Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: 9gJt4OjqrozpvakBFY2yudw0RlyY2F3bni9ksMNFhU8=
Subject key identifier: 66:98:9B:55:CC:9A:08:1A:A1:E1:E5:3D:94:AE:3B:EC:FE:61:FE:15
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 019849D301F33AF557645F76636B059F5D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 0AC1
Signing time: Sun 27 Jul 2025 03:00:21 +0000
Manifest this update: Sun 27 Jul 2025 03:00:21 +0000
Manifest next update: Mon 28 Jul 2025 03:00:21 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: qg1M6A3xDPzLV4ge8O2aVV55ghgYqhaL0OnD9omwSPQ=)
2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:01:f3:3a:f5:57:64:5f:76:63:6b:05:9f:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Jul 27 03:00:21 2025 GMT
Not After : Jul 28 03:00:21 2025 GMT
Subject: CN=66989b55cc9a081aa1e1e53d94ae3becfe61fe15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:7e:80:27:ba:ce:65:25:d9:40:71:c5:59:
5c:5e:a0:7f:6c:6a:4b:eb:88:ac:db:45:80:df:ff:
71:db:8a:4c:ff:63:b8:8c:cc:dd:20:fe:93:e3:fe:
5d:a6:34:aa:54:0f:8a:82:70:96:c0:8d:1e:4a:34:
ba:6d:48:64:85:c4:9e:f6:cf:25:6d:13:f7:2e:69:
8c:52:b7:e6:c4:99:6f:f7:ac:d0:82:f8:c8:18:f0:
34:6e:6c:5a:e6:3a:aa:24:b9:10:ae:dd:bb:d8:be:
c8:66:d1:50:f0:33:82:67:96:d0:ef:ce:e5:2a:6e:
90:d6:72:f4:e5:c5:43:05:1c:47:a8:c4:14:13:bd:
be:f7:20:69:af:ce:79:15:8b:d6:d3:8c:cd:9c:93:
55:94:c0:6a:1e:c4:45:1f:c3:49:d3:19:ad:d1:3a:
41:bf:ca:84:cf:02:3e:74:e0:1a:61:af:ec:66:71:
2c:89:27:52:c3:f7:0d:5e:71:a3:80:12:e2:e0:9a:
a8:14:6e:a3:9c:3b:b9:6a:67:79:26:11:f0:d7:bc:
9a:11:43:24:5f:78:34:e9:ff:09:ea:85:79:7a:85:
87:35:d0:ae:91:38:a9:f2:fd:04:a9:a1:12:b2:f3:
77:f8:5a:92:44:b7:08:c1:98:1e:a7:4f:32:5f:4c:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:98:9B:55:CC:9A:08:1A:A1:E1:E5:3D:94:AE:3B:EC:FE:61:FE:15
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9f:0b:eb:01:ca:5c:0b:69:39:0d:c3:3c:86:24:de:3d:95:
3d:6c:ce:75:92:77:51:1d:b3:9c:c3:2f:8d:17:43:5b:29:ba:
69:d1:3a:11:55:e4:f0:e3:73:5e:45:7e:de:d6:8a:41:7c:bb:
67:4a:7a:34:5f:1a:43:1d:41:e2:0c:ad:55:99:38:04:14:14:
ef:d8:5a:17:c3:4c:a0:20:6d:22:46:03:f6:2c:d5:3d:9e:56:
55:8c:5e:a6:50:0b:e8:9b:68:e5:1b:af:5c:70:1e:80:00:f2:
44:35:3a:d5:71:f4:ec:6e:9e:12:fe:0a:81:00:83:a3:8f:87:
e5:a9:dd:c8:97:b0:1e:78:22:c0:52:ef:b2:ef:75:d1:55:6d:
97:81:fc:a1:24:bf:8a:9c:96:f2:b6:25:71:4c:f0:5b:a8:85:
04:9e:64:88:66:61:d5:44:47:43:d4:0e:b5:18:a0:5f:1f:6f:
5c:ca:af:97:d9:d4:96:e4:90:6e:3d:f2:f7:e8:c8:31:00:a6:
77:ef:af:25:e5:ab:3c:6e:c6:ca:53:73:98:48:ae:bb:3b:e2:
10:25:cd:fb:0b:6d:03:bd:39:84:3a:92:e1:c8:d8:f6:da:bf:
1e:86:74:02:ad:86:2e:52:e3:58:e9:16:50:60:a1:b8:1f:4f:
1b:ed:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:31 2025 by rpki-client