Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: ElOqPAu0LzHUf5Ul8EF8DvgLUPZUpbOtrV8kT1iKtjQ=
Subject key identifier: 1E:9D:F1:42:CE:26:5D:57:B5:CE:45:1A:9C:07:82:C3:04:C5:F9:C9
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 0198A15F71FE13CCB92F32E39C82E4986CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 04F7
Signing time: Wed 13 Aug 2025 03:00:43 +0000
Manifest this update: Wed 13 Aug 2025 03:00:43 +0000
Manifest next update: Thu 14 Aug 2025 03:00:43 +0000
Files and hashes: 1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: p9pVtYNRpEG4AU3FnVvYAuBNlpntjlBREQMcpKX6cRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:71:fe:13:cc:b9:2f:32:e3:9c:82:e4:98:6c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: Aug 13 03:00:43 2025 GMT
Not After : Aug 14 03:00:43 2025 GMT
Subject: CN=1e9df142ce265d57b5ce451a9c0782c304c5f9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:9b:46:a3:2d:61:5e:96:8b:01:1e:ac:22:
de:7d:e4:d4:74:5b:4f:d0:22:f1:9a:36:e4:2a:fb:
8b:d1:e3:f8:4d:6d:c0:62:ac:fc:54:e3:99:62:5e:
e2:ca:a9:e6:12:c2:55:9a:5e:9c:a0:3a:e3:11:d0:
04:b7:c0:ff:dc:53:1d:9e:f8:68:d5:35:7e:74:a3:
d5:15:af:17:f7:b9:98:8c:f0:be:5b:87:6a:a1:98:
5d:48:f4:68:04:9f:49:65:46:94:1c:71:48:e6:14:
dc:bb:bc:a5:2c:3a:e4:51:dc:7b:fd:65:64:14:61:
3d:de:2e:38:2f:90:2d:6e:d9:8a:3a:3b:1f:a9:8e:
41:29:1c:c9:38:89:94:48:40:0e:f6:a7:6a:f0:fd:
30:96:9d:fa:da:84:21:b9:96:79:f2:25:70:26:d3:
70:f8:67:fc:a0:d4:7c:76:23:99:01:c6:e5:64:56:
8c:f6:4c:ea:bc:46:54:86:fe:ef:59:8b:04:2f:6c:
70:8e:d6:6b:5c:7f:5d:75:bf:56:f6:13:c6:e6:71:
2e:06:a1:09:c1:5e:1c:22:65:18:27:c6:3f:fd:a0:
5e:94:8d:6b:49:86:e4:97:4a:d7:d3:80:11:08:4b:
ce:ca:1f:8a:6d:eb:32:13:d5:a9:59:bb:9b:6b:05:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9D:F1:42:CE:26:5D:57:B5:CE:45:1A:9C:07:82:C3:04:C5:F9:C9
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:49:af:f9:4d:d9:0f:ff:22:2f:8e:24:75:cc:93:8c:97:f0:
bf:33:d8:9c:83:92:51:19:9e:44:dc:a2:25:e3:3b:12:6e:dd:
fd:57:04:f9:45:5e:07:46:60:0a:56:76:ef:13:85:fa:6f:1d:
11:48:ad:c1:9a:57:5f:77:ab:55:af:b4:ab:ba:83:a5:69:f7:
26:34:a0:5f:dc:9a:77:f3:e7:d0:e0:3a:03:b7:d6:69:d3:85:
00:f5:ba:32:f6:8c:db:c9:91:99:fd:e0:41:6a:3e:5e:ae:6e:
0b:c8:1d:84:b2:00:23:90:d8:c7:fd:15:1a:7d:32:32:38:0c:
4a:57:a2:15:e5:b5:8c:ba:8e:6d:fb:83:d6:a0:84:f8:e2:a0:
d2:0e:49:d2:b1:f1:87:f7:6a:2b:d2:fe:c8:52:3f:d6:46:11:
72:5d:d5:60:62:e8:05:e3:f6:9c:8c:1c:85:00:90:9a:49:ad:
2a:e5:7f:44:76:0d:9c:86:a4:e9:2d:5a:a5:30:b0:ad:ce:e5:
fd:43:da:cb:fd:5f:fb:f2:95:27:3c:73:a8:00:3f:df:d0:e3:
38:84:f0:e7:71:24:50:36:7c:49:19:99:84:a6:6e:88:03:aa:
d8:45:b5:ec:14:38:60:05:ce:4c:c6:f3:c6:6e:4a:cb:6f:67:
69:77:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:22 2025 by rpki-client