Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
File: oI5By_3vrQuw4pckeswaIB0t9KA.mft (raw, json)
Hash identifier: SqyUGckELzPHqnzW2tCyPQBd26CiAmhDbyyty2n8zMM=
Subject key identifier: 1C:92:71:FF:AA:5A:CB:63:C7:35:A9:CF:33:06:A4:EE:0C:7B:87:E7
Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Certificate serial: 01984A0A568CD5DB5CA740EA7911FDEF3EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
Manifest number: 1195
Signing time: Sun 27 Jul 2025 04:00:48 +0000
Manifest this update: Sun 27 Jul 2025 04:00:48 +0000
Manifest next update: Mon 28 Jul 2025 04:00:48 +0000
Files and hashes: 1: kaGph50MrnZk9_Ae5Md0JZHkmEM.roa (hash: KOuavh84jne4Oayx4KsSyaMHm/sNkEEba6rU0bPnEbc=)
2: oI5By_3vrQuw4pckeswaIB0t9KA.crl (hash: Q+o2VtwGQAwv449E1sAvFPPa/ci2TPzWEPPoJMkXI8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:56:8c:d5:db:5c:a7:40:ea:79:11:fd:ef:3e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Validity
Not Before: Jul 27 04:00:48 2025 GMT
Not After : Jul 28 04:00:48 2025 GMT
Subject: CN=1c9271ffaa5acb63c735a9cf3306a4ee0c7b87e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:0b:31:a8:93:3f:b3:fc:9a:75:ce:95:69:
83:a3:a5:e2:3b:79:c7:4e:63:b5:ee:4f:81:46:ba:
04:a0:ff:7a:bf:c5:81:16:9e:99:19:9d:fd:54:dd:
d9:e1:01:60:cf:96:af:80:b6:a7:bd:ac:38:53:81:
7a:d8:84:e8:b9:33:68:54:d8:bd:64:4a:a0:6e:e4:
90:99:c6:b7:aa:ce:d8:c4:ab:ec:56:bd:1e:68:93:
2d:ac:78:f8:13:a6:75:9d:42:dc:27:68:5d:95:38:
cf:ee:2e:97:79:d0:0b:71:d9:dc:80:09:e1:70:77:
71:30:a2:0c:e6:9a:f3:ca:e8:61:59:1a:af:4a:45:
fe:cb:6c:21:d5:66:1d:a9:bf:2d:63:14:b6:00:1e:
16:eb:9e:41:d2:be:b8:63:28:65:76:f3:c8:9d:ee:
5c:23:06:38:52:b0:71:57:77:84:f8:f8:b4:0b:4b:
db:f4:34:ed:8d:20:ec:85:94:9e:57:05:cd:2a:21:
78:39:91:b1:ca:b8:db:01:13:b6:96:f1:02:72:3e:
4a:79:bc:1d:03:bc:e3:41:ca:6f:5c:2d:ed:38:48:
41:f7:79:c6:46:87:c7:f9:6e:90:eb:18:81:13:36:
7d:21:2d:d3:58:26:17:1c:f9:70:62:e6:3e:5a:3f:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:92:71:FF:AA:5A:CB:63:C7:35:A9:CF:33:06:A4:EE:0C:7B:87:E7
X509v3 Authority Key Identifier:
keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:63:4a:e2:e0:f0:21:87:db:6a:d6:4e:d8:46:8a:9e:19:52:
e8:80:80:5a:55:c1:5e:a0:23:ad:76:5e:29:67:62:e8:df:80:
07:5d:e0:62:34:64:b6:b8:d8:96:8a:a8:66:7f:b0:19:40:1c:
1b:16:a7:63:d7:12:63:e3:bf:3d:c7:53:b4:90:8c:30:e9:f9:
7e:07:65:f4:49:34:f4:0b:89:5f:24:36:33:29:72:03:29:fc:
d6:aa:8b:38:5c:13:8c:a5:60:bc:69:00:ca:78:3e:32:3f:39:
ad:de:c2:7f:d8:a5:b2:42:ff:6b:2f:e4:f6:78:59:eb:a9:d8:
46:e5:7c:c7:22:6c:fe:b1:97:2e:9b:9c:81:3c:d4:7b:a6:b8:
b1:f0:2e:03:dc:c9:11:3e:31:82:d1:3e:56:8b:1a:8f:46:d8:
15:16:c4:4e:ef:b8:34:85:d5:ae:aa:17:5f:4a:37:97:29:e2:
f7:f3:e7:b1:d6:b6:dc:ad:71:10:06:4f:d1:1d:8d:cb:ad:57:
93:1b:16:b9:13:ed:29:8d:09:f2:df:2d:fe:88:fe:2e:d2:82:
93:b7:be:c5:c2:55:c4:bd:a6:98:f6:de:9f:d7:32:4d:7b:24:
fb:4d:7c:ec:82:2c:6f:d8:9c:1d:a8:c8:87:fc:36:75:66:fd:
9f:81:34:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:47 2025 by rpki-client