Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: BVFJjsKpAoJN0DFq7uEa3dGB072tvOaxgleOIB0txFo=
Subject key identifier: F2:DF:F4:F6:83:37:5D:D6:89:F1:4E:07:92:70:C0:33:F1:04:FA:B4
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019848F774577E36A0F18F8F3E4153F805CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 1559
Signing time: Sat 26 Jul 2025 23:00:33 +0000
Manifest this update: Sat 26 Jul 2025 23:00:33 +0000
Manifest next update: Sun 27 Jul 2025 23:00:33 +0000
Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: oQfQ0bsJycXE5Lerbjeuqw+9KHwquNlBkXbhNTcbGn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:74:57:7e:36:a0:f1:8f:8f:3e:41:53:f8:05:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Jul 26 23:00:33 2025 GMT
Not After : Jul 27 23:00:33 2025 GMT
Subject: CN=f2dff4f683375dd689f14e079270c033f104fab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:7e:48:18:7f:d4:62:6d:b3:ee:e4:49:7d:
92:05:ea:5b:93:da:cb:35:f9:79:41:0c:b5:1b:cf:
ce:3d:f1:55:d2:77:4d:33:d9:50:1b:01:3b:7b:cc:
b2:11:74:fd:7d:7c:27:ed:88:76:ed:92:48:c0:d2:
69:3a:07:19:69:3c:0a:31:f5:40:f6:c3:18:6d:16:
cb:08:6f:bc:9f:26:59:63:ea:cd:eb:9e:61:a2:ab:
bf:9c:33:dd:2b:e4:f1:91:ce:97:49:12:c5:75:1e:
1e:56:69:bc:69:0e:69:13:06:01:f7:2d:bc:cc:48:
ee:a8:ee:cb:0d:da:8c:23:6e:20:f0:59:46:f4:02:
a2:0d:4b:69:d5:72:5d:99:77:c6:19:d4:22:30:a4:
98:74:57:a2:96:81:ea:de:90:03:d9:6f:8a:12:e5:
16:84:0a:bc:74:ae:b8:11:81:ae:6a:83:49:b4:5d:
64:be:10:39:88:32:95:21:16:6e:87:d3:a7:55:f5:
29:81:37:44:77:1a:1e:d2:f4:7f:c2:be:87:eb:b7:
e8:d1:ab:dc:35:36:9c:42:88:18:2a:bf:69:41:45:
00:71:da:de:60:a8:a7:4f:f0:3e:0e:77:ca:68:d8:
c4:43:5d:bf:2d:ff:a9:ac:d3:e1:7b:db:00:85:4d:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DF:F4:F6:83:37:5D:D6:89:F1:4E:07:92:70:C0:33:F1:04:FA:B4
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:de:b9:17:db:cd:b2:20:0f:9d:76:ea:de:3c:f7:db:5e:f9:
98:cf:25:f4:9f:83:e1:63:10:f4:59:13:94:01:b8:bd:8f:de:
df:0e:59:ce:ab:f2:59:77:b1:81:31:17:7a:9b:cf:58:9b:40:
fd:16:26:b6:7d:b2:e0:f5:fd:23:d3:65:c0:11:59:4b:e2:41:
8d:1b:29:d7:dd:eb:9e:11:09:d8:02:d7:27:d4:d0:15:d9:f9:
a3:f8:e8:8d:f7:28:7c:7f:bc:24:89:d1:59:df:8a:4b:5d:dd:
ba:28:ce:cd:19:d4:5c:ee:a5:61:5a:2b:19:6d:50:f7:a8:d8:
3c:81:14:5d:c6:ed:94:23:87:dc:1a:27:16:e1:d0:4e:2b:d1:
81:c8:7f:dd:df:34:44:f3:7c:db:1d:e4:12:63:44:0b:55:32:
8d:ce:0d:30:38:b0:32:f1:18:95:56:8d:93:0a:aa:5f:a4:de:
2a:29:c1:b2:34:05:4c:9c:8e:d8:17:15:24:16:c0:45:f2:58:
d6:43:60:81:bc:bf:87:58:1b:26:32:23:d2:a5:f8:ca:2f:a1:
4b:bd:a2:27:08:a3:1b:bf:19:76:f6:09:33:56:02:38:ee:a1:
67:29:2a:ff:f7:d7:ff:19:d5:53:d2:2a:c5:a6:72:a0:02:69:
7b:b3:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:43:53 2025 by rpki-client