Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
File: oInbclD9hHbImK7gpfvyqYg0Af4.mft (raw, json)
Hash identifier: oeR/wpG5XoBAYWt5f8WjlJNH2EhWi9UPwxP2YC6Nh7o=
Subject key identifier: 63:29:76:5A:98:E0:91:A7:BB:CE:78:82:BE:AF:CF:EA:6F:98:88:C6
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial: 01984966C6E334356DD49339B34FEA92ACCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:02:08 +0000
Manifest this update: Sun 27 Jul 2025 01:02:08 +0000
Manifest next update: Mon 28 Jul 2025 01:02:08 +0000
Files and hashes: 1: PRBRLMqw-2-Iz8UAT3zfg4Sw6lo.roa (hash: GVRCRwJe0CJRmQR55/f83gphK42VF5Ywz7text0ZVtk=)
2: oInbclD9hHbImK7gpfvyqYg0Af4.crl (hash: EzFoGo7/sYeMcqmAUEc5EWbHPITOv+V3XsJA7M6cOaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:c6:e3:34:35:6d:d4:93:39:b3:4f:ea:92:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Validity
Not Before: Jul 27 01:02:08 2025 GMT
Not After : Jul 28 01:02:08 2025 GMT
Subject: CN=6329765a98e091a7bbce7882beafcfea6f9888c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:a9:62:0e:fe:39:f5:4d:14:e6:98:da:b9:
e4:f8:c1:1f:d0:c7:c6:78:14:e3:4e:5e:84:07:f8:
cc:1b:6a:79:c4:06:0b:43:29:03:7e:ed:af:26:b8:
a7:aa:79:be:b5:30:8e:8f:af:57:91:df:a0:31:33:
36:d0:a2:13:85:30:87:f0:5a:10:21:eb:f9:d3:7c:
00:a9:c5:8f:4c:b6:0f:d6:e4:21:f7:1e:0f:8a:9f:
c3:3b:1f:a5:13:6a:31:3b:94:8f:ff:c5:92:40:14:
4c:93:5e:ff:13:51:d0:06:2c:22:52:f2:5d:4e:94:
e4:b4:31:20:7b:b9:90:d5:13:27:7f:58:bb:23:84:
1c:4e:74:df:dd:20:03:62:68:89:9c:ad:d6:85:4a:
d3:77:2d:9c:55:9c:0b:18:04:3a:13:c5:33:c4:64:
97:6f:19:01:57:a6:a4:82:92:b3:d6:ab:0a:9a:a9:
35:5d:26:7a:34:c7:9d:ad:7c:3f:40:79:0a:e2:ab:
79:c4:09:c5:54:9e:a4:0f:7a:11:02:95:90:68:45:
21:c0:c1:bc:44:d9:a2:99:e4:a9:11:67:6c:8e:4a:
c0:78:f9:26:28:11:cb:ff:e3:1a:81:a6:36:6c:79:
56:23:c8:70:44:a3:2e:a9:40:fd:79:55:59:8c:02:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:76:5A:98:E0:91:A7:BB:CE:78:82:BE:AF:CF:EA:6F:98:88:C6
X509v3 Authority Key Identifier:
keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c9:b0:a8:36:e8:d0:72:a1:a0:e6:12:38:bd:39:52:56:4e:
6d:77:95:50:d5:de:44:06:ef:9a:63:26:69:b1:e3:43:d4:1a:
bc:59:3d:18:5a:11:90:7f:f6:ea:59:cb:ef:1e:43:11:57:b8:
3f:8a:58:a7:9f:96:af:67:16:c5:a9:5d:63:f9:73:dc:39:5d:
60:78:25:aa:65:55:ef:c7:bf:ca:ff:cc:0f:34:62:23:85:b3:
ca:b8:45:c7:57:92:09:72:00:91:c5:c7:48:d5:47:22:ce:62:
f8:5c:77:99:2e:ac:05:72:7c:14:30:1d:61:38:46:1a:fe:17:
ff:7c:06:b9:af:93:84:5a:71:04:ee:18:2b:d8:6d:e1:ca:18:
88:76:df:94:ea:2c:f7:7c:87:09:94:57:2f:44:44:2c:4e:08:
f0:0c:8b:06:fb:24:be:90:47:48:95:57:9d:8b:17:ec:c6:5a:
a9:52:44:39:6f:b3:c7:71:76:14:6d:bd:5d:d2:2b:27:3e:69:
fb:c1:27:a7:6d:9f:a9:b8:6b:92:2d:81:85:50:c9:24:4c:88:
20:8b:26:6e:63:04:c0:37:38:bb:a4:02:1f:42:f3:81:b9:86:
75:43:01:f7:a1:8f:fe:31:27:86:60:8a:2a:08:3f:3f:e4:02:
aa:b9:75:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:08 2025 by rpki-client