Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
File: oixSeMS7sCbhL_12C-rFn8FV_CU.mft (raw, json)
Hash identifier: LRyXrcLZHl+Byv6yvqeaqQksOEfT2ZFx1t8gFt20XVo=
Subject key identifier: 18:AF:5A:71:D1:AA:7D:2E:F9:6B:8C:A0:59:A5:3A:92:C2:D2:A7:77
Authority key identifier: A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
Certificate issuer: /CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Certificate serial: 019849655AF787B8405A1FB05A6E277592C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
Manifest number: 0A6D
Signing time: Sun 27 Jul 2025 01:00:35 +0000
Manifest this update: Sun 27 Jul 2025 01:00:35 +0000
Manifest next update: Mon 28 Jul 2025 01:00:35 +0000
Files and hashes: 1: P8h8nlnz4dD4fkTghoS9unFyKig.roa (hash: MYpmJNo5HIfucuzKcNdlv0aQadbbtMqL8vbh/XHclWY=)
2: oixSeMS7sCbhL_12C-rFn8FV_CU.crl (hash: eWswmSZIG6FypwbIzoTH9eDhCaQIOfn6ORHhAqmhgS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:5a:f7:87:b8:40:5a:1f:b0:5a:6e:27:75:92:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Validity
Not Before: Jul 27 01:00:35 2025 GMT
Not After : Jul 28 01:00:35 2025 GMT
Subject: CN=18af5a71d1aa7d2ef96b8ca059a53a92c2d2a777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:d6:b9:c2:39:5c:55:2a:9b:95:62:ef:60:
ce:64:31:63:88:1d:8f:e5:ea:fe:28:f5:bf:ec:23:
a6:2e:8e:7a:5d:9b:d0:02:2f:e8:60:9f:20:76:39:
8f:ed:fd:8e:f0:a5:86:c8:bc:82:83:79:48:da:b7:
e6:e7:3c:79:39:73:8a:9f:87:7c:11:c7:96:48:35:
f4:45:aa:9b:12:cb:00:2a:03:2c:2c:23:2c:0a:d3:
76:4d:54:66:85:aa:bb:fd:25:5c:43:5f:7b:14:24:
04:d6:f6:45:59:1c:83:7e:e2:55:ae:23:a7:7c:79:
10:74:48:41:44:22:05:dd:e6:14:29:d3:38:24:21:
4e:21:00:84:3a:21:91:c9:fd:56:5d:89:a5:84:28:
92:f4:58:e3:df:c0:da:23:69:4d:4a:1f:b4:4c:48:
c2:5c:d9:59:6d:4a:d0:ba:25:57:4b:55:07:c1:1c:
3c:ee:d2:2a:fc:85:dd:ea:10:11:56:38:1f:d4:44:
43:8d:53:e4:d4:7c:9f:2d:0f:3f:0c:e1:06:6d:9b:
25:e5:a2:4d:b9:49:73:3f:29:12:ac:48:87:02:b1:
5c:45:dd:cd:43:59:8a:e7:fc:d8:46:6c:3a:c8:7a:
9a:a3:2a:26:0c:63:c4:32:9a:9e:e0:3b:8e:0f:67:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AF:5A:71:D1:AA:7D:2E:F9:6B:8C:A0:59:A5:3A:92:C2:D2:A7:77
X509v3 Authority Key Identifier:
keyid:A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d1:d1:d0:8e:0c:dd:50:d5:30:21:eb:71:24:08:1c:93:93:
a7:ac:37:29:08:49:08:f1:0a:5a:e0:6f:00:12:b3:cb:8f:bf:
