:47:27:
e8:82:eb:66:cb:5c:63:4b:e1:f4:9f:c8:99:34:ae:de:4e:58:
2e:80:fc:86:59:37:ac:91:64:dc:a6:a3:4a:9f:f6:8d:37:ce:
e5:86:ac:ff:28:f6:31:69:2a:4c:b5:7f:5c:82:00:38:77:c6:
8c:1c:fe:eb:55:78:bd:6f:14:85:d3:38:d2:b7:94:90:77:eb:
d2:fe:40:fb:10:e8:c1:0a:f1:90:71:82:01:7a:91:4f:06:9c:
24:ae:02:11:38:cc:c1:7f:55:6c:d6:34:1b:d3:99:39:d0:9e:
36:b4:71:23:2e:6b:08:70:0c:c1:02:a4:37:df:44:53:da:c3:
7b:f0:a8:ee:18:51:46:9d:14:ca:3d:51:36:10:b9:08:cd:fe:
83:a6:bb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:12 2025 by rpki-client