Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: xYA3hYTSa60Z0dOqHud/K7QymFs5vJo/UP9LyXQwedY=
Subject key identifier: 40:84:22:DD:4E:02:0A:D5:C8:E2:40:FB:DF:89:00:B5:8A:50:50:CB
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019A2854601121F48AA82FCCEFF109BD37A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 124E
Signing time: Tue 28 Oct 2025 01:00:09 +0000
Manifest this update: Tue 28 Oct 2025 01:00:09 +0000
Manifest next update: Wed 29 Oct 2025 01:00:09 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: p1pzFxcXMjNhBIJo+feQMdEeGu8fYAVf8RHIKHPeMq4=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:60:11:21:f4:8a:a8:2f:cc:ef:f1:09:bd:37:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Oct 28 01:00:09 2025 GMT
Not After : Oct 29 01:00:09 2025 GMT
Subject: CN=408422dd4e020ad5c8e240fbdf8900b58a5050cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:40:fe:cc:63:7b:56:d0:18:3a:2b:00:ba:
a7:5f:09:26:80:72:2f:d5:42:c2:28:5b:37:55:ec:
ea:d9:b1:8b:45:12:db:ef:84:a9:e6:c1:46:ff:8e:
44:e1:47:5f:9b:c3:bc:41:55:f5:a5:e3:b5:43:50:
c0:5b:cd:64:7a:de:5c:04:f4:c3:c7:db:31:e2:67:
ef:a3:91:af:0e:48:85:3c:b1:27:73:23:52:2d:c7:
24:c7:7e:19:ce:9e:65:da:a7:52:c2:0a:a5:d3:f4:
5f:d2:ac:41:7d:fb:1d:c2:59:ec:8f:16:ee:26:2d:
dd:21:ae:eb:10:b9:4e:97:f5:46:6c:74:36:a4:bb:
67:ea:71:5d:18:7e:7a:c3:a3:d6:bd:33:6d:c1:02:
f7:10:79:ab:6e:b3:9a:46:75:38:ec:6f:34:cc:db:
2a:09:d1:b7:79:f5:00:3a:29:7e:df:1a:07:2e:1f:
80:20:f6:20:a2:dc:ed:ff:f4:74:d4:22:d9:4a:18:
9a:9a:04:fb:5d:3d:47:ae:18:0d:c9:4d:c3:b9:7e:
7d:43:f4:af:53:9e:55:fb:87:0b:3c:58:95:0a:53:
a6:d4:59:9e:34:b4:73:9a:b2:be:47:0c:f4:ce:5d:
47:1a:31:32:ea:20:ca:99:2f:b8:e0:52:29:2b:d8:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:22:DD:4E:02:0A:D5:C8:E2:40:FB:DF:89:00:B5:8A:50:50:CB
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:73:d8:df:96:57:a8:6e:ec:62:89:d8:b1:68:be:c7:3f:6c:
27:55:21:46:ff:d4:89:83:4a:c6:80:b4:4b:86:d6:14:ae:5f:
5c:dd:73:fa:75:f2:60:b1:8c:19:b0:6e:6e:ec:4f:13:48:d1:
4d:2d:b6:c4:0f:a3:72:cb:39:3c:1e:53:73:2c:c9:9b:3b:0e:
51:2c:4b:38:08:f1:7d:4b:17:cc:18:3f:66:c3:c0:32:79:73:
d9:19:ce:1a:ab:f1:3c:8e:e7:d8:81:c0:18:65:59:8b:10:30:
07:89:dc:61:7e:c2:05:68:54:7c:d5:54:c9:11:dc:24:04:58:
e9:ea:4f:dd:3d:35:3b:a7:84:82:79:bf:de:97:c9:b4:2e:c6:
5d:a4:eb:fe:6d:20:68:32:cf:08:a9:b0:c0:a4:c5:bd:ec:a5:
d7:7d:9d:3a:88:ff:1b:b0:60:36:e8:c4:1a:34:9a:c9:fb:6e:
9a:69:09:0e:ce:81:c1:0e:75:54:3c:0d:a9:03:91:e2:cc:27:
c4:b1:f3:a9:b7:31:05:42:db:67:3b:a7:c3:87:7c:e1:ce:77:
ed:e9:01:e1:10:20:4a:b4:8b:5e:a2:ae:10:d2:c3:fc:ca:57:
90:00:43:44:a0:e8:ec:17:c7:12:ed:57:5a:2b:d7:76:11:ce:
fe:7a:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:44:27 2025 by rpki-client