Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: XlAII4ki3pIJzLbbERnKzrL+fxL2r4q9LhkgHCofu3U=
Subject key identifier: 3B:E6:DD:3E:89:D2:87:8C:EC:94:9A:06:17:C0:36:52:CB:CE:9C:B7
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 0198488959A4A001898C2519FF6CFCFBBABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: D9
Signing time: Sat 26 Jul 2025 21:00:17 +0000
Manifest this update: Sat 26 Jul 2025 21:00:17 +0000
Manifest next update: Sun 27 Jul 2025 21:00:17 +0000
Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: IuKgMu5LFnSD6SdYV4tot6+f3e3wXqd9zR6g34yzsCQ=)
3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:59:a4:a0:01:89:8c:25:19:ff:6c:fc:fb:ba:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Jul 26 21:00:17 2025 GMT
Not After : Jul 27 21:00:17 2025 GMT
Subject: CN=3be6dd3e89d2878cec949a0617c03652cbce9cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:55:d6:60:d8:f7:b7:da:87:6c:f1:4c:3a:
65:55:74:2b:10:19:27:0f:e6:ee:ae:4e:e2:96:b8:
2b:79:18:7c:2f:f4:2a:de:71:f2:69:e2:d1:8d:1b:
4b:00:a7:0f:9f:70:b9:05:b3:f0:eb:b4:df:f9:77:
2d:50:bf:a6:cc:ad:4e:de:d7:4d:94:49:f9:0e:96:
34:c2:0d:7c:ed:1b:6a:95:3e:c3:ea:24:20:20:c0:
2e:b3:03:5f:db:8d:b3:89:ac:a6:37:2a:a5:af:3e:
eb:2b:f3:53:e3:0d:c9:71:f8:bf:56:b2:a6:f2:b5:
4f:20:0a:40:bd:34:88:80:0f:63:fa:9f:46:bf:da:
89:d9:97:db:e4:cc:a6:bb:af:ad:2d:07:c1:0e:de:
79:11:5e:65:2e:3b:cc:c7:f0:b7:85:86:83:2c:bf:
bd:79:53:ba:50:bc:05:31:06:da:08:5a:43:fd:8b:
3a:f6:1c:4f:b9:95:3a:e9:3a:9a:80:dd:d4:9d:97:
64:81:d0:b1:a7:07:c9:ab:2f:a3:cb:a3:8c:47:aa:
cf:23:5d:94:ca:1e:59:8b:87:ea:42:c6:9a:b6:df:
39:0f:f5:d6:7f:8b:3d:34:ac:7b:16:95:63:e6:dc:
42:cd:2b:bd:41:62:e6:22:e2:a5:d1:50:db:5b:68:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:DD:3E:89:D2:87:8C:EC:94:9A:06:17:C0:36:52:CB:CE:9C:B7
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2c:63:55:96:64:07:25:a2:d0:d9:72:88:dd:88:fd:f6:f3:
0f:4f:2d:4c:33:d7:a6:0a:aa:14:43:35:40:ad:98:fd:f6:f0:
30:b8:74:2d:4b:4f:76:25:f8:44:05:0b:e1:ec:f6:be:9f:d5:
3d:a0:77:9a:f3:34:3a:81:e4:74:cc:c7:dd:26:ca:1c:31:5f:
dd:63:83:01:5f:46:8e:50:d4:55:a3:c9:9a:26:cb:11:a9:fb:
f3:09:47:33:6b:ac:5c:ae:7b:92:b2:16:52:1b:f0:e7:86:1c:
82:69:ff:a3:ea:ad:60:3c:0a:8f:8a:9c:dc:ac:a4:5b:0c:20:
43:fa:67:a6:26:4d:69:98:af:53:6f:24:a1:df:3d:74:21:91:
dc:18:0f:f3:e5:3e:1d:41:08:82:6f:66:f6:cf:89:c7:d1:16:
e9:8c:8f:5b:98:fb:b4:a3:58:40:34:55:75:c4:2f:a9:57:07:
59:f7:c0:fa:21:7a:00:b1:5c:63:33:b5:93:d7:0b:bf:e1:f5:
a2:bb:c8:78:98:ec:52:51:ef:28:1b:ba:90:bc:c3:54:56:86:
32:6d:ad:e8:54:2e:76:9e:56:9c:bb:35:da:20:bb:9d:c3:d6:
ae:7a:8f:ae:36:07:d2:20:e8:74:ea:5f:df:fe:97:f5:be:51:
f5:74:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:28 2025 by rpki-client