Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: DBaEjjGFX/WpN+0pwrWaTtBhXex1kUSCzeT3Gjj66rM=
Subject key identifier: E8:5D:87:A0:09:1B:E5:13:DE:F8:9D:75:02:7E:EE:F4:D1:49:45:DC
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 01984098F7CD74EA5E7F55116FE61AF01391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 0429
Signing time: Fri 25 Jul 2025 08:00:23 +0000
Manifest this update: Fri 25 Jul 2025 08:00:23 +0000
Manifest next update: Sat 26 Jul 2025 08:00:23 +0000
Files and hashes: 1: L2QPsEXXxjypDuteGOkuNir3lUA.roa (hash: mcJaTh3VxTTNDuoHtoju+OCGdo4jk9ztR2/hlQRPaNY=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: Nljw/rxmmiG3c/yxS+LYU/+GDzuHlZe1fxZLLfCCeJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:98:f7:cd:74:ea:5e:7f:55:11:6f:e6:1a:f0:13:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Jul 25 08:00:23 2025 GMT
Not After : Jul 26 08:00:23 2025 GMT
Subject: CN=e85d87a0091be513def89d75027eeef4d14945dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:a7:83:d0:bd:e8:4d:98:9f:1a:af:bd:98:
78:52:98:2f:f2:04:96:33:53:e3:68:09:9d:10:02:
f1:87:da:93:cc:9b:88:4d:99:16:60:d9:9f:8b:85:
7d:5d:e8:39:1a:e0:0e:cc:14:19:78:bd:57:3e:58:
b5:cb:c2:f7:14:c1:1d:cb:a1:47:f4:87:dd:e3:99:
c7:ab:41:89:03:50:7d:3b:42:46:21:7c:38:be:84:
4a:40:28:1b:c5:6a:81:63:c9:93:d0:43:0b:cb:d1:
e0:bd:03:63:ab:27:8b:69:30:cd:6f:c2:cd:5b:b9:
2f:35:6e:c0:c4:01:43:0d:e9:d9:ce:49:58:9f:33:
63:fd:95:96:ce:7a:20:91:8f:f8:ef:3b:c0:70:c8:
84:d7:cc:6f:2c:39:7e:ea:26:1a:b4:a0:4e:6f:7d:
55:6e:a6:be:a9:ea:c4:73:c5:ab:c1:c7:df:a5:78:
18:e9:8b:77:6b:b8:da:3a:b7:00:10:07:36:52:ff:
83:31:5a:34:98:5d:11:ee:e3:31:c3:3f:89:dd:51:
f9:2b:61:a5:f7:d4:f7:2b:15:7a:51:5a:d8:fc:a7:
7b:cb:54:a8:af:48:03:ee:75:bd:e0:e9:46:89:86:
0b:5f:03:a2:d3:f4:67:46:2e:f5:df:12:b3:03:5a:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5D:87:A0:09:1B:E5:13:DE:F8:9D:75:02:7E:EE:F4:D1:49:45:DC
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a6:b4:ff:a1:96:d8:d9:f6:5f:cf:ec:1f:ca:8d:26:df:85:
44:88:af:55:9f:35:0a:b9:02:1f:46:e1:67:d3:16:a2:a3:f3:
89:67:29:11:91:3d:d1:e3:2b:1b:76:f9:cf:da:80:d8:d8:1f:
ab:bc:4f:b8:31:66:d2:ce:9b:c7:98:4c:c5:af:e5:19:66:b2:
8a:33:a5:15:83:94:4b:f3:ec:bc:ec:d8:d3:d8:d9:6b:db:70:
0f:76:21:82:1e:bb:91:a0:e2:c9:1a:f4:90:26:ab:33:eb:c0:
e3:ff:3b:91:a4:1d:62:3e:14:8f:78:c8:40:9c:a4:a7:2e:d2:
35:8c:d5:22:0f:f8:73:36:29:23:bc:cb:18:f9:b3:6e:33:c2:
b6:5f:a1:56:3d:67:6d:7d:be:57:97:1f:a0:a3:00:b8:9d:98:
05:5d:a8:0c:1e:0c:64:e1:a0:ab:07:1f:8f:13:3e:c0:7f:9a:
20:fa:41:5c:0b:f3:aa:01:38:91:15:f0:bc:8c:94:83:84:b7:
de:98:34:61:ae:61:4c:55:5b:80:89:58:fc:e5:a2:ef:cd:c9:
3d:d3:66:f2:55:f4:8a:6e:92:c2:98:b9:84:31:0c:fc:96:ac:
37:36:a8:d0:a3:29:5c:d7:0f:f7:d1:21:3a:ce:db:3f:03:b8:
95:2f:36:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:50:53 2025 by rpki-client