Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.mft
File: oKrlhQo22yiCKmwa_F_6z_AH7vI.mft (raw, json)
Hash identifier: qEZ2EqjYZ92H25Sk3G07VVHuysmuqWzl+JnaLe2LBjg=
Subject key identifier: 59:95:06:67:9E:3A:D0:C0:87:F6:67:59:05:9D:DD:B4:FE:92:A7:BE
Authority key identifier: A0:AA:E5:85:0A:36:DB:28:82:2A:6C:1A:FC:5F:FA:CF:F0:07:EE:F2
Certificate issuer: /CN=a0aae5850a36db28822a6c1afc5ffacff007eef2
Certificate serial: 01984708FC1CB06157EC81FC634F6DD81A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKrlhQo22yiCKmwa_F_6z_AH7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.mft
Manifest number: 08F6
Signing time: Sat 26 Jul 2025 14:00:27 +0000
Manifest this update: Sat 26 Jul 2025 14:00:27 +0000
Manifest next update: Sun 27 Jul 2025 14:00:27 +0000
Files and hashes: 1: oKrlhQo22yiCKmwa_F_6z_AH7vI.crl (hash: Eu2PA+4Dc3VGA0QnL2d9Lc4lOVoXus0/JCZKJxh8mVI=)
2: vPivcilO-E_vThnuw1Jbeo7vl7Q.roa (hash: ue62obgrVIotq1vJM56av/nq50vzkGkDbEL5zd0kvpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKrlhQo22yiCKmwa_F_6z_AH7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:fc:1c:b0:61:57:ec:81:fc:63:4f:6d:d8:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0aae5850a36db28822a6c1afc5ffacff007eef2
Validity
Not Before: Jul 26 14:00:27 2025 GMT
Not After : Jul 27 14:00:27 2025 GMT
Subject: CN=599506679e3ad0c087f66759059dddb4fe92a7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:a2:73:e7:8d:02:02:cf:e9:23:59:49:a8:
11:e6:e2:f2:52:3a:dc:46:40:17:9c:12:df:fe:79:
5c:3b:c3:8c:a4:5c:0e:f5:14:6f:47:00:b1:21:18:
39:ad:c9:f6:8b:a4:60:23:e0:0a:57:f6:ff:cc:96:
4a:b6:bd:89:77:4e:49:b9:27:f3:4b:7f:bd:f2:02:
d0:0e:55:29:48:b8:57:34:90:28:de:2b:a0:7d:e1:
73:9f:db:11:43:b2:04:21:65:8a:bf:5e:2c:29:c5:
ab:10:e8:07:38:37:af:ae:58:51:74:05:cb:dd:7d:
14:1f:cd:cf:a3:eb:f9:59:53:b0:3a:fb:8f:93:f4:
a7:4f:3a:c3:b8:05:3a:45:5c:1d:d7:59:da:6f:fb:
6c:1b:e6:ba:d2:b5:f4:c5:97:a6:15:39:c3:e6:86:
7a:2a:9b:ec:99:42:e4:9a:aa:3b:dd:6d:53:90:81:
61:cf:a0:9d:85:0e:cf:a5:cc:f2:46:7f:92:9c:f9:
e9:c6:9d:67:59:b8:99:9e:a0:1e:c4:91:e2:2a:f4:
be:ca:f7:f2:25:7d:fc:51:34:0c:7b:a7:86:96:aa:
e0:c3:ae:bc:b7:d1:68:e4:35:5c:67:ae:c5:f2:30:
27:e3:a6:e1:ff:63:b2:fe:71:d8:d3:16:96:7d:9d:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:06:67:9E:3A:D0:C0:87:F6:67:59:05:9D:DD:B4:FE:92:A7:BE
X509v3 Authority Key Identifier:
keyid:A0:AA:E5:85:0A:36:DB:28:82:2A:6C:1A:FC:5F:FA:CF:F0:07:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKrlhQo22yiCKmwa_F_6z_AH7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ff:f2:7c:e4:07:8b:55:72:aa:97:41:b5:4e:3f:97:68:6f:
83:fa:34:e3:95:33:f5:0d:5b:71:fd:8d:cc:b5:1a:9c:cf:46:
eb:cf:37:de:68:93:72:87:12:5b:c1:54:ac:97:ca:8d:39:3e:
9e:4d:da:60:46:21:e7:f1:8c:16:6d:40:19:cf:e3:69:49:ad:
3b:90:ce:19:fb:be:58:2a:b7:73:19:49:8e:f2:99:18:71:b9:
52:e0:f0:4b:70:3c:e6:63:67:9a:89:bc:ec:8f:8b:a8:79:78:
ce:0a:0a:4c:d4:9f:2c:fc:0b:a0:13:82:29:ea:22:a8:c0:ca:
75:ee:92:08:3b:aa:54:88:00:cf:90:20:c2:f5:91:81:52:d9:
c7:f2:19:09:86:0d:e1:2b:9e:2a:29:84:39:58:f4:4a:bb:f1:
46:0e:95:36:05:2f:68:8f:bb:bf:bb:a2:da:cd:3a:d8:58:34:
dc:0d:46:87:2d:65:a1:2c:8d:5a:11:63:c9:28:00:c1:62:6f:
31:7d:2b:b3:0f:b3:32:f9:27:6c:0d:6d:27:15:de:7e:47:a4:
00:d8:51:cb:09:67:03:ff:28:c9:f2:1b:7f:5b:1c:eb:61:c0:
63:e1:82:80:d4:9f:eb:61:e2:9b:05:78:c1:bb:1b:9d:5d:c9:
32:6f:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:33:30 2025 by rpki-client