Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
File: oJfWos9CiA2-v0KjJRkHohyRpKU.mft (raw, json)
Hash identifier: xqHm27fWr+de1yoTFr9IMGvrfvfBz7brEYO0EGQqmR4=
Subject key identifier: 06:B3:2B:1F:AE:C8:EC:7B:63:60:47:B2:1A:46:A2:FB:9A:09:1F:23
Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Certificate serial: 01984A0A4CEFC8C14E24DA3F61ECCE9231D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 04:00:45 +0000
Manifest this update: Sun 27 Jul 2025 04:00:45 +0000
Manifest next update: Mon 28 Jul 2025 04:00:45 +0000
Files and hashes: 1: 9xc32CvuOjNWHQB-PWYWWQOY_yA.roa (hash: PjbNQ/Rs2a2yPfO42XDBv2ntO3mtq/Wj2Yqgz9eO9jA=)
2: oJfWos9CiA2-v0KjJRkHohyRpKU.crl (hash: NKY/4IeNuKxmNtbfLQRblupNSBX5jFHP3UcuZFQrKt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:4c:ef:c8:c1:4e:24:da:3f:61:ec:ce:92:31:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Validity
Not Before: Jul 27 04:00:45 2025 GMT
Not After : Jul 28 04:00:45 2025 GMT
Subject: CN=06b32b1faec8ec7b636047b21a46a2fb9a091f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:39:0b:11:66:8e:16:5d:5a:d3:87:12:aa:
42:6b:46:11:2a:a6:3a:d4:69:1a:12:73:3c:d7:68:
f0:e6:ad:ec:d2:3d:20:f7:a6:9d:26:6a:60:a1:37:
64:96:ee:5c:dc:76:bf:f5:b2:d7:1f:74:bf:0a:f0:
ac:4f:99:4a:16:5b:8b:8b:1e:b8:5f:1f:37:cf:e3:
93:1b:e4:9c:eb:37:67:bc:5f:65:34:83:53:eb:6f:
32:cf:5c:79:49:46:b2:2f:23:62:7a:f1:32:af:6a:
3b:0e:e9:1f:d2:1c:13:45:ec:c1:79:fc:d8:be:8d:
a6:88:7d:c4:b0:8e:1c:29:9c:f6:08:36:ca:81:31:
06:e8:48:bd:ed:c3:1f:e9:7d:0d:7c:a5:ae:b9:28:
3c:a0:4e:54:3f:89:1e:0c:ce:5e:e8:f1:6d:42:37:
64:f8:5d:06:45:5f:cf:54:64:50:dc:73:70:77:18:
d7:d1:ab:44:a6:65:03:e4:f0:9e:07:72:c3:7b:2e:
01:71:be:e0:3c:26:a4:2d:5d:1b:8c:f9:1b:82:c0:
01:7a:b6:e1:be:05:be:d5:73:1b:cc:5b:de:3a:29:
56:a5:93:92:73:03:1b:f7:58:f0:48:70:09:67:8f:
72:6f:f8:b6:bb:48:4d:f7:a9:c1:f0:f5:eb:49:7f:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B3:2B:1F:AE:C8:EC:7B:63:60:47:B2:1A:46:A2:FB:9A:09:1F:23
X509v3 Authority Key Identifier:
keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1c:6d:87:5b:8d:0e:3a:d8:80:05:9e:6c:3f:3e:84:23:cb:
29:59:70:6f:3a:3a:5a:b9:ba:08:bf:df:b5:22:fc:72:f3:17:
5f:21:96:90:27:f4:20:36:6c:90:71:ca:c2:36:db:a5:55:89:
40:19:00:7d:fa:eb:9a:07:31:33:7b:25:a3:2e:3e:99:6a:cc:
5c:75:82:3a:82:ac:f5:db:13:86:70:12:00:fa:a8:e9:96:12:
3f:52:23:4e:e9:60:a5:18:01:3f:88:ef:c8:ac:ce:fe:d2:99:
86:ea:b4:2a:8d:15:39:41:ae:84:3b:6e:c6:a9:e4:04:d8:88:
5a:56:62:13:e7:e7:0d:2a:03:49:49:a6:2e:85:ba:e5:e3:66:
08:a9:d9:1b:8a:65:ff:4e:be:12:42:09:fe:ed:4c:20:45:bd:
cf:08:c5:49:34:58:80:82:65:2f:a0:e4:29:64:08:d0:4b:cd:
20:21:3c:c1:1f:8f:c1:41:07:4c:16:3a:96:ec:00:06:24:fb:
24:89:c4:d2:2b:48:57:27:ff:25:53:9d:70:0f:14:b1:1c:95:
2b:65:9b:4b:07:37:be:5c:ea:ad:33:8e:96:3d:5e:2f:40:cb:
bf:44:26:9c:14:99:14:27:12:3d:24:ab:22:89:1e:13:22:fc:
bd:93:3f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:30 2025 by rpki-client