Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: OlG4vUFHj/L8V4ZccRYE9RJ0czrBxdGm3LMneX7Bqsw=
Subject key identifier: 47:B6:42:30:9A:92:23:A1:CC:C3:47:EB:52:2E:D2:62:9C:A1:C9:F9
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 01984BC1BFD0A038E6226B3EAC3DF96D9932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 10A9
Signing time: Sun 27 Jul 2025 12:00:45 +0000
Manifest this update: Sun 27 Jul 2025 12:00:45 +0000
Manifest next update: Mon 28 Jul 2025 12:00:45 +0000
Files and hashes: 1: AItoBBXTr3JSVEunHoKYVScHBBA.roa (hash: bQ8pPRnSjhK+OHhk4/Jjzl0/46sUTmdeipylWtU4pOg=)
2: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: 2a8h/UkAFFriYwo4QJBwWT4lGngm9A7zyqJy84xhfX8=)
3: ublcR1AG8bTtIDegIl4XF5yKZ2U.roa (hash: EReps1m4UdW66UXSYxPeRRxVic46xc68n57xt40fmWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:bf:d0:a0:38:e6:22:6b:3e:ac:3d:f9:6d:99:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Jul 27 12:00:45 2025 GMT
Not After : Jul 28 12:00:45 2025 GMT
Subject: CN=47b642309a9223a1ccc347eb522ed2629ca1c9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:2b:14:00:3f:93:e4:32:8e:5f:26:7d:06:
a3:17:27:c3:c3:b9:b5:aa:f6:cb:67:09:c4:70:d3:
86:5d:bc:ac:58:db:d8:46:7c:79:62:26:40:42:e8:
c4:01:f4:c7:b0:7e:27:92:d1:f8:dc:af:8b:b9:64:
bb:58:aa:24:ae:26:de:66:1a:89:17:0c:9c:bb:68:
4d:5d:a2:6b:39:56:35:cf:34:0d:c5:e9:bf:e0:c6:
cc:71:01:52:0b:4a:3d:9b:87:02:a8:7e:bb:a1:87:
74:20:b7:c8:85:0d:5f:4e:61:d0:f6:b2:46:40:7e:
34:75:44:a9:9b:bb:f2:27:ff:b1:6a:3c:d7:da:1c:
15:12:d4:fc:62:46:78:cb:e2:df:3b:06:75:0c:2f:
18:c2:d9:aa:91:09:2d:66:7c:04:97:7b:8a:bf:54:
ea:9f:66:d0:a3:a7:3e:73:1c:60:a4:c1:e0:5a:5f:
4d:14:a2:ba:0a:91:1e:60:75:24:da:1f:35:f8:bc:
97:f8:17:1c:63:d5:7d:06:2e:a1:18:ae:20:de:1c:
9c:a8:55:a9:6d:ba:dd:91:cf:5e:36:5f:a5:42:7a:
3b:c5:db:cf:73:74:7c:2e:59:d7:25:8c:59:a2:8e:
d3:a0:66:fa:bc:6b:04:71:c8:cf:b6:26:ca:58:56:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B6:42:30:9A:92:23:A1:CC:C3:47:EB:52:2E:D2:62:9C:A1:C9:F9
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:04:84:2b:be:59:a9:9b:37:5e:c7:07:9a:04:93:7b:2b:32:
2e:f9:f7:f0:f1:2b:3a:41:57:e8:8c:2f:67:17:f5:c3:5d:84:
3a:1d:b2:74:ed:52:90:a7:82:b4:a7:9e:d3:76:25:4f:12:d3:
ac:4e:4d:7a:f7:e6:5b:3c:13:09:20:b4:db:b4:d9:c5:d8:07:
6a:cc:bc:d1:1c:b4:d4:ac:41:3d:7a:2d:04:ef:5e:25:7b:0f:
cd:b9:ce:67:fb:5f:4e:73:f5:ec:f2:01:8e:9e:d7:40:63:74:
b9:4a:73:a4:93:2b:b0:57:9e:24:67:d4:f0:95:4a:4b:0c:ed:
55:2a:f1:6d:03:f3:cf:bd:9a:7f:2c:3b:85:98:65:0b:36:5b:
5e:09:f0:1e:6f:e0:ec:1b:03:16:a4:0a:63:b6:08:e2:24:75:
aa:d7:6e:16:87:96:a4:97:70:ba:c9:eb:95:c8:ff:e2:9b:33:
b2:fe:4c:2a:43:68:e5:44:c0:9c:2a:5f:f9:ee:76:1c:c4:3f:
82:de:ad:9d:46:a8:0e:d7:d7:a8:cb:e3:ee:41:58:6c:2d:b4:
65:c4:b8:63:0b:1e:d9:90:71:78:2e:ca:d4:ee:3b:ce:20:bf:
3c:47:db:69:ff:23:f7:bf:7d:56:6f:74:c2:a2:79:63:40:d0:
3c:04:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:33:56 2025 by rpki-client