Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: e5NbYvweKurPwv3Id4oOppEnjMvv4preY5ut/VgewyI=
Subject key identifier: F6:F6:C0:C3:58:0A:E9:D0:EF:83:DE:B9:5E:C1:4E:09:A2:8C:09:59
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 019847E559C86FA376E7B593857BDDF071AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 0209
Signing time: Sat 26 Jul 2025 18:01:09 +0000
Manifest this update: Sat 26 Jul 2025 18:01:09 +0000
Manifest next update: Sun 27 Jul 2025 18:01:09 +0000
Files and hashes: 1: miHlM9LoOvhYbZQONUYiQ010Y0Y.roa (hash: lxFbzya4PF93jTfC+wdGWG8lRjQOoMqPwgxmgMabAZw=)
2: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: IfyDU68St5SRNq/LkDegjU8JovzreAwl8soIBbAgaxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:59:c8:6f:a3:76:e7:b5:93:85:7b:dd:f0:71:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Jul 26 18:01:09 2025 GMT
Not After : Jul 27 18:01:09 2025 GMT
Subject: CN=f6f6c0c3580ae9d0ef83deb95ec14e09a28c0959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cf:6b:0f:e4:df:5a:57:64:65:c7:4a:e6:74:
7f:14:44:90:cc:1b:b9:15:f2:f1:7c:81:5f:76:bb:
4b:ba:df:5a:d2:bd:1c:2d:d6:0e:ed:47:7f:08:05:
a6:7b:f5:0b:18:2b:a6:68:a0:01:b9:f6:2c:7d:ba:
98:ae:59:b4:ac:be:03:76:4a:77:b7:4c:6c:37:f7:
6f:3e:43:ea:3e:f2:ff:c0:fd:43:4b:c8:40:49:17:
60:02:7d:b6:c0:d2:b1:7d:42:b6:8b:96:26:61:e5:
b5:9f:58:0a:18:f1:aa:f8:5c:83:2e:19:6b:12:df:
5c:83:27:1d:26:08:1f:2a:85:43:d3:90:ab:eb:13:
13:64:eb:be:2b:3a:de:78:78:b7:bc:0e:ce:d9:92:
4f:7b:51:96:9b:e1:4d:bf:71:dd:23:91:32:c3:89:
b8:18:41:b9:ff:a3:dc:b0:0c:0e:6c:49:6d:0f:15:
5c:0c:25:2f:f9:af:d5:1d:17:ae:ba:06:e7:c6:01:
e5:82:95:9f:2a:8a:4b:12:04:3c:ef:3a:7b:61:09:
a5:80:1f:b7:10:ae:0f:67:f3:99:88:76:95:1c:68:
34:52:6b:af:79:8b:c1:9e:6d:e5:7e:bd:26:2a:b4:
4d:f4:a0:49:1d:3f:61:89:75:fc:93:65:3c:83:89:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F6:C0:C3:58:0A:E9:D0:EF:83:DE:B9:5E:C1:4E:09:A2:8C:09:59
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:30:eb:10:2a:4d:ce:67:d9:7e:b6:c2:24:d3:42:c8:58:87:
af:35:a9:8b:8d:f3:42:ea:6f:a8:52:2b:7b:b0:e8:35:9f:c5:
0a:c4:b8:d8:f8:a7:29:54:8f:55:2d:18:09:f5:d1:5b:75:21:
19:7d:81:f6:8a:9f:55:58:89:82:19:a3:af:e1:d9:e5:bc:f5:
c2:0a:5d:ed:43:71:f2:53:97:de:4d:ab:88:14:77:f0:66:3c:
e9:6c:24:60:99:e7:aa:50:82:b6:86:3b:c4:6b:64:30:c7:ed:
2b:b6:7a:3a:0b:0b:9c:18:d1:2c:23:85:75:b4:1e:17:a4:fa:
c5:eb:67:a8:a1:af:dd:2d:72:3a:6d:52:77:b5:c8:6d:5f:78:
ed:50:40:43:c0:af:01:a1:cd:a1:02:e1:77:05:d5:77:77:20:
49:d2:05:68:47:d5:be:9c:2a:32:b8:e0:d5:79:c4:4c:5b:e4:
0d:9a:db:46:4a:72:7b:44:4d:26:df:3d:36:a3:98:3d:ec:be:
b7:ce:9e:50:bd:16:a3:fb:4e:56:66:3c:96:08:f0:bf:1b:33:
e1:08:d5:98:d9:16:fa:b1:e8:dc:d1:00:1e:2c:26:32:7c:e2:
53:32:f1:ab:ff:96:48:6c:96:a7:fa:89:b1:97:62:22:3f:49:
e3:69:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:16:50 2025 by rpki-client