Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: pnQXzPi5JjybGPteQV9+OzQFhY14VbdVagNe4BIltRU=
Subject key identifier: 0A:65:33:D1:97:06:73:A1:54:0F:8F:00:CC:0C:EB:A0:CA:83:E7:C7
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019848C0A8E5C38E8DF9AB203245F2940AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0B61
Signing time: Sat 26 Jul 2025 22:00:42 +0000
Manifest this update: Sat 26 Jul 2025 22:00:42 +0000
Manifest next update: Sun 27 Jul 2025 22:00:42 +0000
Files and hashes: 1: I9sseHHLcXl8IcXdLhoUbx9JLxs.roa (hash: C/Kew6JtLz4pztsJd8mKeGa9ZAlJTK60yskRJShN3Uo=)
2: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: HA9wG0a3ODX6Oyka0xy36KZ6XjmSK2UbY1qv/2eZ5r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:a8:e5:c3:8e:8d:f9:ab:20:32:45:f2:94:0a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Jul 26 22:00:42 2025 GMT
Not After : Jul 27 22:00:42 2025 GMT
Subject: CN=0a6533d1970673a1540f8f00cc0ceba0ca83e7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:56:90:97:99:cf:fd:42:82:74:8f:a3:db:
56:9c:f3:23:42:0d:d7:1f:f0:4c:f2:28:e2:30:dd:
c4:b5:ab:58:59:f0:31:86:ce:f5:35:20:ed:34:2a:
55:bb:85:f3:e8:9a:a8:49:b5:ed:a4:cb:d3:a0:08:
fb:cf:c9:d5:12:17:df:eb:d6:65:7a:c7:e5:d1:9a:
0d:54:59:dc:df:c2:7b:42:db:28:8f:41:96:e0:ed:
2f:f8:71:69:35:62:e5:37:fb:c6:01:e6:2e:9b:b4:
bf:47:42:04:62:67:4f:d1:6f:21:da:58:49:46:da:
fd:c2:2a:16:b7:46:9d:5a:ef:1d:cd:ee:b1:e2:35:
0a:69:0c:05:2f:de:e3:99:7e:9d:97:29:d3:ea:88:
89:44:bc:97:d3:5a:47:60:8a:44:ee:ae:a3:7e:be:
81:13:9d:77:68:6a:82:05:f1:c0:3f:1f:10:dd:60:
41:50:6a:9f:ba:83:2e:f9:c7:66:b8:f0:1b:2e:93:
7b:f0:28:83:62:54:df:b7:bc:38:dd:62:87:0c:2a:
9c:f3:17:60:1f:96:d8:eb:c0:b5:27:f6:65:5d:d8:
d1:5e:5b:10:9e:6e:52:6c:d7:e4:5f:ff:c0:6d:58:
e1:9f:93:49:06:c5:06:0d:a6:f5:37:bf:06:8d:c7:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:65:33:D1:97:06:73:A1:54:0F:8F:00:CC:0C:EB:A0:CA:83:E7:C7
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d9:eb:eb:48:0b:ef:f1:1a:f8:56:f1:0d:10:af:96:74:9d:
32:81:37:77:19:c5:1f:fa:42:85:5e:8f:b3:4e:c3:6d:58:ac:
3f:2d:a8:be:d7:82:4a:3a:27:05:df:23:b7:e0:a0:47:59:d4:
b0:e0:84:f2:af:18:1b:6b:b1:d4:40:44:1e:63:58:6d:50:ec:
ef:47:71:c4:b8:ab:21:80:e6:ba:05:33:71:07:2b:2e:06:5d:
b3:37:0b:04:d8:8c:09:ee:fb:13:5c:6e:ba:74:5f:de:c8:4c:
2c:f1:19:92:83:e5:e2:77:3d:14:f6:d3:e3:e5:a9:87:ae:55:
5b:52:b0:b6:a2:07:4f:99:96:8e:13:b7:be:e7:9d:35:b9:c0:
1e:4e:70:9c:15:28:b8:63:46:9a:b6:ba:61:34:9e:c2:b0:dd:
9d:f9:a7:0e:42:d5:86:8e:81:3b:16:5c:f0:54:14:0e:9c:35:
34:cc:5d:e5:a9:88:c0:5a:ef:1e:22:25:50:df:3d:0d:28:61:
ed:a6:8f:aa:f0:e7:54:aa:d2:25:1f:ba:bd:14:f9:c1:77:1e:
c8:9f:29:b3:b7:b3:db:3c:23:ff:ac:be:e7:52:1d:c2:11:3e:
d5:bd:1c:ea:7a:36:3a:24:08:f3:5e:d1:93:2e:8b:f2:40:e6:
5b:41:29:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:56:01 2025 by rpki-client