7d:d5:01:19:53:2e:49:4f:6b:cd:49:ef:5c:5d:31:a7:76:63:
2c:82:a5:e6:0f:44:88:40:fc:1f:b6:97:da:bc:fd:43:51:d0:
a6:04:50:48:0e:68:85:cc:48:70:70:23:45:8c:74:90:87:2d:
ea:24:20:6d:e8:34:64:09:a5:c4:ae:30:e9:40:55:96:b1:9a:
aa:89:93:b3:54:14:7b:db:d4:e2:ed:3b:37:10:4a:42:e2:2d:
be:2b:36:ea:a8:d1:11:9d:cb:28:c5:a1:35:23:4d:01:c4:c5:
8a:fd:07:67:d1:ec:3a:b9:ad:6b:19:7e:cc:fd:fa:ae:65:19:
b2:fb:91:96:9b:08:23:51:fa:de:7a:47:72:c4:6e:2c:9c:8b:
66:44:68:45:be:6f:10:7f:35:8b:1f:87:95:49:bf:5b:b8:24:
fc:4d:21:3a:1a:78:d8:75:16:6a:7a:5c:ec:c7:3b:c1:8c:13:
32:e8:e8:c9:c5:42:62:97:f5:35:ba:79:02:ab:91:b2:5e:5b:
74:9c:a2:32:ba:ca:68:70:fc:3d:a4:37:4d:3f:aa:65:39:63:
e4:80:08:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZVr3h7hAWh+wWm4ndZLCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmM1Mjc4YzRiYmIwMjZlMTJmZmQ3NjBiZWFjNTlmYzE1
NWZjMjUwHhcNMjUwNzI3MDEwMDM1WhcNMjUwNzI4MDEwMDM1WjAzMTEwLwYDVQQD
EygxOGFmNWE3MWQxYWE3ZDJlZjk2YjhjYTA1OWE1M2E5MmMyZDJhNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKzWucI5XFUqm5Vi72DOZDFjiB2P
5er+KPW/7COmLo56XZvQAi/oYJ8gdjmP7f2O8KWGyLyCg3lI2rfm5zx5OXOKn4d8
EceWSDX0RaqbEssAKgMsLCMsCtN2TVRmhaq7/SVcQ197FCQE1vZFWRyDfuJVriOn
fHkQdEhBRCIF3eYUKdM4JCFOIQCEOiGRyf1WXYmlhCiS9Fjj38DaI2lNSh+0TEjC
XNlZbUrQuiVXS1UHwRw87tIq/IXd6hARVjgf1ERDjVPk1HyfLQ8/DOEGbZsl5aJN
uUlzPykSrEiHArFcRd3NQ1mK5/zYRmw6yHqaoyomDGPEMpqe4DuOD2eKgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBivWnHRqn0u+WuMoFmlOpLC0qd3MB8GA1UdIwQY
MBaAFKIsUnjEu7Am4S/9dgvqxZ/BVfwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2l4U2VNUzdzQ2JoTF8xMkMtckZuOEZWX0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hZmNiYWQtYzEyNi00ZjhlLWJkMjIt
NDkyYjYwMzQzYTcwLzEvb2l4U2VNUzdzQ2JoTF8xMkMtckZuOEZWX0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9hZmNiYWQtYzEyNi00ZjhlLWJkMjItNDkyYjYwMzQzYTcw
LzEvb2l4U2VNUzdzQ2JoTF8xMkMtckZuOEZWX0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdHR0I4M
3VDVMCHrcSQIHJOTp6w3KQhJCPEKWuBvABKzy4+/fdUBGVMuSU9rzUnvXF0xp3Zj
LIKl5g9EiED8H7aX2rz9Q1HQpgRQSA5ohcxIcHAjRYx0kIct6iQgbeg0ZAmlxK4w
6UBVlrGaqomTs1QUe9vU4u07NxBKQuItvis26qjREZ3LKMWhNSNNAcTFiv0HZ9Hs
Ormtaxl+zP36rmUZsvuRlpsII1H63npHcsRuLJyLZkRoRb5vEH81ix+HlUm/W7gk
/E0hOhp42HUWanpc7Mc7wYwTMujoycVCYpf1Nbp5AquRsl5bdJyiMrrKaHD8PaQ3
TT+qZTlj5IAIlQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:08 2025 by rpki-client