Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File: oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier: OcpvQ4H1onCRzKw0+UJW0oAkZPXUpumlPSRYx1to5So=
Subject key identifier: A6:08:1F:2F:0D:76:E9:71:65:F9:E9:F5:B9:0B:F6:56:BC:13:AF:25
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial: 019845F6D21453DC1E4B5345E14F23DD0F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 09:01:00 +0000
Manifest this update: Sat 26 Jul 2025 09:01:00 +0000
Manifest next update: Sun 27 Jul 2025 09:01:00 +0000
Files and hashes: 1: _C22KYJjbT7k9Y0F086sSatuYjQ.roa (hash: sGeEeSXLg1Z6VuPUdF3Kx1VfqYaLdwKkzR5hHIgdTMo=)
2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: w9MqqyoDr+SEWL7G/4uKRqPtnHj3dMhpmILroNlf9MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:d2:14:53:dc:1e:4b:53:45:e1:4f:23:dd:0f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Validity
Not Before: Jul 26 09:01:00 2025 GMT
Not After : Jul 27 09:01:00 2025 GMT
Subject: CN=a6081f2f0d76e97165f9e9f5b90bf656bc13af25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:24:69:65:45:8b:98:40:af:87:95:ef:34:
01:a0:96:29:9e:b1:04:5a:38:5d:a6:e6:33:0c:f1:
96:9c:2d:63:2f:23:21:13:7a:be:1c:f8:62:d9:ee:
c4:c5:28:7a:ed:72:39:ec:9f:0f:f2:0b:8f:48:51:
c2:d5:c2:9d:0e:83:04:a9:c8:38:28:64:79:82:24:
f1:08:7b:a1:66:94:b3:61:df:0c:93:2c:a9:e9:31:
cd:b4:d2:32:4e:4d:ea:8d:80:18:e8:15:db:1d:04:
25:d8:52:3d:29:3c:5b:92:c4:56:04:e5:ec:fa:76:
c3:97:7c:38:d9:35:04:97:f2:53:f7:c1:c5:16:46:
4c:cd:47:27:cf:57:fb:67:66:74:b3:3b:70:c7:71:
3f:f2:28:d5:6f:10:44:fb:bf:4b:fc:33:ff:37:ba:
bd:b7:9f:ba:f7:c7:07:9b:97:05:bb:9e:57:b4:a7:
7e:20:02:fa:74:c8:dd:16:d1:d3:7c:4e:ba:4c:4c:
f0:f3:5a:1c:3d:2a:39:1d:9c:c0:15:5e:58:5a:72:
05:14:5c:b0:89:92:d5:d8:1f:16:1d:a0:30:89:bf:
d1:eb:32:cd:c9:27:88:b1:16:5d:8b:14:7d:5c:7e:
db:da:e7:2a:27:e7:b3:63:56:15:0d:2f:43:08:e8:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:08:1F:2F:0D:76:E9:71:65:F9:E9:F5:B9:0B:F6:56:BC:13:AF:25
X509v3 Authority Key Identifier:
keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:35:f6:cc:8e:ff:cc:b7:7b:93:32:21:68:18:cb:fc:f9:7e:
a6:4c:f3:eb:bb:10:5a:f4:20:2b:ea:7c:cc:5b:28:ec:c0:94:
0f:e2:34:87:e5:c2:98:68:92:17:65:64:b6:c4:17:66:23:07:
7b:3e:7c:2c:d5:92:5f:7c:a4:5b:94:6e:be:e4:39:8f:65:18:
ea:e7:a8:e1:b2:2b:ff:10:1e:47:97:b6:23:09:a0:b0:12:15:
08:d7:5b:5c:49:3a:ab:12:f5:81:64:83:b7:cd:8a:8c:f5:e4:
9c:74:02:6c:94:b1:8e:f0:b2:3f:cb:4e:53:a8:d7:00:5f:2f:
67:f4:6f:51:de:9c:64:d8:04:f1:94:d6:f9:81:ba:22:02:45:
de:7c:84:d2:e8:d5:06:6e:1c:ca:a8:6d:42:df:fb:c7:5a:16:
7f:24:ac:9a:d1:c3:dc:b0:21:24:95:f3:a8:e4:72:d7:e1:21:
0a:e2:91:72:ce:5b:c9:9a:b3:cd:fb:a8:c3:69:a6:df:d7:79:
cb:9f:ad:da:be:53:3c:88:a5:16:6a:57:21:2a:1f:8c:b7:cc:
d6:d8:90:54:2a:67:20:47:15:5b:fb:ff:2e:a6:7f:92:24:ad:
7b:87:00:57:03:78:89:f2:f0:fc:53:5f:17:b4:4b:72:c8:c8:
b6:44:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:23:49 2025 by rpki-client