Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: q1s+KYASwXGC1Jqz/3OMy8E1+vajpRBcEfQCUhQ4QTs=
Subject key identifier: 93:27:8A:76:26:D3:D1:4D:E7:CB:42:9D:26:27:44:8C:D0:02:62:DE
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 01984965CA27598079244DB0D115476DD36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 01:01:04 +0000
Manifest this update: Sun 27 Jul 2025 01:01:04 +0000
Manifest next update: Mon 28 Jul 2025 01:01:04 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: W/jg5REI++x9qYBGFU+hvihzfL6h9WC3z50HRTwMYX4=)
2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ca:27:59:80:79:24:4d:b0:d1:15:47:6d:d3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Jul 27 01:01:04 2025 GMT
Not After : Jul 28 01:01:04 2025 GMT
Subject: CN=93278a7626d3d14de7cb429d2627448cd00262de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:88:64:9e:38:a1:20:a7:1a:ba:ef:25:2c:
21:cd:e3:00:36:e6:94:3b:9d:10:7b:13:59:5b:f7:
cc:6a:ea:3c:e8:0f:dd:bb:5b:31:9d:92:e0:e1:af:
26:7f:5c:24:6a:24:5e:c4:68:6f:b9:3e:1b:8c:27:
27:0c:39:14:04:b7:c9:4c:05:81:18:d6:3b:0e:21:
a8:b0:8f:78:4c:e9:58:d9:2a:01:ae:97:86:85:9c:
ff:e7:ac:cd:f9:b8:0c:6b:90:61:7c:a9:66:24:14:
c0:41:6b:45:7b:4d:b1:23:db:d9:14:df:70:ed:46:
35:13:6b:7e:e4:d6:24:20:96:e8:a8:10:f2:30:a6:
30:ff:3c:7c:d8:49:60:e5:7e:30:99:bd:7a:d2:b0:
5d:d6:28:20:1a:31:e6:23:6a:2f:cb:a7:18:81:97:
13:8b:d5:58:0e:43:cb:2c:a3:9e:85:d6:01:a4:98:
43:be:dc:86:64:fb:3f:92:4b:62:45:db:dd:96:05:
25:e1:0a:80:c0:bf:6a:51:88:65:74:85:5b:c1:fc:
0a:7d:10:1d:0d:0a:f0:82:d7:69:90:43:bd:10:7a:
9d:d4:56:9a:28:64:84:3e:67:d1:54:90:47:14:c6:
af:57:80:63:13:13:b6:da:c5:07:24:ad:4f:e6:37:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:27:8A:76:26:D3:D1:4D:E7:CB:42:9D:26:27:44:8C:D0:02:62:DE
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7d:e1:49:06:24:82:be:0f:53:34:7f:6a:c5:6f:03:72:4f:
b1:e1:45:50:38:90:c7:b0:f7:e8:e2:6b:a8:d1:37:bc:f5:91:
c8:d2:76:c1:a0:84:84:cc:0e:8b:a7:b7:32:d5:4d:59:fe:33:
df:4c:4f:d3:be:db:cc:8f:9e:b5:ff:93:e9:9c:5c:ad:5b:8e:
7f:76:ef:e7:59:3d:25:ed:b8:dd:9b:ea:9f:49:2e:19:a6:b3:
ab:f4:98:f5:e4:cc:0f:21:24:b4:2e:6f:3e:c1:d4:ea:cb:2d:
53:c4:19:6e:b7:d2:61:d5:73:0f:fc:f0:bf:9d:0c:34:38:76:
f0:74:79:ff:43:c6:fa:2f:35:91:6c:be:9e:78:ab:db:10:77:
1f:e8:c5:68:01:f6:ea:03:87:58:ef:b7:9e:bb:7c:61:16:cf:
3a:74:ec:46:be:f4:22:7a:16:b8:b6:88:b9:45:e1:8b:1c:d2:
28:89:57:d3:41:c1:de:04:0c:ea:41:23:70:94:f1:13:ff:58:
1a:1d:d2:ec:70:dd:56:00:28:3e:0c:57:1c:c4:93:8a:a6:0e:
3b:ba:a1:0a:a2:e4:4d:fb:f1:33:f2:92:69:2e:f2:2f:03:42:
75:e5:27:bf:ff:7e:7b:ed:2b:bf:87:1c:1f:13:3f:80:6a:22:
b8:e3:3b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:35:31 2025 by rpki-client