Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
File: oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json)
Hash identifier: akselfqLMRa0IUahRbpLtPgBDAYIVfeZ/gj/2SOxGww=
Subject key identifier: EE:47:B6:D6:50:A6:01:34:87:09:98:3C:8A:12:EE:CA:FC:11:C8:89
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial: 0199C231D2676145C1E1A793A3DA2742F226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
Manifest number: 05
Signing time: Wed 08 Oct 2025 05:01:08 +0000
Manifest this update: Wed 08 Oct 2025 05:01:08 +0000
Manifest next update: Thu 09 Oct 2025 05:01:08 +0000
Files and hashes: 1: ep1-GDUun8xcdGHEE_lWHZRloMg.roa (hash: HiyP/TW6sZpVHtWLYDXWKIcePVBX2hkVKCTS2Lryhek=)
2: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: 1OZINjXxys8Keap4oby4wemrfQSVMIYK24K4Xwkg8pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:31:d2:67:61:45:c1:e1:a7:93:a3:da:27:42:f2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Validity
Not Before: Oct 8 05:01:08 2025 GMT
Not After : Oct 9 05:01:08 2025 GMT
Subject: CN=ee47b6d650a601348709983c8a12eecafc11c889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:47:d9:ad:c6:fb:b2:9b:67:46:02:a4:a1:
b7:50:a5:2e:9c:87:72:01:c8:9e:78:70:1d:03:19:
76:31:24:21:52:60:6d:60:b5:2d:a0:da:65:a6:16:
cb:8f:f0:4d:e1:26:30:1c:cb:4f:87:ce:36:5f:fc:
a2:f7:fd:6f:c2:b0:ee:ee:cb:e2:ce:66:37:4d:24:
a1:11:b8:bc:bd:7f:87:be:97:ec:11:f4:d9:6c:71:
7d:05:71:8a:8f:fe:0f:b2:03:0a:c5:c9:e3:2c:4d:
e7:38:5b:21:47:d3:a9:a8:1a:7e:dd:ac:cf:9d:5a:
53:67:ee:ee:52:9f:0f:f8:97:2d:e1:12:72:9c:14:
57:32:4b:65:19:f3:44:c8:b2:38:95:bc:3b:33:69:
6f:1c:a3:05:ac:fe:3e:a0:b6:5d:aa:03:b3:44:74:
0a:e0:f4:4a:e0:bb:1e:3f:18:f6:89:70:f5:cb:1a:
80:9d:e0:61:c9:bc:74:30:82:a9:4c:62:b5:ab:fb:
61:e1:27:66:3e:74:60:23:0d:98:c9:8d:fc:ed:cd:
d6:db:b6:7c:97:c1:6d:0c:07:c1:21:f6:73:fa:90:
a4:d6:6e:18:cf:91:d7:1d:84:18:5a:4e:a3:89:90:
b6:65:91:79:10:0a:a0:db:85:45:b8:53:07:7a:48:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:B6:D6:50:A6:01:34:87:09:98:3C:8A:12:EE:CA:FC:11:C8:89
X509v3 Authority Key Identifier:
keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a7:8d:7f:c1:8e:24:45:56:c8:13:1f:36:4f:1f:58:70:ca:
da:1f:c8:e4:9d:fa:3a:fe:bb:7c:af:ae:6e:ee:b6:2d:f7:e7:
fa:52:71:e5:cd:3a:15:c3:c5:de:30:ed:a8:e2:af:db:1a:90:
b3:cc:ec:f6:73:cc:83:ee:70:87:e0:27:d2:ba:7c:89:54:42:
af:45:04:90:3c:2f:4c:b1:4c:c1:55:cf:da:ed:ea:5b:e4:e0:
62:7f:0a:c8:1f:c5:3d:70:eb:46:5d:7a:5c:d1:81:a7:df:39:
eb:c4:d9:66:50:60:8f:a2:3f:2e:bb:e4:fb:fb:29:a7:70:e9:
50:0a:c5:91:46:77:ea:35:eb:9d:cb:f7:9c:14:ea:25:c1:3b:
85:4d:99:4e:a1:f0:98:d5:2e:4e:f3:11:b4:5d:04:76:c2:1f:
71:da:06:ac:b3:fa:45:1f:9f:19:43:2a:81:00:9b:5f:b4:d3:
e6:30:75:e8:e1:16:37:d5:f8:78:a2:53:7c:24:b6:ce:a5:17:
4f:4c:a5:33:81:ee:f3:22:3f:98:8d:cd:b2:20:ef:e2:f3:c4:
95:60:21:9f:02:fe:dc:84:ac:e7:f0:d0:d4:1c:b3:28:49:67:
7f:14:43:79:12:1a:95:37:d2:cd:31:2c:94:90:3c:f3:db:7c:
0f:18:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:33:36 2025 by rpki-client